Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier: 4mW6J32Z7q3ZP3kEjmhAqzHO/AAzX2AWoE3HX/LOeTI=
Subject key identifier: DA:3E:A4:37:7D:12:81:45:D2:D0:44:99:63:30:2E:B9:84:40:1D:A8
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 019849657716BE6661650933D6D0F8519796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 01:00:43 +0000
Manifest this update: Sun 27 Jul 2025 01:00:43 +0000
Manifest next update: Mon 28 Jul 2025 01:00:43 +0000
Files and hashes: 1: RlSX_O9nuK4visZrcXhuUrMTobY.roa (hash: rJSur0He4KlKRGvS+jaXIpRrSe2/3CDqYP07r9YT8i0=)
2: _FEDHOA1DaPuw5szVg_jX1NChtc.roa (hash: NTy69zIQkKyjkxDfKJ+X67SWRMXHN0I5/tJxmftqgVU=)
3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: QsZlICRx+qUUcpabZatbEYswzdq3wMgDaeugdW2siVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:77:16:be:66:61:65:09:33:d6:d0:f8:51:97:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Jul 27 01:00:43 2025 GMT
Not After : Jul 28 01:00:43 2025 GMT
Subject: CN=da3ea4377d128145d2d0449963302eb984401da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:f6:06:57:c1:9a:2b:06:ef:45:5a:52:7d:
96:be:79:11:46:80:6a:fc:4b:78:0b:d6:23:16:89:
80:18:cd:ab:09:53:08:0d:20:9d:05:3e:10:ca:45:
f6:09:55:4b:04:8d:c1:9e:5e:6a:f2:4b:d5:fd:e7:
60:7d:03:a1:ff:61:bf:d0:41:67:ea:f7:d1:d2:8e:
42:19:a0:b2:6c:28:27:f0:6b:01:be:da:dd:40:77:
f5:dc:6f:e1:f9:73:bf:98:72:cf:db:8e:37:c8:34:
12:c7:7d:49:05:eb:b0:67:ea:f5:75:c7:35:c3:33:
90:3f:71:69:1f:d9:5c:e3:2e:80:7b:73:ef:7f:24:
04:d5:36:50:be:e1:a7:89:c9:5e:cd:cf:7c:e3:b0:
bf:93:46:f7:d9:50:8a:85:0c:5c:26:2b:1d:c8:e5:
28:3c:88:60:39:e4:db:e4:05:01:fc:b1:26:b1:aa:
b0:48:c3:cc:40:78:eb:cf:73:ab:32:3c:3b:84:89:
88:b2:be:29:07:6b:47:32:8d:51:7f:b2:3e:08:a2:
cf:97:c0:f3:99:ec:6f:a7:d5:43:03:26:5d:f7:97:
38:27:2e:9b:54:d7:d0:c9:1c:48:0d:e9:bc:40:75:
18:57:3f:f0:20:98:50:c5:a1:15:51:79:b7:d3:77:
9b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3E:A4:37:7D:12:81:45:D2:D0:44:99:63:30:2E:B9:84:40:1D:A8
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a7:82:04:b9:4f:19:9c:ac:b3:37:9f:80:96:e0:fc:12:67:
48:f8:72:ca:12:77:b3:b4:9e:f2:88:b6:09:f1:60:1a:dd:2c:
d3:67:64:e4:f3:bd:8e:f4:70:4a:4a:2c:77:eb:88:be:19:48:
b4:50:1c:88:57:ab:f8:aa:5a:f2:68:ee:57:dd:19:2b:33:5b:
2c:11:8d:a3:9e:cd:1c:00:d3:ad:38:f6:56:e6:d0:75:2b:a5:
2c:19:32:b9:f5:e4:74:59:16:16:08:8e:7d:d6:71:b1:ed:39:
84:ee:e1:e1:1a:34:8e:d9:ee:30:fa:9d:83:44:d7:57:a5:36:
1f:1f:5f:5e:98:84:54:8a:12:c5:e5:f0:ea:f0:75:2b:9a:2b:
c3:ad:06:f2:22:96:9d:64:0d:61:5e:2d:ce:37:f2:5b:e9:6c:
f9:76:97:3f:38:69:87:04:5e:81:84:dd:94:4d:6a:ff:87:20:
39:1b:aa:84:c9:d4:ec:21:02:00:9e:5e:da:97:e1:49:fb:6f:
01:c1:37:bc:a5:2b:fc:00:27:f3:39:b3:c8:ef:e9:12:59:0e:
ad:53:8b:6c:9a:94:be:32:7f:74:c8:4c:25:c2:de:e0:6b:a1:
28:72:32:d6:90:fd:98:53:09:0e:c2:24:4c:94:29:ae:cc:1c:
86:6c:0b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:02 2025 by rpki-client