Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
File: sxk4vHICgkRLq9OyazSStFats5c.mft (raw, json)
Hash identifier: Hxwlqkl+GaGh+9U3ipIx00y7HVIHQS+HVR+SIzoCWl8=
Subject key identifier: 6E:66:8F:42:5E:D4:A7:BF:98:B7:CE:0E:0B:85:2E:5A:1B:74:8D:E1
Authority key identifier: B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
Certificate issuer: /CN=b31938bc720282444babd3b26b3492b456adb397
Certificate serial: 01974E57A1F96CCA5EFECE28FEC8CD4CAE44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
Manifest number: 089E
Signing time: Sun 08 Jun 2025 07:00:55 +0000
Manifest this update: Sun 08 Jun 2025 07:00:55 +0000
Manifest next update: Mon 09 Jun 2025 07:00:55 +0000
Files and hashes: 1: mMmymzplWMeJzzgdG7P3tHtpBaQ.roa (hash: /bqXbIc2T1Ug7GTSXeUaRuS3D15TA3H+LDCDm5yP2ts=)
2: sxk4vHICgkRLq9OyazSStFats5c.crl (hash: XCrVSfpEMSNwFiAfCYZUXZ2D77DUoetsrWiwiYx5Jtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:a1:f9:6c:ca:5e:fe:ce:28:fe:c8:cd:4c:ae:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31938bc720282444babd3b26b3492b456adb397
Validity
Not Before: Jun 8 07:00:55 2025 GMT
Not After : Jun 9 07:00:55 2025 GMT
Subject: CN=6e668f425ed4a7bf98b7ce0e0b852e5a1b748de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:b2:1a:c2:dc:9e:a1:8f:9c:0c:24:da:7e:
59:87:ad:46:9b:0a:8b:83:b3:0b:6d:9a:49:1a:c8:
e4:99:55:e1:1e:98:6c:42:dc:9c:5b:ee:d8:40:0d:
3c:9c:f6:17:2e:a7:0e:ce:e6:2e:c8:6f:f8:aa:2f:
b7:52:65:28:f3:55:02:5e:25:b1:d9:78:84:bb:75:
39:1d:0b:ab:e9:e2:9f:bc:5f:01:7d:c0:1b:8a:23:
1f:f1:7e:96:c0:02:c1:a6:20:4f:4b:eb:bc:92:60:
e1:bd:d0:0d:27:21:43:7f:78:14:48:9c:22:f2:0a:
21:ed:06:70:7a:49:31:93:d5:5e:fc:70:97:44:ff:
3b:9c:90:58:2d:89:82:74:c7:de:84:b7:bb:4d:cd:
b7:90:c3:4c:db:f5:00:fa:b6:e2:e1:d3:e4:84:aa:
7b:20:8d:cc:48:33:44:33:8b:b2:07:5f:cd:1b:ca:
3d:87:dd:e9:ca:08:25:8b:e9:9b:f0:05:89:6c:18:
2c:53:83:60:97:7e:2a:ac:a3:63:73:65:db:ed:0b:
36:44:71:2f:82:b9:a9:41:b1:52:15:5a:04:2c:4f:
9a:d6:f1:28:78:e0:78:4d:1b:b0:f9:a9:0c:0b:fe:
e3:1e:19:65:ab:74:44:68:df:9a:ad:e1:41:79:15:
4c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:66:8F:42:5E:D4:A7:BF:98:B7:CE:0E:0B:85:2E:5A:1B:74:8D:E1
X509v3 Authority Key Identifier:
keyid:B3:19:38:BC:72:02:82:44:4B:AB:D3:B2:6B:34:92:B4:56:AD:B3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxk4vHICgkRLq9OyazSStFats5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/75dede-5449-4d47-9b51-9b5df85c1140/1/sxk4vHICgkRLq9OyazSStFats5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:96:b9:19:4f:46:df:1b:2f:d9:ea:ee:be:7d:60:a4:38:2f:
34:63:0e:90:b3:9a:7e:93:90:ca:38:36:85:9b:ae:5c:e0:cd:
ad:b7:b6:57:bd:2c:42:6a:23:c7:fb:27:df:4b:c2:19:11:17:
df:e8:39:87:e5:93:91:f5:cf:0c:34:2c:a3:13:a0:4e:c8:7e:
20:00:44:3b:a4:62:0a:d7:fd:5a:4e:a1:69:f0:17:ca:20:5e:
c3:9d:1d:8b:f9:95:0a:7b:06:c1:32:ac:1f:88:f6:fe:ea:7c:
b4:34:58:96:58:56:dd:33:d9:de:aa:24:05:4d:89:58:1a:7e:
7e:c7:2c:9b:0c:5b:92:60:fc:db:ef:44:46:4c:db:97:92:06:
b7:b5:11:69:d6:ef:c9:8b:dd:86:52:25:66:cb:63:f5:ca:da:
a2:96:21:18:3a:51:a9:d4:a1:1b:32:71:36:3c:99:ca:8a:11:
29:a0:c7:99:70:7f:1c:b6:77:90:b6:66:fb:85:9d:b7:b9:f6:
80:9d:71:7a:ce:b1:0d:8c:17:4f:94:34:19:67:8c:88:61:1e:
f3:7a:ed:72:a0:35:10:64:9c:8b:9e:3b:75:ca:cc:21:d3:4a:
ea:24:cf:59:30:86:e7:a3:fa:4d:90:1d:bd:9c:b9:f9:94:57:
38:f8:8a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:31:40 2025 by rpki-client