Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
File: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft (raw, json)
Hash identifier: YiLk0gWmWzqPyK4OD9NueFccQFZfDjKVvBpaD/9K6K8=
Subject key identifier: AC:77:C3:A0:42:93:6F:13:35:1F:E8:0D:87:52:D8:EE:C6:12:DA:BE
Authority key identifier: 48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
Certificate issuer: /CN=480423aa17d04f56c690040345d6762bbfd1f88b
Certificate serial: 01974A7B11A2165992B0F277E9B8067AD50C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
Manifest number: 1035
Signing time: Sat 07 Jun 2025 13:01:08 +0000
Manifest this update: Sat 07 Jun 2025 13:01:08 +0000
Manifest next update: Sun 08 Jun 2025 13:01:08 +0000
Files and hashes: 1: SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl (hash: t3SFpgAacqQjhww3fcOrYxER7598zfGi4fidb3YLFiA=)
2: a4eWXe9mLzZdOuJF4g-i_sTPTK8.roa (hash: Nl6At3QtcKnCDV2p7jnqUB0ktT1iDDCBQexgyMCnTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:11:a2:16:59:92:b0:f2:77:e9:b8:06:7a:d5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480423aa17d04f56c690040345d6762bbfd1f88b
Validity
Not Before: Jun 7 13:01:08 2025 GMT
Not After : Jun 8 13:01:08 2025 GMT
Subject: CN=ac77c3a042936f13351fe80d8752d8eec612dabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2b:c7:33:a0:9c:b8:89:96:ee:38:7f:6d:61:
77:60:2b:7d:67:2b:e5:82:45:33:a9:ff:c3:d8:ba:
0b:61:58:91:72:be:58:1d:5d:c6:2c:cb:17:46:55:
e2:4f:c2:13:4b:07:eb:70:d3:e9:14:c5:ba:aa:f2:
08:ad:26:3c:e1:16:10:43:94:ed:27:8a:ce:d5:38:
a4:b9:94:44:9a:65:40:c2:a9:82:71:d0:00:36:5d:
c7:7c:86:77:af:2b:19:a6:da:6b:8d:02:48:f2:8d:
8b:88:40:cd:ae:37:0c:00:d8:c5:23:2e:b2:1d:83:
6a:92:5e:13:e7:37:66:2b:45:8d:a7:13:80:20:45:
14:f6:d6:b4:8c:75:dc:21:dd:bd:fa:d0:5a:08:f7:
75:0f:58:a5:b7:a8:2d:bc:19:ea:30:10:7f:9c:ff:
81:6f:1e:3f:03:ec:59:65:36:5b:8d:c7:49:5b:d7:
21:f6:cf:4a:12:0f:f8:f0:50:b0:df:99:70:5c:ae:
8e:80:05:ec:e0:d8:bb:27:e6:11:c9:a5:05:e7:d5:
cc:48:bd:de:9d:95:93:e0:d3:9e:fd:16:55:ad:e3:
d8:5f:cf:5a:99:19:e7:fe:48:dc:1a:1a:7d:b4:95:
ba:26:d8:1a:b5:ac:6d:3e:9e:30:a0:63:04:99:f4:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:77:C3:A0:42:93:6F:13:35:1F:E8:0D:87:52:D8:EE:C6:12:DA:BE
X509v3 Authority Key Identifier:
keyid:48:04:23:AA:17:D0:4F:56:C6:90:04:03:45:D6:76:2B:BF:D1:F8:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f0f5ff-a820-4dba-8ee1-cda57426de22/1/SAQjqhfQT1bGkAQDRdZ2K7_R-Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:07:96:65:70:cc:49:35:38:ff:be:50:7e:0b:d3:51:ab:14:
35:75:4b:08:41:ec:d5:47:df:db:58:28:c7:60:15:01:4a:4b:
4e:47:4c:18:71:3c:f4:e9:53:a5:e2:0f:49:3f:79:12:f6:7a:
25:28:d0:72:5d:e5:f6:77:af:3c:66:55:87:0b:10:73:8b:c0:
84:00:31:7d:5b:42:46:7f:bb:59:d1:71:c2:af:22:2d:f4:02:
7f:94:81:1a:2c:51:5d:50:cc:c2:a6:b5:74:e2:ee:5d:f1:f5:
be:8e:e5:7c:ee:5a:1d:b2:b1:b0:21:87:28:cb:28:39:35:5d:
04:30:04:65:d6:33:a2:6c:c3:3a:56:f2:47:e1:68:ec:b2:33:
6b:c8:d5:be:9c:67:71:4c:ff:48:21:2c:73:8a:e8:81:97:69:
4a:59:d3:61:21:27:e0:1b:7f:9d:6d:23:94:25:3f:9c:5b:4d:
1a:72:ed:7c:4a:35:fd:b9:d2:95:b1:3a:ee:90:45:4d:df:6c:
f9:00:77:50:36:e5:f3:22:4e:61:bd:70:28:1f:d8:e6:c7:24:
5a:ea:7c:5a:13:e8:6d:9b:2a:a5:17:ea:98:ae:dd:75:02:bf:
39:16:a6:ab:52:26:93:43:43:3c:b1:1b:54:fd:97:6e:a1:8d:
3b:1f:c0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:32:04 2025 by rpki-client