Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
File: SXioZBznhb40aFAwUncj5f3OVio.mft (raw, json)
Hash identifier: iVzXIVGdy6k+QqyaqgYh+iaMGRQh1DqQC3Izc22Tp4k=
Subject key identifier: C9:45:37:37:82:7A:E5:9B:68:AC:BD:35:FF:5E:4A:ED:E8:14:A4:EA
Authority key identifier: 49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
Certificate issuer: /CN=4978a8641ce785be34685030527723e5fdce562a
Certificate serial: 0198D8850211DEF10D90F5F3EF60703A0ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
Manifest number: 0687
Signing time: Sat 23 Aug 2025 20:00:52 +0000
Manifest this update: Sat 23 Aug 2025 20:00:52 +0000
Manifest next update: Sun 24 Aug 2025 20:00:52 +0000
Files and hashes: 1: BCD_tpHD4CbGfbV_PdrLa7vTpXk.roa (hash: 3ZjEUHk0H2GaQYj5jwvFZHg7bwJy5JXMVYVGmhkBhZA=)
2: SXioZBznhb40aFAwUncj5f3OVio.crl (hash: v4ZHPTbCPnoixxuS4p7wrH4p0tomLVCcyGCDfrMj7pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:85:02:11:de:f1:0d:90:f5:f3:ef:60:70:3a:0a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978a8641ce785be34685030527723e5fdce562a
Validity
Not Before: Aug 23 20:00:52 2025 GMT
Not After : Aug 24 20:00:52 2025 GMT
Subject: CN=c9453737827ae59b68acbd35ff5e4aede814a4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:58:03:90:c2:68:9f:34:97:26:6f:36:29:da:
ee:8c:6c:9d:52:58:c8:6b:20:2d:1e:b7:6a:cf:3a:
63:c3:45:fe:2e:38:95:a9:14:7f:fe:e4:58:ca:9b:
36:f8:29:ff:1b:e3:68:96:2f:6e:78:cb:61:f1:c1:
e0:02:cc:93:d2:30:73:bf:b1:34:72:2a:7c:55:ef:
db:e8:05:e0:24:e7:d2:24:5d:63:f9:2e:7f:72:47:
03:6d:10:3c:44:58:6f:e0:2d:e2:56:c6:75:fe:53:
16:aa:0f:b4:64:5b:74:90:d8:ab:93:1a:8b:9f:84:
7b:59:18:30:72:08:29:bc:73:ed:7a:63:44:0d:c3:
4a:b9:6e:b8:3a:65:34:93:dd:40:bd:04:78:74:1e:
27:79:19:7c:1b:6e:83:71:14:87:1c:98:5f:9a:6a:
72:ab:93:af:eb:a1:99:d5:4a:29:23:5e:5e:5c:d3:
e1:85:4e:99:27:50:65:f5:cb:e2:d2:32:9b:ba:12:
51:65:fa:97:a1:21:0c:d3:63:54:8c:03:c2:e5:07:
34:eb:4a:10:24:50:55:f7:37:74:42:c9:3c:ec:c0:
18:fe:ac:fb:07:b1:ea:16:0f:12:e6:8c:7f:a7:55:
5d:0d:76:74:4a:2d:da:c6:22:cb:28:eb:0d:b8:ad:
51:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:45:37:37:82:7A:E5:9B:68:AC:BD:35:FF:5E:4A:ED:E8:14:A4:EA
X509v3 Authority Key Identifier:
keyid:49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:91:55:41:00:8c:ad:84:2c:3a:3d:fc:25:81:5a:1c:3e:03:
b3:b7:b5:b7:55:c8:90:6b:94:a5:83:8a:2a:f5:a5:6a:14:51:
c2:48:91:de:cf:27:16:f3:79:c0:b0:96:6a:c2:9c:ac:f2:65:
57:1e:8f:9e:cf:dc:66:96:2c:3f:59:a8:78:39:0c:30:61:11:
54:49:d5:f0:ee:16:35:5e:ac:0d:cb:cb:34:9f:2f:6a:62:4d:
74:30:d6:8f:59:0b:7e:b1:78:9b:77:e2:ef:67:26:e2:5a:df:
06:d2:66:40:be:c1:a5:2c:11:42:11:1d:87:c8:cd:99:73:48:
54:ee:cb:0f:cb:5b:8e:6a:5a:a9:2e:b5:6c:da:65:67:db:b3:
1f:08:ef:1a:3f:aa:23:d3:2e:ba:05:5a:f2:9a:a3:72:39:44:
46:6a:f1:36:eb:ea:2e:4d:89:4d:d2:99:89:78:45:91:eb:34:
11:95:03:47:be:54:99:73:04:b5:c2:95:8f:1a:24:48:15:c2:
5a:79:a9:77:ee:e9:1c:24:64:37:e1:24:76:80:7b:ef:1c:11:
73:5c:56:0e:33:e0:d5:d6:65:da:04:00:25:62:e9:57:d3:e6:
1d:a2:23:3d:7d:e4:fd:63:c0:b7:bc:eb:33:ba:bd:4b:00:85:
f5:58:30:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:54:34 2025 by rpki-client