Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: zMTSvC74dpGIiGzar0pMh40zmopzFv03hIntUC94fKc=
Subject key identifier: 66:25:CC:E6:8A:60:36:E6:22:77:58:EB:16:BB:94:CA:30:A9:91:DC
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 019845F6C71BC756C1D92CC519AA59E5B147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 0D33
Signing time: Sat 26 Jul 2025 09:00:57 +0000
Manifest this update: Sat 26 Jul 2025 09:00:57 +0000
Manifest next update: Sun 27 Jul 2025 09:00:57 +0000
Files and hashes: 1: 9mLiZaXlrMh-SLMVWKWdzKIZreg.roa (hash: JOVJ8r+m2mKwk5/18fVmvxGEIuiFVBEZYaB5XFvwZO8=)
2: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: TpsTTGcq0mpf39RAYBdFKy68gr/YeLDBSXGZNNc0sEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:c7:1b:c7:56:c1:d9:2c:c5:19:aa:59:e5:b1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Jul 26 09:00:57 2025 GMT
Not After : Jul 27 09:00:57 2025 GMT
Subject: CN=6625cce68a6036e6227758eb16bb94ca30a991dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:f1:f8:aa:3a:f4:71:dd:c3:c9:fe:76:d5:
12:de:88:4c:fd:14:d5:14:86:97:66:cd:03:73:c1:
58:8c:95:20:84:60:0e:77:90:bd:60:f1:44:a3:3f:
66:99:ee:bf:30:a6:f0:72:12:9a:64:a3:5b:9c:06:
32:71:4c:3e:c9:5e:5e:8d:f1:f7:da:41:6a:e5:a0:
a6:d6:e2:39:eb:da:42:c6:94:44:cf:dc:ed:60:b2:
5a:ef:5f:b8:10:5b:a3:b7:5e:c6:fb:10:3f:d8:70:
ee:59:02:cf:5e:22:2c:ff:4e:5b:0f:35:6f:c6:78:
37:53:7b:4f:15:9c:81:e0:d5:10:52:bd:d4:11:8e:
c2:68:0d:43:30:d6:22:a5:54:db:71:b4:43:9a:26:
af:57:2a:ba:77:78:62:b5:42:03:a6:ce:40:53:9a:
03:a0:a0:3d:04:f1:7f:ea:84:40:d9:43:b2:b6:29:
b2:bd:54:2d:15:25:42:e4:e3:54:a3:f5:84:a5:d6:
35:67:f9:5b:2f:d4:fa:a2:15:f4:7d:9d:8b:1e:a2:
b3:50:72:e5:21:62:f1:67:0c:36:5b:bd:7a:9f:a9:
be:09:9f:05:56:89:ae:3c:a3:6c:82:8b:8e:17:e7:
96:8f:01:4d:dd:49:93:02:99:b5:bc:56:6c:16:f2:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:25:CC:E6:8A:60:36:E6:22:77:58:EB:16:BB:94:CA:30:A9:91:DC
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:40:0f:6c:8c:3e:31:4d:9a:09:23:fe:6d:98:74:a5:06:56:
93:6e:6b:46:b1:f9:00:70:1f:2a:1b:96:db:50:d2:99:a3:08:
14:6f:1b:bd:08:9a:28:81:65:8e:81:11:94:e4:33:4b:46:5a:
29:ee:8b:7b:89:10:50:ec:8a:9f:8f:29:dd:d7:5e:dd:c6:5a:
a4:18:23:41:07:3b:aa:21:63:b8:51:95:5d:99:35:79:7c:b0:
4c:0f:6d:b6:2e:1d:38:70:ff:89:02:e2:67:4d:e1:e4:01:3e:
0e:a3:c4:46:2d:5a:c9:4c:39:9b:46:7e:30:96:97:d9:f7:2a:
8e:64:2e:7d:6b:5a:c7:98:c0:82:8f:e3:1e:99:93:8d:39:ea:
fa:2f:4d:f9:66:78:ae:e4:69:ad:5e:dc:9b:a8:18:72:d5:f3:
e6:7f:2f:42:59:61:08:fe:d1:b7:b2:d4:a5:ff:ce:ea:6e:3f:
4e:d7:5e:5a:de:7b:2c:5d:02:da:71:2d:e2:97:fe:72:bf:5c:
6c:cf:b0:4b:bd:d9:df:e0:c7:7c:07:cf:3f:85:81:aa:1e:6b:
41:f2:92:0f:1c:13:05:30:c3:19:7e:c7:33:58:0e:36:4e:a2:
ac:6a:72:03:0b:da:5e:55:4f:24:36:cd:fd:c3:50:66:d8:4c:
4a:86:1e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:27:33 2025 by rpki-client