Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: nAchFVKGfeo5G7McmjR8K8EbYU7B03AwCNDuT+ThTdk=
Subject key identifier: 12:A4:38:F1:EC:8D:D1:C5:20:9A:B1:1B:7C:38:43:94:3D:3D:44:06
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 019A02FEED13C5E2F8A9708DD340A1609D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0BED
Signing time: Mon 20 Oct 2025 19:00:52 +0000
Manifest this update: Mon 20 Oct 2025 19:00:52 +0000
Manifest next update: Tue 21 Oct 2025 19:00:52 +0000
Files and hashes: 1: 7y3mGX9ZUocL1OILQHSxmA8VkvM.roa (hash: 7a9Oiy3txQlGgm+QjKoKXHZkPBhpeO84dBEOXh2SIfc=)
2: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: cvVjNTgxwgcPmbaBBXLZzI5NG0hjkSg+7qETg10hk6s=)
3: oU4Cohsb9kWDicLsugicyZN6s7k.roa (hash: YXEAgbcCjB/PmDtI8uql79S0hq5pcPIEdu0GZCtli20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:ed:13:c5:e2:f8:a9:70:8d:d3:40:a1:60:9d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Oct 20 19:00:52 2025 GMT
Not After : Oct 21 19:00:52 2025 GMT
Subject: CN=12a438f1ec8dd1c5209ab11b7c3843943d3d4406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:55:58:f6:a5:84:af:f3:4f:be:38:08:07:
71:0f:45:1a:c9:87:27:f6:ed:1f:4d:1f:66:9d:4f:
c9:b8:e2:7d:e2:ab:ee:24:c8:54:b6:10:1e:9d:f6:
6a:c5:78:98:ee:70:04:20:53:74:31:84:1b:2e:ec:
ed:d4:3a:c1:16:62:b2:33:93:f7:b6:4c:c6:68:0b:
8d:c7:0f:6f:58:41:ee:64:20:85:de:4b:d2:c4:ac:
96:e8:77:01:04:20:cd:0a:cd:f9:d4:da:d6:ee:5e:
ed:53:bb:d5:1b:5d:6a:fe:35:fc:9c:d3:09:c7:4f:
ea:3b:ad:0a:e5:e1:24:ee:df:d2:20:46:63:97:f9:
b7:b2:22:30:d4:da:e8:1c:20:46:29:cb:21:6a:3d:
5e:76:c3:73:2a:89:3e:81:92:ea:32:51:a4:cd:a3:
ae:19:fb:4a:ce:95:d7:d5:d8:4e:6f:1a:97:56:a4:
8d:05:d1:ef:d3:8f:ce:62:bf:d8:9d:49:17:f3:88:
ac:a7:de:42:a3:bd:74:12:d2:70:e9:55:a5:dc:c0:
cd:64:29:a8:15:6c:e9:61:22:89:76:ff:0a:a7:f4:
27:19:91:02:7e:7b:84:f8:c5:a8:14:0a:90:1a:75:
1b:53:b7:b3:ce:d4:81:6e:8b:1d:b4:de:90:51:50:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A4:38:F1:EC:8D:D1:C5:20:9A:B1:1B:7C:38:43:94:3D:3D:44:06
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b6:8f:b8:ab:49:f6:28:e1:13:dc:06:62:45:13:f0:97:5d:
a0:13:f4:d2:f5:36:6b:96:96:c2:b3:10:e8:76:bd:87:86:7c:
76:37:47:be:7e:16:5e:d9:09:dd:fd:36:ab:1f:9e:f7:13:28:
e8:2a:b7:f8:86:63:0d:fa:a5:9d:57:3b:cb:13:53:77:27:12:
6e:e6:f3:2d:51:81:8f:c1:85:f8:d7:37:c3:5c:11:20:ec:cc:
ba:42:76:42:7b:1f:cb:e4:31:00:a7:d9:06:19:4f:20:d7:6a:
4d:e0:2b:ba:21:1b:c3:d0:c5:99:38:0e:8d:ef:1e:52:0e:bc:
47:b7:ad:86:dc:77:dd:1e:83:a8:0d:ae:8f:61:ba:fe:92:6b:
64:35:96:8a:82:2f:7e:52:ec:02:b8:1e:b9:88:06:60:1f:ae:
65:5e:8c:ec:48:de:96:06:4c:cc:e6:f8:cd:6b:a7:82:d6:00:
7b:e3:4d:ea:93:e5:72:99:c9:83:ef:e6:9f:9f:43:86:33:d5:
49:02:dc:fe:a7:66:5b:e3:02:4f:da:bf:f6:31:b1:d2:e1:e8:
1d:c8:41:e1:06:50:4e:94:cf:28:0e:dc:b7:d2:62:7f:47:73:
75:a7:bb:4e:c8:a7:d0:72:fe:54:ca:98:5c:d4:d6:d3:27:64:
78:0b:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:11:23 2025 by rpki-client