Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier: eytdqonnMxV5svpX51N9O9dqI8zJwa8HMbT12hwQvuU=
Subject key identifier: 40:C9:BB:C8:69:CD:33:D4:D3:12:F3:77:A3:D1:E2:83:53:EC:61:CB
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial: 01974BFB610996CE90245A3031D63C4026D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number: 12BA
Signing time: Sat 07 Jun 2025 20:00:54 +0000
Manifest this update: Sat 07 Jun 2025 20:00:54 +0000
Manifest next update: Sun 08 Jun 2025 20:00:54 +0000
Files and hashes: 1: SX7CKkNX5ke670AWCb1741Boh3c.roa (hash: /+lvUIY6Nj8pitkJ880DAygWMpOJMtNOHpSYINj0dno=)
2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: 0ROx/qVcDBeVrGP7G+e4lqBtc1W6FVDhbkJXvGQ8vhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:61:09:96:ce:90:24:5a:30:31:d6:3c:40:26:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Validity
Not Before: Jun 7 20:00:54 2025 GMT
Not After : Jun 8 20:00:54 2025 GMT
Subject: CN=40c9bbc869cd33d4d312f377a3d1e28353ec61cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:80:f4:a1:b1:43:91:bc:f3:26:65:58:6b:
80:b1:3f:ce:b6:33:59:e9:16:b6:39:37:17:12:cb:
e9:69:47:a0:72:0f:05:6b:11:ec:09:e0:e1:66:30:
96:ef:5b:c1:60:d3:59:c7:77:6d:e3:1b:e9:d2:33:
77:f5:b6:df:37:58:70:6a:92:61:96:2b:98:a2:40:
f9:ca:be:19:29:5b:4b:fa:c5:b3:f4:06:8d:25:4c:
c0:bf:4c:a8:9b:cd:56:1f:22:f2:d5:2f:ef:fb:ed:
37:34:4e:9d:3f:ae:b2:5b:c1:3e:7d:43:02:67:ba:
41:c2:09:37:bd:01:f5:bd:44:f2:66:b1:b0:fb:09:
1e:80:3e:65:9d:a9:4b:66:25:e5:0c:a7:f0:30:ad:
bf:b4:f2:27:6a:ec:fb:dc:cb:e0:ee:03:9b:73:a0:
80:0b:61:ec:6f:51:f1:d0:9d:05:9f:c7:a2:75:98:
db:db:88:73:69:5d:f4:2c:69:db:dc:04:fd:7e:0c:
f5:19:38:78:e6:d2:82:d3:e6:3d:9c:0e:70:fc:7c:
85:67:55:8d:f1:3b:3d:7a:a3:1e:9b:49:c1:bc:af:
2d:da:e2:88:14:35:e7:f4:18:22:02:ae:ee:2c:dd:
82:7d:3e:43:dc:53:99:62:cf:ea:82:5f:d6:bd:3f:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C9:BB:C8:69:CD:33:D4:D3:12:F3:77:A3:D1:E2:83:53:EC:61:CB
X509v3 Authority Key Identifier:
keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:13:3d:e8:68:8c:1f:bc:b1:ff:0b:b2:f2:59:23:39:ab:33:
35:73:cb:71:da:32:09:73:16:8d:60:2e:c7:d1:14:a1:4b:1d:
20:f1:20:c4:87:b6:b3:d3:03:53:3f:54:50:fa:a0:ba:ea:1a:
d5:e0:8e:3a:9a:61:7b:0b:e0:82:25:6c:f6:e6:fc:48:cd:50:
9c:a3:31:00:bd:e4:1c:1a:fd:61:f6:b4:c5:fe:d3:b7:2f:b9:
8d:0e:3e:ea:8b:5c:37:eb:a9:d8:e8:0c:8a:df:ac:c0:fa:85:
2e:48:8e:dc:d1:28:0b:d1:b0:04:44:07:32:fa:90:9a:46:6f:
cc:0d:2e:6f:92:9f:49:e0:b0:43:be:9c:0b:55:ce:8f:ee:06:
28:fa:3c:95:b7:0e:6e:ed:71:ae:7b:7d:30:53:23:dd:42:02:
dd:48:a8:38:97:d2:69:c0:f7:cc:80:7f:45:c2:e7:a8:66:d2:
14:0b:61:7e:5e:b4:82:1e:9c:0a:08:60:a4:90:a0:ac:35:7f:
bc:bb:ed:30:bc:26:34:9a:ca:f2:0a:e4:f1:d8:6f:c2:fb:c3:
89:f8:20:77:68:98:10:cd:62:c0:64:8f:86:d4:61:9e:ce:77:
bb:f3:d7:6f:b2:7a:86:5f:b2:b3:65:49:dd:59:44:c5:8d:73:
41:b7:6b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:27 2025 by rpki-client