Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier: SoGY0KC/J5UJljYYPJIwJy5Ar1uEOX8nGij9jOTGj8E=
Subject key identifier: DE:5B:74:0D:F6:95:A5:15:90:D0:56:BB:D2:6D:CF:F6:31:33:31:1F
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 01984A411F7682925116424F970E94C42613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 05:00:38 +0000
Manifest this update: Sun 27 Jul 2025 05:00:38 +0000
Manifest next update: Mon 28 Jul 2025 05:00:38 +0000
Files and hashes: 1: JzP7e_-IzWbRBsyrki_po14NIZs.roa (hash: 2xaFuIKLrgS1M1OrFYGfnFmo0uzFtyDCt4fM8dRZejI=)
2: mPhBEESpSSmoxdu-n5OAjI6sC_I.roa (hash: 6Dj5yn1/ctkVobyO+cPsteiP8qKS3BhAZ1jJUQtNU9w=)
3: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: +Ty5NFqmNUr8joLMVQkCiIDk0vg9YZ2HBuxl40o5KWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:1f:76:82:92:51:16:42:4f:97:0e:94:c4:26:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Jul 27 05:00:38 2025 GMT
Not After : Jul 28 05:00:38 2025 GMT
Subject: CN=de5b740df695a51590d056bbd26dcff63133311f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:a7:9d:e5:11:f1:3a:30:ce:9d:32:be:14:
21:31:d9:0f:16:e6:f0:5e:3d:de:ca:78:c6:a3:d2:
20:c7:67:56:3c:e5:da:28:68:e5:39:26:85:c8:d3:
50:6f:2d:0b:7b:64:1e:d0:11:56:df:03:b7:13:9e:
3a:36:66:91:8a:d9:dd:57:d5:2d:43:04:f1:ea:7e:
59:38:36:07:25:dc:93:6d:3d:c8:18:d1:56:c5:ab:
90:5a:48:0e:ce:5e:f4:d0:8b:dd:bf:72:01:fd:46:
cb:da:d1:66:d8:11:a6:43:be:69:42:7f:e2:65:9f:
db:5b:49:86:02:04:36:00:a7:20:7f:b5:70:e2:5b:
86:93:cb:13:93:92:a0:2c:e7:eb:6a:a2:81:0c:3d:
d3:b0:12:2d:38:ef:d8:a2:46:2c:92:fd:da:19:02:
3b:c3:8c:f5:60:bd:fa:10:b2:6f:1d:be:a5:44:bd:
51:47:ff:5c:40:67:9b:f6:43:b7:7f:bf:0b:17:9c:
45:27:2c:e7:4c:a1:eb:e6:1e:5f:7f:31:6a:33:8d:
ad:62:6e:18:aa:00:71:71:7f:ef:2f:83:e8:7a:0c:
09:88:bc:b3:ae:ce:d2:95:63:95:57:2c:2c:83:c4:
a5:0d:b4:9f:b7:9a:4d:41:40:e2:93:08:8c:d2:a1:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5B:74:0D:F6:95:A5:15:90:D0:56:BB:D2:6D:CF:F6:31:33:31:1F
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:08:e9:0d:40:ff:99:9a:66:44:6b:16:e2:08:dc:3e:57:43:
56:0c:1f:b6:cd:16:77:ce:10:35:f6:bf:e3:14:d5:f1:cd:c0:
7b:62:e2:75:1a:26:c1:64:1b:88:0c:54:2e:d1:ac:6e:5a:a6:
79:70:fd:f4:50:33:c8:59:37:44:41:03:42:6c:a3:27:7d:72:
ff:cd:09:6d:81:23:27:04:29:0b:65:67:1d:2f:ea:5e:4b:a4:
01:23:97:aa:9a:a5:41:21:e0:ea:0d:e2:df:55:0b:64:55:83:
1a:5f:d2:ec:f0:cb:65:23:2c:4b:e0:95:f6:6d:9a:54:58:ba:
1d:4a:dd:79:c8:a7:3c:13:09:a7:7e:ff:08:d6:de:df:7b:4f:
01:9c:40:56:65:60:ab:f2:ee:76:7f:fd:d8:7a:17:21:9d:46:
fc:b9:c9:50:e7:e5:c6:18:d6:af:fa:db:94:71:24:e9:e7:8c:
d9:de:f8:45:39:59:0d:a5:c4:02:7d:ad:2f:bc:9e:28:33:ff:
c8:91:ff:4d:d7:c4:04:da:b0:78:9e:4e:4d:c2:ac:26:ce:68:
79:30:22:d3:97:b5:f0:e0:56:b0:ba:41:db:b0:b1:e1:c8:7b:
14:6d:ed:2a:73:88:aa:26:d0:6f:67:b9:23:09:14:fa:d9:bc:
92:97:11:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:00:44 2025 by rpki-client