Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
File: SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft (raw, json)
Hash identifier: IF8lqvJj3qoaaQkBMGIb4argfOwCHYiPrstUJTCb2gk=
Subject key identifier: 0A:38:5D:A9:55:E3:16:A7:1D:D2:26:76:74:DE:47:C5:6A:54:7F:D1
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial: 0198D65FC98CCB2A90C5D7D7AF87018E8707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
Manifest number: 0D66
Signing time: Sat 23 Aug 2025 10:00:58 +0000
Manifest this update: Sat 23 Aug 2025 10:00:58 +0000
Manifest next update: Sun 24 Aug 2025 10:00:58 +0000
Files and hashes: 1: SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl (hash: 0y/agpKPMSXUxe+0pxEsUYzofnhkz9+jVl0lX3LES7E=)
2: q3FDx21p8smEfAYPTo0ZQLgPkqo.roa (hash: 2Du6IDXw8hGPYtGe+KE8+hTPSOOHZMlNjWnrWGKbnPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:c9:8c:cb:2a:90:c5:d7:d7:af:87:01:8e:87:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
Validity
Not Before: Aug 23 10:00:58 2025 GMT
Not After : Aug 24 10:00:58 2025 GMT
Subject: CN=0a385da955e316a71dd2267674de47c56a547fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:a4:1d:cc:6c:b3:ba:40:a0:3c:82:58:e2:
85:41:f7:60:ff:0d:26:cc:93:db:70:a9:95:04:09:
3c:4e:3d:6d:9c:c5:be:43:23:84:6e:b6:7c:32:09:
9c:2b:35:94:4d:92:7e:f4:81:5e:db:fd:78:b3:4b:
5e:11:e4:cd:d3:78:17:4b:1a:f6:01:ff:4c:87:1e:
b3:fb:98:f9:92:a0:1e:41:dd:f8:dc:59:c3:cb:2a:
35:49:9a:f1:45:26:45:69:a2:ff:30:12:c5:7d:5a:
d4:6b:d9:a4:9a:1a:1e:8a:af:f7:ed:76:38:97:c4:
39:38:b5:dc:35:3a:86:d8:cc:59:c5:32:4f:77:a6:
89:3c:11:e9:9d:6f:fa:a6:60:af:a8:0b:3a:d0:6a:
52:e1:8e:cc:5c:f9:a5:b8:cf:ea:93:83:2e:78:0e:
f9:24:1f:10:73:fb:d1:4d:5a:98:12:49:da:97:82:
fd:6d:1e:d2:d0:6c:e7:a6:5b:e4:88:38:6f:c5:28:
16:31:0f:2b:f9:b4:d8:6e:59:8e:8b:5c:48:27:c4:
3a:61:1d:80:15:70:22:fa:dc:b3:50:08:69:73:15:
63:4d:8c:d1:46:c9:be:b7:30:a7:db:34:de:f9:1f:
33:a9:0d:67:67:c2:bd:b6:16:4f:71:58:63:04:67:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:38:5D:A9:55:E3:16:A7:1D:D2:26:76:74:DE:47:C5:6A:54:7F:D1
X509v3 Authority Key Identifier:
keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:71:f2:65:0f:14:78:2b:9d:30:78:5b:97:1c:9f:b9:8a:11:
16:c5:6b:2e:61:bf:14:4e:72:ba:15:e9:18:e9:23:24:b7:6b:
33:da:67:23:aa:eb:7a:5b:ee:5c:5d:82:ab:35:15:99:b3:be:
f6:4f:8d:cd:92:67:12:cf:1b:70:f3:e4:a0:d3:32:3b:ec:ad:
4c:85:94:6d:09:e7:63:73:ec:46:04:38:7e:78:64:88:a1:8c:
3d:cd:2e:40:0e:b2:7e:dc:43:b7:66:37:cd:85:f1:bd:0d:40:
a2:9b:ee:92:44:70:2b:e0:cc:2d:13:95:c2:82:95:bb:30:0b:
2f:96:0f:e7:c4:53:f0:08:ac:a8:52:20:1f:f1:40:d0:a6:91:
fa:1b:57:d6:d6:6d:e4:34:1c:51:dc:88:d5:fc:58:7a:d2:14:
b8:77:c1:cc:a3:f2:f5:fd:82:73:87:e2:1f:de:e0:32:21:02:
fe:46:eb:90:c7:bb:28:1f:36:85:8e:f0:51:74:84:cf:cb:d4:
84:1c:64:21:ea:98:62:11:25:d3:ca:9e:83:3d:b8:77:f4:16:
5b:1d:b9:6b:5c:ee:6c:85:db:08:da:a1:ab:dd:56:26:f2:37:
87:57:8e:16:bb:69:eb:90:1b:68:79:56:f2:c8:f3:f4:ea:31:
45:e6:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:44 2025 by rpki-client