Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: i2aB6RvH3rGCHinmb99Pb4rSDN6h5rGX9D9fa4KtjEE=
Subject key identifier: 5A:24:98:B9:BE:C1:60:53:64:42:97:B3:2B:BB:FC:29:32:4F:19:3C
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 019745F929F010D2229DA499CA13A76A1A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 1586
Signing time: Fri 06 Jun 2025 16:00:46 +0000
Manifest this update: Fri 06 Jun 2025 16:00:46 +0000
Manifest next update: Sat 07 Jun 2025 16:00:46 +0000
Files and hashes: 1: ANPP4Ri3K1e-3EB_llD87ewAVpI.roa (hash: BqjlpSKTmEfFLg6w0nu9ozK/+m//fsc6fhYWNto/nfI=)
2: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: spMVZuXag29nnRAY1GUy69ldXihQB7gekZLDLJF/K48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:29:f0:10:d2:22:9d:a4:99:ca:13:a7:6a:1a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Jun 6 16:00:46 2025 GMT
Not After : Jun 7 16:00:46 2025 GMT
Subject: CN=5a2498b9bec16053644297b32bbbfc29324f193c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:a5:db:aa:44:9b:90:ed:c8:fa:cd:9d:ea:
d7:e0:fc:bb:eb:f2:b1:2e:aa:34:03:46:18:f9:e1:
45:c2:4d:d4:c4:ce:2a:72:3a:d2:bf:d5:5d:62:14:
08:cb:23:7e:d5:ef:1e:bf:70:21:99:7c:dd:39:d0:
38:2a:0c:91:92:84:21:50:b0:ca:39:03:e4:b4:82:
f0:3e:b5:c4:a5:dd:27:8c:dd:04:e7:ed:a3:6c:1c:
09:86:6d:6a:e4:da:ba:78:0d:de:23:7b:4c:5a:69:
8f:64:81:6b:f5:a7:02:ae:50:c1:47:36:b9:eb:12:
80:56:63:69:52:02:21:bf:7a:9f:6b:1d:51:31:98:
8e:85:0b:bc:1d:88:f1:cd:bf:83:a9:c8:8d:b4:9d:
d1:3e:98:6f:99:db:bd:dd:55:d2:74:bd:4c:f4:4e:
99:72:86:04:43:40:40:13:0c:fd:ab:68:aa:c2:e3:
e8:59:11:67:03:64:da:51:ba:31:9d:ac:7d:ea:eb:
7a:55:a6:6b:6d:50:47:f3:e8:7c:03:7f:40:f8:1c:
21:ea:e0:4c:be:6e:d5:ed:fc:c3:1e:61:d7:e5:bc:
84:7d:11:eb:fe:0c:3d:55:6f:32:e6:fb:47:ba:1e:
48:1d:2f:20:65:bd:89:7b:90:fb:7b:65:9e:e5:37:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:24:98:B9:BE:C1:60:53:64:42:97:B3:2B:BB:FC:29:32:4F:19:3C
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:55:37:1c:90:47:0e:a1:ec:27:8d:9b:e6:ce:e9:5f:e4:29:
e4:6f:29:7f:81:dc:26:28:77:1d:8a:78:66:3d:21:37:ac:e3:
b7:83:29:53:8d:0d:bb:84:a8:8d:ad:db:88:e6:4e:9d:64:4d:
4c:99:3f:2f:71:73:ef:af:14:bb:0c:63:76:2f:4b:64:25:e9:
75:3d:41:3b:03:89:dc:9f:79:d9:83:5f:3f:49:3a:f6:af:2e:
97:91:be:c8:8b:3c:5e:99:34:ff:58:a0:d6:fb:38:6f:37:3a:
c0:db:74:a2:dc:2b:d1:10:16:6d:e4:f1:f1:a8:75:bd:25:28:
24:3b:5a:5b:50:c7:0e:d5:60:1d:68:45:c0:d5:64:0d:9b:ff:
3b:67:55:62:a8:dd:70:07:91:06:4f:af:b2:a5:6d:a0:3f:ef:
42:fa:e0:35:08:b4:33:2b:8e:c0:35:38:d0:e2:38:72:00:f2:
6b:9c:ad:0b:80:49:c2:aa:72:c9:41:1b:a5:c5:45:78:9b:a5:
a1:a0:fd:da:d1:99:ea:c5:49:98:65:6f:15:c8:78:0b:82:11:
1a:6b:79:c0:22:d3:43:0c:a1:88:0a:77:33:b9:b2:b9:70:fa:
57:04:72:3c:92:64:fa:f9:d3:af:76:b7:be:c1:49:8f:bd:71:
ce:27:09:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:24:02 2025 by rpki-client