Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
File: sxagaE0dOLrPQzjCsB2ztBNw60U.mft (raw, json)
Hash identifier: EJzgh+BkBx+JRuGn7a1rNJT3tb3WzudCPBi1ukihQnc=
Subject key identifier: 2E:11:CD:79:B1:B8:78:12:C7:9B:CE:C0:F1:69:8C:8B:87:7D:67:0C
Authority key identifier: B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45
Certificate issuer: /CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
Certificate serial: 0198D472DB32AEE9B9775B641AC867705CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
Manifest number: 04C7
Signing time: Sat 23 Aug 2025 01:02:33 +0000
Manifest this update: Sat 23 Aug 2025 01:02:33 +0000
Manifest next update: Sun 24 Aug 2025 01:02:33 +0000
Files and hashes: 1: pBOBaEWXkYoN8gJBhZMkD24bH8M.roa (hash: yYFHTbbCS/jQtr+ov28WxXyLXELdV4Do2QZ+inX5RdA=)
2: sxagaE0dOLrPQzjCsB2ztBNw60U.crl (hash: 1vdBvNWohi8tLp3vgKF1G1UVIcuOqqTM6je0+P4rfaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:db:32:ae:e9:b9:77:5b:64:1a:c8:67:70:5c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
Validity
Not Before: Aug 23 01:02:33 2025 GMT
Not After : Aug 24 01:02:33 2025 GMT
Subject: CN=2e11cd79b1b87812c79bcec0f1698c8b877d670c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:ba:54:cd:fe:db:af:af:7b:f2:e5:8f:d3:
1b:30:57:21:56:39:97:93:d4:86:89:c0:4d:b9:b7:
58:11:f6:2d:16:c1:cc:82:12:a3:f1:42:19:dc:98:
8a:18:9a:14:fb:0a:51:7d:ef:b0:62:4d:5d:46:b8:
d6:32:76:3d:fc:78:96:78:77:2b:12:42:37:68:72:
86:4b:4f:21:67:aa:be:2a:7b:4a:5c:0c:7e:fa:3d:
ee:60:ba:b8:b6:9c:c7:6a:55:e1:85:76:c5:c4:8d:
27:7d:4d:2e:c5:38:b1:ce:ee:d5:7f:f9:36:c7:02:
eb:e3:99:3f:b9:20:c4:cf:61:b3:2c:c3:54:32:79:
4d:0a:8d:72:a0:f9:8a:57:dc:5b:f3:e3:13:b1:4c:
31:59:63:21:b3:c9:0f:c4:23:4b:ec:56:c0:e0:9e:
74:4b:8f:43:26:b6:8d:4e:26:ad:2a:8e:d6:c2:cd:
5e:18:d7:b6:48:1e:a4:11:8f:ad:9d:4a:45:f9:d9:
f1:55:47:c7:38:4e:00:f5:1c:82:77:5a:5e:7a:f2:
59:47:3a:33:c1:75:af:01:a1:61:40:bb:0d:ca:7b:
63:59:c6:76:26:1e:56:f4:ed:aa:a1:23:c9:7f:58:
f4:bd:38:cb:1a:de:2b:6c:06:0a:cd:ab:a0:2d:bd:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:11:CD:79:B1:B8:78:12:C7:9B:CE:C0:F1:69:8C:8B:87:7D:67:0C
X509v3 Authority Key Identifier:
keyid:B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:40:0f:a2:6a:fd:81:92:53:b3:7a:4a:0c:26:2e:ba:4e:34:
be:08:d3:a4:fb:1c:3e:ba:99:fc:50:98:5d:d0:fc:8b:08:7c:
88:ff:5f:b9:07:02:92:c2:c3:5a:f6:d4:db:77:8d:bb:ab:a2:
91:37:46:18:cd:aa:38:10:30:63:01:dc:07:db:cc:39:69:ce:
ad:70:8c:4e:f5:dd:b2:fd:24:ab:6d:8b:10:78:15:dc:69:17:
fe:5b:cc:42:85:c4:b7:1f:1e:3a:bf:ee:2c:4a:c4:3d:6a:d6:
7f:8b:d0:83:c7:ed:55:1b:5b:95:74:a7:e0:05:16:10:cf:b2:
83:9f:89:9b:51:cd:11:d9:8c:b7:e2:4b:4d:28:1e:ca:6f:ba:
2a:30:0a:39:c9:31:bd:55:27:94:54:a0:d5:59:75:4e:c9:42:
72:aa:d8:c6:fa:70:ff:4e:32:e4:60:94:16:c3:8a:d6:8a:7e:
c5:0e:ff:20:d3:38:e4:96:3f:dc:2a:92:bd:fd:91:23:26:f6:
78:bd:57:0a:14:06:55:14:45:f8:18:1c:a5:6b:bd:f5:11:9a:
60:f7:58:75:78:e2:28:56:51:1b:76:9a:74:00:59:12:06:85:
dd:c8:5a:1e:ee:1a:1d:ae:67:f2:0f:a5:0a:fe:fc:d7:c7:03:
6a:01:5a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:46:45 2025 by rpki-client