Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
File: SDletMDuLapTks2Z_EXvvEp1TpA.mft (raw, json)
Hash identifier: pszoeNZ6t2T7SeIkqkcpkXr5sC1L3BseKgYyPoYXQhg=
Subject key identifier: 72:38:48:8E:73:22:B4:0B:85:6E:0F:FB:38:55:8C:41:A6:82:94:ED
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 0198413D8EEC0BD0C18DAAF59F635F2C83DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
Manifest number: 15FE
Signing time: Fri 25 Jul 2025 11:00:10 +0000
Manifest this update: Fri 25 Jul 2025 11:00:10 +0000
Manifest next update: Sat 26 Jul 2025 11:00:10 +0000
Files and hashes: 1: SDletMDuLapTks2Z_EXvvEp1TpA.crl (hash: BebCZdAZYQ7U9BBRzyG0D1rDjp4g+K78ZsvpERkcoTg=)
2: TLZicJ-oF3y9XbymZF6MTAhyYvk.roa (hash: 4HeSyTBfKiFSQT/0BeZ4MVQL/epSIUIfB43B7ezWkA0=)
3: kB2vNLIHiz3zrtVPA7_yVuKTR5I.roa (hash: 9AzHx/X53rT3duIhqykEiCb52nN9gduGX1KbZI/pxcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:3d:8e:ec:0b:d0:c1:8d:aa:f5:9f:63:5f:2c:83:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: Jul 25 11:00:10 2025 GMT
Not After : Jul 26 11:00:10 2025 GMT
Subject: CN=7238488e7322b40b856e0ffb38558c41a68294ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:78:9e:23:76:d8:af:58:be:a0:97:c8:98:
86:28:16:e9:38:63:08:74:16:e3:22:b9:17:a2:09:
ae:a9:ed:15:66:9a:46:81:03:34:02:3e:d0:9c:4e:
48:5e:57:1e:2f:28:5c:37:6d:06:fb:97:5c:6c:48:
db:d1:91:02:62:74:01:08:be:2a:10:bd:08:46:2a:
4d:d0:e3:bd:ff:66:bf:51:a0:7a:3a:f0:0c:20:d9:
8f:2b:b8:83:33:7b:71:30:42:c1:43:98:0a:91:86:
00:f1:d4:24:2d:b8:19:db:bd:bd:5b:7c:b0:d2:ba:
5f:e0:30:7c:65:fc:c0:50:1e:9a:a4:3d:68:a5:c0:
e8:64:d0:af:b3:b9:a7:9f:e6:79:ab:a4:16:6a:d0:
00:c3:c5:43:06:19:3a:51:7c:76:40:14:0b:7f:57:
82:0a:e9:79:67:ac:21:a0:f9:67:34:60:1e:06:a8:
4d:27:87:ff:10:43:0b:e0:a5:89:a8:1f:1a:52:ec:
24:d2:05:c2:82:ab:55:9f:cf:d3:63:d1:d9:87:d3:
40:80:6e:ab:e4:b4:5d:85:2f:18:4d:bc:ee:2a:a9:
53:8b:f8:b7:62:d5:e2:c3:7b:e2:a0:59:24:1d:87:
0d:4e:93:bb:d8:12:de:ed:23:3b:93:f3:f7:97:c9:
89:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:38:48:8E:73:22:B4:0B:85:6E:0F:FB:38:55:8C:41:A6:82:94:ED
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:15:84:73:9b:a2:4e:6d:1d:5d:09:b7:f5:1e:26:b4:a1:7d:
27:0c:48:b5:3a:9f:8c:ce:a4:2e:85:cc:4b:92:38:fb:2b:67:
7d:28:74:d0:71:cd:1d:fd:4a:ad:24:52:52:8a:30:4e:8c:38:
ef:55:07:35:3c:ee:f1:f9:f4:04:3d:98:8e:4d:75:92:85:4a:
0e:64:84:e4:54:63:68:a9:c1:08:13:7a:92:45:0e:d2:af:a0:
82:70:da:ca:4b:b1:d2:a8:fe:62:43:9e:fe:20:a0:df:75:e0:
05:3b:37:00:53:a6:0e:45:33:b5:d6:78:25:48:6b:17:a1:c7:
36:81:e7:de:0d:87:e1:71:57:d1:15:d2:e1:e4:37:b4:ac:df:
26:97:16:42:89:41:ad:7b:42:d8:84:06:73:c1:8b:fa:60:75:
17:83:d6:ce:49:f2:72:07:c3:1d:d9:34:9a:43:cc:12:ca:ae:
41:56:56:2d:0f:65:3d:67:7a:ac:cb:f8:1d:81:c6:3b:82:f6:
e3:ea:66:ba:c5:4d:bd:7e:da:c2:06:58:18:c1:a9:5b:3d:31:
86:3a:50:bc:c6:cd:d0:22:ec:95:1a:0c:de:29:67:90:39:80:
ed:cb:33:46:4c:ea:85:4e:c2:27:15:7b:8b:38:d5:2a:50:17:
36:5e:0c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 14:36:25 2025 by rpki-client