Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: JafvsyjGSJAe/E3K0zDeNLzBjxNe4ofw08ZjT+JbYyc=
Subject key identifier: A0:41:63:42:B2:91:6D:4A:4F:3E:08:81:29:F0:A3:AD:71:C7:97:60
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 019758A3CF4FA2BB496594CE5E2FC98E09F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 052D
Signing time: Tue 10 Jun 2025 07:00:19 +0000
Manifest this update: Tue 10 Jun 2025 07:00:19 +0000
Manifest next update: Wed 11 Jun 2025 07:00:19 +0000
Files and hashes: 1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: zvp88X+ne7/cPOENZi3j/5iENd9ay6r8H3qx5HRh/yQ=)
2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 07:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a3:cf:4f:a2:bb:49:65:94:ce:5e:2f:c9:8e:09:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Jun 10 07:00:19 2025 GMT
Not After : Jun 11 07:00:19 2025 GMT
Subject: CN=a0416342b2916d4a4f3e088129f0a3ad71c79760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:59:cc:4f:69:74:ed:89:19:89:54:59:27:
a5:fc:a9:bc:49:68:49:72:db:d9:98:09:bf:22:73:
98:ae:0a:48:b2:25:90:f6:ed:98:1d:9f:3a:c5:0f:
c2:a9:b0:aa:6c:f3:92:90:ff:c5:dc:8f:55:70:f6:
2b:63:4e:c9:7b:bf:51:dc:f2:7d:7b:ac:21:9c:a0:
6e:12:af:f2:06:cf:ea:f3:9c:5c:07:2c:b1:aa:91:
fc:02:f4:1c:78:8d:f6:41:d0:fe:c8:69:fc:e4:86:
58:b2:2e:57:2b:57:de:e8:2c:c8:35:7b:a9:88:59:
76:35:11:51:2a:c9:4a:78:51:2e:de:d7:40:6b:0b:
1c:08:52:85:58:9b:bf:76:c7:01:a9:1d:b9:cd:51:
60:a4:31:55:d2:f4:d3:ba:c4:94:e7:95:04:23:6c:
dd:88:b8:73:94:2e:af:2b:e5:81:20:53:93:3d:90:
86:d2:55:71:5e:51:02:be:f9:4b:5f:00:ea:7e:e1:
6e:9b:04:b7:5d:4e:1f:24:2f:5d:17:01:e1:bc:af:
e5:61:cf:02:07:91:66:d9:1e:31:d3:0d:a4:ec:14:
38:98:c1:b4:f3:c1:5a:4f:cc:81:67:82:de:73:d2:
8d:2d:de:17:e5:b1:f0:65:38:8c:f3:4b:15:46:7d:
f8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:41:63:42:B2:91:6D:4A:4F:3E:08:81:29:F0:A3:AD:71:C7:97:60
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:38:57:ee:ee:cc:d8:85:df:18:56:03:f2:39:65:99:94:94:
96:7c:ed:54:cc:a4:47:e2:b4:25:a1:3d:1b:96:6f:6a:1b:ff:
ea:01:bc:06:82:93:2b:75:bd:ce:e2:fc:e1:3b:80:87:d6:69:
57:23:d4:45:39:88:b0:cd:21:2b:a5:cb:64:2f:ca:58:ea:e0:
c7:a3:07:65:91:82:75:2f:f5:92:27:d2:3c:d5:0e:8c:29:10:
c4:0d:a0:86:fd:cf:af:20:af:43:9b:9f:52:fc:ae:1c:2e:03:
8d:59:4a:57:6f:a3:e9:f2:a3:c2:39:cc:99:f5:ca:1d:b1:ca:
60:f1:70:29:d8:4b:c7:ef:7a:67:0e:9a:31:4e:ad:e3:4f:7c:
56:10:5d:80:3e:0d:28:e5:17:33:2e:1a:01:8a:0c:e5:df:f0:
0b:f9:bd:8e:f7:8a:a7:d9:e6:c8:b5:b2:03:22:85:bd:ef:fc:
ec:9e:c7:d3:b6:54:1e:48:13:b5:1b:12:6c:8a:71:e3:eb:24:
a5:8d:00:c2:7b:69:45:98:a1:35:56:65:b6:4f:0e:83:76:a4:
54:5e:57:f1:d5:39:22:ce:6c:af:3d:19:73:2a:0d:22:fd:62:
d5:8d:f5:65:57:5e:09:c7:f0:0d:20:b9:c8:25:39:bb:aa:b0:
e1:77:3f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:37:57 2025 by rpki-client