Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: 7BX2Lmv5JkMOFeNVF63uINpMHTCfEbMiu0wuYE/klHE=
Subject key identifier: 63:BE:1C:DD:20:61:52:D8:69:80:4C:59:72:CC:85:C5:97:9F:E4:F6
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 019754C77174FC4A4107857B86D405F52A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 052B
Signing time: Mon 09 Jun 2025 13:00:46 +0000
Manifest this update: Mon 09 Jun 2025 13:00:46 +0000
Manifest next update: Tue 10 Jun 2025 13:00:46 +0000
Files and hashes: 1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: Hn7f2OHl9/jK3y/axp594lJCgUT+VF3SFHZwej6nWL8=)
2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:71:74:fc:4a:41:07:85:7b:86:d4:05:f5:2a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Jun 9 13:00:46 2025 GMT
Not After : Jun 10 13:00:46 2025 GMT
Subject: CN=63be1cdd206152d869804c5972cc85c5979fe4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:62:4a:68:76:31:09:ff:10:66:ce:02:03:
f0:0c:73:89:b1:d7:0e:9e:22:6d:11:b3:50:8f:c1:
90:f1:06:aa:53:c2:6b:eb:f8:f8:02:9d:99:a5:fd:
23:78:d0:d1:19:af:d4:7f:9e:22:94:fc:03:ca:0c:
27:36:53:18:12:f3:5f:62:33:61:11:ac:45:c7:46:
54:84:a6:ac:92:aa:3e:a7:49:b0:46:39:8f:33:24:
99:34:d4:41:24:9a:80:1f:f0:99:bf:31:f9:9d:80:
19:2c:88:80:ab:cc:9f:d0:e8:f5:f3:b7:b2:ed:f4:
f0:7f:69:8d:12:ec:5d:9d:64:72:a7:09:8b:21:6d:
63:6c:8d:0b:6f:26:40:10:ac:83:6b:42:83:1b:3e:
5b:26:01:a8:91:74:d1:09:da:32:d1:88:6c:90:01:
b7:f4:df:fc:2a:3d:38:20:1b:a7:21:ee:b8:f1:81:
ea:b7:bd:25:4a:0f:cd:40:bd:33:68:74:fa:9e:af:
43:7a:5a:76:bf:68:46:1c:e0:b1:18:fd:24:19:89:
e9:0d:6f:5d:19:1b:f8:9b:47:93:ab:36:3f:ce:b8:
c5:ef:79:b7:d0:7f:4e:88:0c:58:48:94:6a:8d:7b:
cf:d8:69:aa:32:15:10:a8:4c:cf:1e:c5:33:50:24:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BE:1C:DD:20:61:52:D8:69:80:4C:59:72:CC:85:C5:97:9F:E4:F6
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b7:49:9b:b6:40:c3:38:e5:31:06:ee:2c:6a:b4:67:71:cc:
bf:45:5a:70:d0:dc:d3:e1:1d:fb:06:ed:6c:b8:bf:bd:51:7f:
6d:fd:b3:7f:d4:ee:5f:77:19:57:13:b1:6f:65:3e:9e:fd:c4:
df:ec:3c:d3:ce:b4:f7:ae:5b:95:87:0a:d3:fc:e8:6d:e3:2f:
7e:b7:35:f2:5d:13:02:79:0b:28:e5:d3:8b:11:62:a0:1b:d5:
16:67:39:bd:5d:43:82:76:c5:2c:80:53:96:38:60:09:3d:c1:
14:2d:95:04:0e:38:62:1f:c6:03:b1:be:9e:ea:9b:eb:84:9e:
3d:4b:2f:1d:d8:a9:87:03:7b:45:d8:ee:be:b3:89:ef:15:f7:
66:68:2a:f9:00:67:bf:6e:9e:ff:f3:c3:08:cc:90:2d:2c:f5:
c9:cc:da:72:14:4c:00:5c:6f:a8:ef:80:4c:c4:83:c0:e7:34:
3e:2e:16:f8:71:86:45:1e:0f:a8:21:e5:eb:b5:0f:84:f0:61:
c0:71:59:3c:2e:09:06:78:91:a8:e7:03:9a:fe:54:3a:96:ec:
10:f5:4a:59:82:3b:2f:ce:0d:6a:4c:4c:86:57:bd:96:83:50:
08:d4:41:f5:5d:d3:8e:b9:ed:ec:8c:01:4c:45:69:4b:2c:69:
74:67:4c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:36:05 2025 by rpki-client