Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: 1+gGVqX7O/h4imbK+13QZh95qffkmb0xy2f7A1hI2uE=
Subject key identifier: 79:E0:32:76:DB:1C:3B:91:25:20:F3:04:E4:0D:5C:40:6B:42:2B:9A
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 01974B1FADCE33E6CF731FED570F707A6A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 0BDE
Signing time: Sat 07 Jun 2025 16:00:56 +0000
Manifest this update: Sat 07 Jun 2025 16:00:56 +0000
Manifest next update: Sun 08 Jun 2025 16:00:56 +0000
Files and hashes: 1: 5hJAv1vo3oOPqWjQpBgMDKDCfMU.roa (hash: NHMZ+Lo+WMMXDw4UrqXBzj/Re+R0/j7Wcu84BebYuQw=)
2: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: huZSnzY7TaQElWVZU0tBaxRoWk1nQngseOYYGsEjS8k=)
3: nQWi6amR_qcuwksKUqZBYPI5MkQ.roa (hash: deAg4an+AFgHQs+zd8oYxOw/amzJmpB2JJ48YPqhCOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:ad:ce:33:e6:cf:73:1f:ed:57:0f:70:7a:6a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Jun 7 16:00:56 2025 GMT
Not After : Jun 8 16:00:56 2025 GMT
Subject: CN=79e03276db1c3b912520f304e40d5c406b422b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:40:67:fc:3f:d5:3c:7d:75:f9:0d:b8:9d:
9d:d5:8b:ee:a9:c7:25:a4:5d:e1:77:52:9f:03:b3:
01:aa:95:fb:ec:a9:7f:d5:37:57:fd:17:fd:97:20:
b3:39:84:39:e7:1b:cd:36:79:d6:f8:da:48:2c:57:
8a:2d:8d:4a:1f:96:66:96:02:c8:05:26:42:07:99:
32:e2:5c:20:c1:96:dc:bb:4e:c6:07:4d:bd:65:f7:
33:1a:a5:5f:f1:e9:f4:23:5b:7b:1b:82:3a:e1:d0:
65:94:98:ae:f5:71:41:75:11:23:04:fe:97:c4:44:
71:7c:98:64:e8:69:47:23:54:ea:90:21:c0:0a:a4:
67:f7:eb:5a:9d:15:a2:9d:23:f4:c1:00:33:16:cf:
8d:9e:49:66:e4:96:f8:f8:ee:d9:4a:0d:d4:8f:e2:
15:2e:80:37:47:60:09:96:72:52:e4:16:d3:54:a6:
13:58:22:a3:94:5a:21:71:35:65:4b:a7:6a:88:eb:
2c:b7:d0:97:e6:80:64:76:a4:f3:fc:9e:73:34:b8:
c2:15:d9:5d:0a:7b:52:b3:df:54:0b:8d:e9:1a:96:
10:99:13:69:e2:a2:a4:e2:5b:11:84:a2:96:40:65:
d6:54:ca:60:c0:b5:8c:b1:55:fd:ec:06:4e:e5:29:
e5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E0:32:76:DB:1C:3B:91:25:20:F3:04:E4:0D:5C:40:6B:42:2B:9A
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4b:72:16:c8:f2:7d:4e:a6:3c:f1:b4:e5:82:a0:a5:54:16:
6e:c5:b4:1c:a5:98:37:6c:f6:c1:8f:1a:a0:bf:d7:61:be:d0:
15:10:5f:7e:ac:01:ea:2f:86:89:93:5f:45:9f:61:e8:17:cb:
7d:47:fa:be:2c:72:08:6b:6b:34:44:02:3f:8e:16:62:29:44:
81:8f:20:c1:72:15:67:02:05:91:58:30:d9:45:f0:d0:78:a5:
64:d5:7b:28:5c:75:92:53:24:e3:1c:e8:04:af:02:62:4e:c5:
cb:d1:5e:8d:54:fd:a9:22:0c:63:71:57:f1:89:ea:59:ff:73:
8c:6e:b7:aa:a7:be:2e:19:50:8d:c4:95:91:27:bf:65:dd:b9:
ed:d2:c1:7f:0a:2b:83:e5:53:b2:20:cb:08:2d:d7:b1:71:2d:
2e:e7:ac:83:b8:03:15:49:7e:4f:90:7d:85:1d:46:88:c5:fc:
87:74:2a:e5:33:7c:ca:16:91:fd:9b:91:7d:0e:b0:d7:ec:c7:
15:2d:aa:44:af:83:4e:3f:81:d8:e8:af:24:b2:e9:85:13:62:
5e:0e:9d:6c:9a:ea:34:a3:38:5d:51:62:4d:31:8f:37:84:b9:
ff:93:a3:7a:14:05:3f:dc:fe:01:d6:3b:09:be:3f:a7:6d:45:
e6:07:f0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:13:15 2025 by rpki-client