Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
File: SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft (raw, json)
Hash identifier: BwUxiuPQj6lU0gcOvOk4QY16GnmFT7aR3xyWb34JsxE=
Subject key identifier: F1:64:0E:53:20:25:2E:21:F9:4A:2C:69:50:39:17:1F:E4:2C:F9:DF
Authority key identifier: 48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
Certificate issuer: /CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Certificate serial: 0198D4E0AF0C92D834078FCECA19FB437221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
Manifest number: 0628
Signing time: Sat 23 Aug 2025 03:02:31 +0000
Manifest this update: Sat 23 Aug 2025 03:02:31 +0000
Manifest next update: Sun 24 Aug 2025 03:02:31 +0000
Files and hashes: 1: 3klZTNM9YhJqZUNp3PJkFRczFX8.roa (hash: OyXgZ5l4rO5Wt2TcoTvX9gJZ0hgPAdu2wTU0n6/gZoU=)
2: SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl (hash: 7wTzTUPUYOF6yKvrcL9m3VThTi/SLzy1/FUusi2ogwM=)
3: W0AAJRLr6gi2r74kS95DxTYGfTw.roa (hash: MH+HQqYFMBeGJJqR0jYHA1u1MAdvWa+AHHutk6W2MvA=)
4: r0aCHKZqLV95OV5gwTfYdhHbA6Q.roa (hash: xjRrpFDO8g9sZNIp8GQ1hogAG1em04ZcPXgm2d8N7a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:af:0c:92:d8:34:07:8f:ce:ca:19:fb:43:72:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485ddb678c4c0d0c488efd3b8367142189f3358a
Validity
Not Before: Aug 23 03:02:31 2025 GMT
Not After : Aug 24 03:02:31 2025 GMT
Subject: CN=f1640e5320252e21f94a2c695039171fe42cf9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:8b:0a:f4:d5:9e:1e:19:2a:79:4a:f7:a5:
62:3e:e1:c2:35:36:4a:f6:67:55:d7:eb:ab:e9:bb:
59:4c:40:52:1e:e0:6f:c9:cc:ca:1e:d9:6b:1b:98:
70:35:01:19:39:34:7d:4e:c6:bb:37:00:59:2f:f2:
40:89:76:95:74:8b:f2:76:34:22:76:7a:d8:1f:ca:
dc:12:3b:c6:cf:07:44:38:8f:59:57:8e:42:fa:44:
44:9c:47:2f:b0:cb:3b:2e:7a:c5:57:34:0a:b1:3e:
ba:c9:a7:fc:40:c6:34:1f:9c:9d:e9:d9:5e:e6:a0:
6a:24:ac:49:cd:f8:68:cc:13:16:ba:c1:6d:e7:c9:
ec:8e:99:42:ef:ff:8d:a8:3b:82:72:e5:16:99:e9:
08:4a:e9:4a:5c:52:4b:a6:33:ed:0c:5c:15:95:49:
37:88:2a:05:8c:9a:bc:f9:b3:da:ce:ac:50:a3:c4:
f2:21:76:bb:d0:b3:dd:25:48:a0:e2:32:14:a6:05:
12:c1:21:26:84:57:9f:96:3e:c2:68:82:42:6d:c9:
12:c6:41:eb:be:5f:71:2d:0c:94:3b:3c:f6:11:61:
5e:ef:44:8d:5a:35:b8:59:66:d4:be:6d:73:0d:c3:
9b:b9:c6:a7:58:42:fe:6b:40:ae:2f:8d:c6:8f:08:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:64:0E:53:20:25:2E:21:F9:4A:2C:69:50:39:17:1F:E4:2C:F9:DF
X509v3 Authority Key Identifier:
keyid:48:5D:DB:67:8C:4C:0D:0C:48:8E:FD:3B:83:67:14:21:89:F3:35:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF3bZ4xMDQxIjv07g2cUIYnzNYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/beb200-e5d6-4696-ae25-debfcd9eb20e/1/SF3bZ4xMDQxIjv07g2cUIYnzNYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1e:2b:71:5a:f6:a7:0c:f5:31:42:42:0f:4e:01:6b:04:ab:
73:8f:d7:25:07:a9:ca:18:9c:89:54:d7:da:9c:98:4b:9d:49:
8e:82:8c:f7:dc:98:0a:8c:c6:87:d7:76:e8:02:5c:f2:80:63:
5e:1b:25:f0:03:a1:48:0e:64:24:7c:2d:78:2f:62:87:db:a5:
f2:aa:b1:d8:ad:8e:21:92:6e:ee:eb:cc:79:fa:2c:9d:0d:09:
e3:b7:f1:f6:88:68:42:6d:f5:6c:b2:45:9b:7f:ec:68:eb:cb:
c0:a7:38:ac:f3:85:2f:b3:f7:5d:03:10:92:9b:bf:36:7f:85:
ea:6c:0b:b7:09:47:7c:09:c9:6d:00:2f:41:da:fd:35:f1:04:
44:f0:7c:e7:38:ba:a6:91:87:fe:37:a7:d3:c1:14:6d:74:12:
a5:39:aa:ee:4c:e1:bb:11:41:6b:56:58:cf:cc:66:84:f4:e6:
a2:be:77:e9:99:c6:2b:ee:d6:fa:72:b2:78:38:82:f5:92:1e:
70:a9:3e:2e:4c:a8:6a:6f:3b:c1:83:b6:17:6b:87:f4:9f:db:
6c:9b:76:3b:79:83:48:d5:4c:ff:a9:10:d5:a6:b2:ab:ff:09:
dc:9b:26:21:0c:6e:0e:82:ce:0c:91:7f:3d:ec:51:c6:52:bb:
fa:a2:60:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:26 2025 by rpki-client