Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: RXgobUc0SoQcoQOxJK1WhBJbS2DvIwRMPZliOu4ULCw=
Subject key identifier: 14:4E:EC:24:2E:78:FB:35:F9:92:4F:C3:05:DC:94:20:B2:75:8F:1E
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 0198D54E4B10B71F6E09E9303A6776283505
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 1601
Signing time: Sat 23 Aug 2025 05:02:14 +0000
Manifest this update: Sat 23 Aug 2025 05:02:14 +0000
Manifest next update: Sun 24 Aug 2025 05:02:14 +0000
Files and hashes: 1: 2_e31xA0ke3Styc34JcGbffddwc.roa (hash: SiZtRmCeZumulAZS0QR6GtmaGOYbZYgtQLDnc2RPi2w=)
2: N3VmvFOmqCre_Lx0IfYjn2v2b6w.roa (hash: bp1wfw2pyxZJdYCZm2jvav72UAXwLNhJfCLzE6u3iuo=)
3: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: VPieIVks6oheGFxqySqLwlP3bIUl9z8ZbVPmCODxKM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4b:10:b7:1f:6e:09:e9:30:3a:67:76:28:35:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Aug 23 05:02:14 2025 GMT
Not After : Aug 24 05:02:14 2025 GMT
Subject: CN=144eec242e78fb35f9924fc305dc9420b2758f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6b:af:46:a2:e9:91:0e:e3:2c:2c:27:8c:8c:
c4:38:e7:b5:cb:c4:d5:66:59:27:8f:89:f1:02:45:
85:30:86:33:50:37:bf:76:1a:8a:61:3f:6e:5b:a0:
22:28:15:27:19:e4:42:6a:1c:22:8e:60:8e:1e:44:
30:ff:4e:43:b6:9b:cf:59:d4:54:a1:dc:e0:da:42:
b3:96:21:b9:d0:7c:50:88:cf:88:0a:8b:32:90:1b:
6e:af:01:0f:47:9c:92:fc:c0:74:08:c2:00:29:94:
a0:eb:b8:8d:39:48:71:6d:26:5c:0b:51:99:73:8f:
33:c3:bc:09:38:de:35:f1:53:e1:f9:83:85:73:2c:
6d:26:e3:65:6d:3c:5c:8b:a2:60:fe:90:d5:fa:36:
5a:b2:94:7f:b0:e5:eb:68:0f:bd:b3:f2:86:0e:bc:
c5:33:bd:9f:74:dd:3e:0c:95:52:01:6e:89:1a:12:
99:0c:bf:2c:82:ef:e5:4d:d5:ff:62:75:eb:79:13:
57:c5:fe:7d:cd:bc:d4:7c:81:97:18:2a:5c:23:45:
61:d3:aa:7f:00:5b:f2:3e:0c:db:45:1f:d3:21:98:
e5:ff:e8:9a:f2:21:bd:ff:c7:e6:66:b8:b5:40:a3:
da:bf:5e:0c:34:3b:72:df:4d:ec:ed:90:e6:91:3f:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4E:EC:24:2E:78:FB:35:F9:92:4F:C3:05:DC:94:20:B2:75:8F:1E
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a1:e3:42:d4:1f:a2:a2:cc:9a:e9:f3:92:71:df:c0:46:07:
5e:a8:91:35:ca:3a:71:e0:f2:2c:98:da:66:b0:97:6c:a4:37:
c1:1b:e7:c6:55:e4:53:58:d0:80:67:b1:08:fd:70:b4:bf:98:
21:c6:61:4f:7c:63:bd:8f:fb:31:f7:a5:0e:f2:63:f9:ae:87:
81:9d:61:c1:12:40:43:67:1c:43:79:b2:a1:3d:f7:c3:11:91:
60:15:cf:1e:1b:df:6c:32:33:f8:49:a1:94:3c:24:7b:0e:60:
d8:23:f0:43:13:88:6d:67:cd:c6:70:95:6d:97:92:c7:8a:e4:
2d:23:8f:bd:67:e7:91:7e:77:99:b7:5a:5a:09:e1:a3:28:9a:
f7:b9:25:9a:0a:93:f4:dc:38:1c:48:07:92:6b:3d:8f:de:32:
72:6c:2c:99:07:3e:5f:23:9e:c0:16:53:14:0f:ec:e3:a8:c5:
0e:ad:0d:c3:e6:c4:a8:97:90:2a:fe:67:37:09:3b:d5:1c:18:
27:80:39:08:4a:f8:b9:b6:8f:cd:e6:44:ac:ba:91:e3:0b:f7:
44:38:8a:1a:49:fb:21:73:b8:12:22:22:64:c5:91:e9:93:d5:
49:f2:38:f4:5a:f9:5f:0e:bc:2b:79:10:8b:20:9e:2b:d9:86:
88:e8:5b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:13:09 2025 by rpki-client