Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: 9mi2YowJdQ8KRyN7/MtR/krgWY6twOluzvHD7ZIXkbw=
Subject key identifier: E5:7A:63:48:EC:0A:EC:7C:C6:AC:7B:2A:42:7F:EC:E6:1B:69:3F:2F
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 01985758D681910C1F8CF44B7DF4613FA386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 0C69
Signing time: Tue 29 Jul 2025 18:01:36 +0000
Manifest this update: Tue 29 Jul 2025 18:01:36 +0000
Manifest next update: Wed 30 Jul 2025 18:01:36 +0000
Files and hashes: 1: 5hJAv1vo3oOPqWjQpBgMDKDCfMU.roa (hash: NHMZ+Lo+WMMXDw4UrqXBzj/Re+R0/j7Wcu84BebYuQw=)
2: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: M8zdI8FPAdsBOmJVc3tiYsn5g6fN3sw3mKqtRpQscP4=)
3: exkTmhIrPHXpMpwbJ39TJjbGGQU.roa (hash: O4LImE4gF0VDKL+p9YeHfP2uSXH0M3XtEyfG3rkFcvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:58:d6:81:91:0c:1f:8c:f4:4b:7d:f4:61:3f:a3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Jul 29 18:01:36 2025 GMT
Not After : Jul 30 18:01:36 2025 GMT
Subject: CN=e57a6348ec0aec7cc6ac7b2a427fece61b693f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:01:99:ba:c5:b5:0c:ea:a2:2a:ca:b0:8c:
0d:e8:c3:78:5a:70:ec:9f:e9:9d:35:b2:88:8d:02:
fa:40:88:17:38:a8:a1:62:82:b3:56:62:ec:83:87:
22:eb:59:ae:0e:f9:2a:69:14:c1:e2:54:59:57:28:
ef:f0:4f:b4:81:1d:79:c8:7d:ef:db:e1:a0:94:71:
eb:16:53:0c:b4:88:a6:5a:49:68:30:b9:82:9f:e0:
76:17:2f:7e:10:1a:4c:23:e3:d2:c3:14:6e:12:de:
3d:e9:e3:f4:96:c0:e2:13:ce:cd:ac:f1:08:61:f8:
7e:36:4c:75:41:12:11:32:93:5a:f9:09:a6:a9:30:
14:57:11:a1:b8:85:70:c7:64:9d:6f:4b:76:5e:30:
29:18:75:d2:ac:1a:32:10:6e:54:64:00:e3:17:e5:
c7:19:a7:0c:6b:a7:6f:b6:5e:14:3e:c0:c6:00:d2:
84:b2:5d:a1:37:b6:91:87:f1:24:50:56:5e:8c:49:
3f:71:a6:8a:5b:24:f8:bf:c6:25:c6:71:42:be:d2:
19:95:b3:9e:81:3b:fa:68:ad:73:60:6f:d3:cc:d8:
b7:ad:b1:8b:2e:61:71:4b:b8:6c:ed:e7:55:ad:61:
f9:9a:08:83:74:1b:2f:0a:ef:19:35:3d:25:6f:01:
19:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7A:63:48:EC:0A:EC:7C:C6:AC:7B:2A:42:7F:EC:E6:1B:69:3F:2F
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1f:4f:69:bf:22:92:d6:03:9b:4b:c4:56:4b:9e:75:ab:8a:
60:9f:31:bf:1d:7b:9c:eb:5e:b6:fa:b8:31:d7:c0:6c:34:24:
45:3b:aa:5e:64:b4:ae:9d:11:61:42:d9:43:4e:33:e1:41:04:
34:ce:15:27:ce:5e:79:1f:f5:b2:82:f5:3a:17:f1:c6:ce:7a:
9f:e7:f3:67:42:13:dc:aa:cf:8e:36:5a:85:09:19:dd:e4:c2:
d0:7a:2e:24:de:6f:10:c5:70:f9:b4:77:9d:63:cf:02:20:d6:
01:2c:c9:33:bd:da:77:90:05:e6:ca:46:c7:ab:16:1d:c4:90:
a2:c6:d2:30:7c:3b:11:b2:6c:bf:ce:6d:8d:28:28:1c:71:71:
6e:1f:9c:ab:71:90:e4:0a:48:24:90:6a:15:42:a6:4a:a0:12:
f1:09:92:80:fd:4a:cc:e5:ac:da:60:24:70:c7:62:77:19:93:
ac:d6:ee:d3:72:98:56:ed:19:46:ac:b2:93:af:61:65:74:e7:
bc:9c:be:7a:6d:86:29:7c:41:30:e6:cb:11:e9:bc:f3:17:a4:
86:56:22:9a:c3:21:27:08:5b:21:79:a6:d5:36:0d:5c:75:a6:
c6:2e:1b:c3:6c:16:97:83:de:11:87:8f:7d:54:4a:88:2c:96:
43:2a:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 23:16:53 2025 by rpki-client