Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: ARfgZuN4FzceFt0EyLtPg1Abqno1aS8D+Sp4iYTFDcE=
Subject key identifier: 47:9C:70:2C:B7:AD:74:B2:97:5B:C6:53:06:37:8B:78:A8:29:8B:94
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 01975E6F678403C317032A4BBEAF1ACAB54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 0530
Signing time: Wed 11 Jun 2025 10:00:48 +0000
Manifest this update: Wed 11 Jun 2025 10:00:48 +0000
Manifest next update: Thu 12 Jun 2025 10:00:48 +0000
Files and hashes: 1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: H3q3XR9eFD/+7GND91fDzcQySggAxuIFvMlc5+HBlo4=)
2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:67:84:03:c3:17:03:2a:4b:be:af:1a:ca:b5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Jun 11 10:00:48 2025 GMT
Not After : Jun 12 10:00:48 2025 GMT
Subject: CN=479c702cb7ad74b2975bc65306378b78a8298b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:a9:7a:88:96:85:09:99:27:1c:c5:39:e4:
1f:61:f4:85:40:4a:dd:d0:85:09:38:35:fa:3e:a2:
0b:f2:45:08:1f:a6:4c:da:da:05:e6:8d:fc:83:7c:
29:8a:ce:e1:d6:24:94:d9:7b:c3:e3:ce:fa:4d:23:
68:57:4c:b8:b0:68:0b:54:71:7d:8e:31:97:f1:f7:
e9:89:4c:c2:07:f7:7e:d3:e0:26:c2:b0:88:a4:4a:
b1:4c:03:43:14:b1:3e:d9:d2:6d:57:23:a7:15:f6:
0e:28:d5:f5:e3:34:a9:56:d1:83:1b:16:4b:9b:3f:
7b:6b:eb:76:77:a7:ef:4b:a0:4a:be:74:36:2c:14:
b2:f2:a1:3b:f2:f9:1a:2b:8c:31:16:0c:70:0f:92:
81:34:a8:2e:ee:ac:4b:e3:b2:bc:8c:7c:6e:59:e6:
ed:ef:ac:62:71:8c:a0:0a:de:d1:1e:96:ae:e5:a0:
42:cc:3e:29:f6:07:aa:aa:61:8d:f1:70:9f:2e:c0:
0e:b3:1e:3d:e0:ed:63:c0:41:a7:45:f2:cb:ec:77:
b2:d6:5c:a8:77:51:da:87:9b:81:b5:e0:57:7d:4d:
37:f5:b7:27:d1:d7:fe:5f:20:48:37:b3:c9:cf:28:
1b:4f:06:1a:9b:67:16:e6:a8:74:cd:36:b9:17:63:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9C:70:2C:B7:AD:74:B2:97:5B:C6:53:06:37:8B:78:A8:29:8B:94
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:9d:53:43:00:5a:5a:64:d0:df:6a:83:f5:ad:af:c4:23:c7:
72:f4:40:fb:b2:55:fd:9f:a4:b5:13:dc:69:92:cb:cb:da:59:
eb:57:a7:0c:64:de:d7:2e:84:f6:91:3b:f3:1b:e1:b0:68:9f:
8d:96:e0:d0:10:81:e0:65:0c:f7:f1:34:7a:2c:f1:aa:94:e9:
e6:5c:97:3f:a6:3c:42:f8:02:71:12:da:36:2a:83:90:6d:e6:
aa:c3:19:f2:a7:a9:f5:0d:5d:34:b9:8e:6c:38:56:e7:f5:c5:
f3:13:09:2a:d7:e2:98:06:ea:42:11:35:a5:d8:cd:fe:55:59:
68:74:9f:77:f8:90:c7:98:62:03:60:2b:23:6c:38:6b:9e:c7:
a6:19:cb:9c:5c:d8:76:07:57:8b:9c:d6:a9:02:a3:b4:f2:ab:
c0:d8:ea:0f:0f:ce:36:e5:c3:c4:6f:93:52:42:14:85:27:1e:
b2:94:a4:9c:9f:19:ea:3e:0f:dc:96:86:5f:a8:a4:59:09:a8:
48:b8:f7:e1:a3:34:32:5f:d5:a8:de:c3:4f:7e:cd:1b:49:ea:
2d:97:40:60:d2:75:19:4c:61:f3:47:09:55:de:da:6f:76:b0:
00:54:09:66:1d:38:54:8b:bb:f4:4a:07:ae:2d:22:50:6a:bd:
5e:57:25:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:49:46 2025 by rpki-client