Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
File: SA488NEiV0x-ezvwNNDT0BPuvBU.mft (raw, json)
Hash identifier: wzdO/vad1XgzpS4BcX7zWZljRNv3+D6EsDodJE8kO7g=
Subject key identifier: 4D:80:1F:31:83:56:92:8C:A9:B2:33:49:73:E4:63:CE:29:17:FE:C3
Authority key identifier: 48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
Certificate issuer: /CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Certificate serial: 0198D5BBF03923E6C1E169FE2272A3A56A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
Manifest number: 0B51
Signing time: Sat 23 Aug 2025 07:02:00 +0000
Manifest this update: Sat 23 Aug 2025 07:02:00 +0000
Manifest next update: Sun 24 Aug 2025 07:02:00 +0000
Files and hashes: 1: 7y3mGX9ZUocL1OILQHSxmA8VkvM.roa (hash: 7a9Oiy3txQlGgm+QjKoKXHZkPBhpeO84dBEOXh2SIfc=)
2: SA488NEiV0x-ezvwNNDT0BPuvBU.crl (hash: xkOvc5IuQMY7J9lsToQ0fWaqBVmmGfACsEDquEouD+8=)
3: oU4Cohsb9kWDicLsugicyZN6s7k.roa (hash: YXEAgbcCjB/PmDtI8uql79S0hq5pcPIEdu0GZCtli20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f0:39:23:e6:c1:e1:69:fe:22:72:a3:a5:6a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3cf0d122574c7e7b3bf034d0d3d013eebc15
Validity
Not Before: Aug 23 07:02:00 2025 GMT
Not After : Aug 24 07:02:00 2025 GMT
Subject: CN=4d801f318356928ca9b2334973e463ce2917fec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:54:c6:93:fe:b1:8c:40:fa:8c:14:62:3d:ec:
35:3a:57:67:c3:79:74:e3:9b:e5:6c:09:f9:98:48:
a3:0a:b0:47:54:e0:67:2c:54:3e:39:45:80:fa:21:
d2:13:f5:f2:9b:b4:31:f6:1f:d6:f0:fc:f9:93:a2:
d9:20:f3:50:08:2d:fa:49:6d:06:4d:9b:cf:d5:1b:
56:22:c6:23:51:63:f2:ea:2b:42:29:96:aa:29:b4:
f2:67:1a:13:00:3d:25:65:a6:f4:22:ce:21:4a:2f:
df:f6:44:ba:87:d6:ba:b0:cc:e9:57:c6:84:d9:03:
40:6c:4b:7f:53:85:58:5e:4a:49:da:59:9e:88:1c:
97:33:a6:4e:ad:12:80:5f:0d:57:0c:62:f3:c4:2c:
b2:38:54:7b:a2:77:e8:d8:8c:30:9d:26:73:a5:bc:
6e:c4:c6:3a:97:6b:d8:cd:0c:38:56:d9:52:a4:14:
3d:f8:4c:eb:22:a7:28:be:71:13:00:a2:d2:dd:90:
9f:2b:30:c5:71:06:99:b7:95:2a:94:ca:9b:fd:46:
5d:fb:d9:ab:44:6d:ff:e7:33:8a:af:ab:b2:56:0d:
70:b4:65:ea:86:ca:c0:ef:de:05:3d:3b:34:7d:ee:
ea:a9:0e:53:73:4c:d0:51:1b:f9:16:e6:e2:03:88:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:80:1F:31:83:56:92:8C:A9:B2:33:49:73:E4:63:CE:29:17:FE:C3
X509v3 Authority Key Identifier:
keyid:48:0E:3C:F0:D1:22:57:4C:7E:7B:3B:F0:34:D0:D3:D0:13:EE:BC:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA488NEiV0x-ezvwNNDT0BPuvBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ba66f2-de3e-4de8-bd65-22f23fe29287/1/SA488NEiV0x-ezvwNNDT0BPuvBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:dc:65:64:33:25:6a:6d:a9:f4:85:ca:5e:6f:c4:b2:52:4c:
db:88:7c:ca:49:89:89:06:4a:3b:44:c5:8c:81:69:41:0d:89:
87:34:88:32:29:e3:f1:94:33:07:72:22:8a:04:6d:c4:dc:df:
7b:58:b2:df:df:8f:df:14:90:db:c7:96:08:a1:35:e8:dc:a3:
48:1f:a8:60:be:14:4a:67:4c:20:d4:30:80:55:6d:ca:99:b5:
50:3b:c4:f8:54:c8:a2:0f:30:5c:90:82:31:ca:09:c4:b7:92:
01:51:1e:4a:dc:1c:7c:4b:77:31:8d:a4:46:38:40:75:8b:68:
33:95:4f:e2:46:0b:c7:bd:bb:4b:79:ad:99:40:af:7f:84:16:
8a:75:a8:2c:95:27:bd:0e:1f:17:19:39:c8:f5:79:e7:1d:bc:
d6:35:0f:e1:70:51:f2:7e:a5:85:28:78:17:39:88:bd:ee:e6:
92:c4:e2:ab:c7:81:85:67:7a:56:2e:41:6d:69:c7:20:da:7b:
e1:c3:e6:17:6d:0e:2d:b1:b4:9d:c0:59:67:78:8f:40:ff:79:
7e:8c:e5:da:fb:1b:f6:b9:39:16:fb:ba:75:63:4f:cc:0e:50:
37:bf:48:bc:02:cb:10:3e:a9:c2:86:b1:07:7f:7d:e0:5c:f6:
28:38:40:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:30 2025 by rpki-client