Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
File: SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json)
Hash identifier: KDzRtZ0n7dN+na/Eo0bVSWxzGlyoH465bvPmJfBmW0k=
Subject key identifier: E9:62:73:A8:DE:BE:CA:E7:D2:73:D1:D9:D5:11:30:DF:41:27:3B:79
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial: 0198D65FDFC37A9FAB4191003BB304F8BF79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
Manifest number: 0F1F
Signing time: Sat 23 Aug 2025 10:01:04 +0000
Manifest this update: Sat 23 Aug 2025 10:01:04 +0000
Manifest next update: Sun 24 Aug 2025 10:01:04 +0000
Files and hashes: 1: Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa (hash: MQQ4lqV14DgsP9PSgDv3Sm3nFuHvBvMEPlVur5pwdsw=)
2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: peKFiwi/Z9aNFxiaBuvT0eqcHxxgxB44LNF5cw2wkc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:df:c3:7a:9f:ab:41:91:00:3b:b3:04:f8:bf:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
Validity
Not Before: Aug 23 10:01:04 2025 GMT
Not After : Aug 24 10:01:04 2025 GMT
Subject: CN=e96273a8debecae7d273d1d9d51130df41273b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1c:32:67:5b:43:c2:99:db:32:24:2d:3c:09:
33:cc:6e:a3:f1:08:f1:15:c5:1b:69:7d:ae:4d:16:
57:ed:aa:82:d9:54:60:8f:94:52:28:a2:f5:b9:bf:
08:0d:fd:05:79:2d:6d:ac:7c:d4:15:79:0d:95:46:
ab:78:46:26:44:b3:ba:25:ff:11:82:80:bf:ef:d1:
34:c2:b9:0e:9b:13:b7:61:01:58:07:ae:6f:a1:8b:
55:0c:c0:98:2d:b9:58:b5:56:7b:61:c9:5a:8c:44:
4c:72:de:eb:8f:33:30:5a:82:61:03:67:26:44:79:
f5:e1:cb:d4:64:ad:4d:ab:88:e9:f8:81:e4:2e:9b:
b9:94:cd:5d:1b:0f:0e:95:bc:60:52:d0:54:60:af:
a9:9e:e0:f9:30:f5:21:88:5b:ae:e0:22:1f:0f:96:
9a:09:d2:74:f5:b1:47:67:44:b6:34:3a:fb:71:51:
6d:b0:d7:02:17:60:85:94:86:a9:06:93:af:cf:b6:
46:5e:b7:05:53:3c:55:4e:ee:38:de:dc:87:69:21:
9b:ef:ec:a5:eb:be:ee:7f:a9:39:c7:78:be:73:2b:
2a:2f:64:f5:74:29:02:9b:0c:b3:e2:f5:55:a9:b4:
f2:84:e3:83:c3:87:a7:73:d8:13:a0:2e:44:3a:59:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:62:73:A8:DE:BE:CA:E7:D2:73:D1:D9:D5:11:30:DF:41:27:3B:79
X509v3 Authority Key Identifier:
keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f4:74:bc:b2:b9:6d:2b:f5:79:f0:9d:6d:37:56:0c:9e:ea:
6d:e0:f1:7f:cc:e1:65:16:a7:d6:bc:f9:85:f7:2a:11:7a:72:
ca:20:38:97:f8:0b:3c:8f:41:70:36:ea:e9:d9:92:48:92:58:
3e:94:8d:49:d6:35:75:da:2d:b3:83:b9:45:25:ad:c5:9a:76:
e8:2a:de:d9:b5:e9:7e:a6:cf:f8:df:b7:c3:ce:ff:da:1b:ed:
df:0a:94:1b:cc:27:d3:9e:2f:07:60:75:df:f1:36:6a:6c:17:
22:c4:24:65:c5:82:23:09:dc:cd:7a:99:c5:cf:58:70:5b:1b:
67:0a:e3:4c:0f:61:15:43:c7:ae:5c:8c:48:07:3e:fe:8b:6c:
c1:62:4c:8d:62:78:2f:7a:49:58:5f:0d:10:98:76:45:7b:84:
85:bf:2a:3b:1e:8b:8a:fb:d7:91:86:08:9f:f7:45:2c:eb:96:
fb:85:08:60:f1:0a:b1:f1:28:a9:f3:3b:88:97:07:6e:4b:51:
6a:a8:ea:00:f6:cd:e5:e7:12:4e:06:11:a5:8e:fc:c6:70:03:
f9:71:fe:be:2d:1b:b1:95:cc:d6:2d:13:b2:79:0d:32:7e:6b:
fa:c9:19:3c:c6:f6:b1:c8:90:da:f0:ae:0d:4a:85:42:e2:48:
cd:26:ee:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:58 2025 by rpki-client