Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
File: SoPufcwyg3sLpbiR2PFFQ1qztgo.mft (raw, json)
Hash identifier: 54/LhfbysMLx1gEMzve/sJi+MKMppDBuvF9yAvABcwU=
Subject key identifier: 64:E8:31:B6:7F:08:C1:7E:E7:F6:CA:FE:A7:E2:83:16:D5:F3:30:14
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial: 01976C2B153FE2EC186F3A31513D8EB0BD97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
Manifest number: 0F98
Signing time: Sat 14 Jun 2025 02:00:52 +0000
Manifest this update: Sat 14 Jun 2025 02:00:52 +0000
Manifest next update: Sun 15 Jun 2025 02:00:52 +0000
Files and hashes: 1: SoPufcwyg3sLpbiR2PFFQ1qztgo.crl (hash: yXw8cV3oY8AKniM/F6qZdOLgGGIZmZZ3PUojZtT8Nk0=)
2: sN71VdE_vP-brkQYYHxei4Ctk7k.roa (hash: Ng80yhJSUZ9ywzwtEcf5TCIYC5bSHVuPL+nXnqyIEIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:15:3f:e2:ec:18:6f:3a:31:51:3d:8e:b0:bd:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Validity
Not Before: Jun 14 02:00:52 2025 GMT
Not After : Jun 15 02:00:52 2025 GMT
Subject: CN=64e831b67f08c17ee7f6cafea7e28316d5f33014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:99:13:2a:cd:c4:88:8e:46:92:94:03:5e:
73:ea:9a:d7:e7:62:2a:71:bb:97:4a:da:8e:28:5e:
8d:19:87:8f:49:83:f7:5e:8b:7e:67:7a:ae:be:de:
6f:f8:40:29:3c:87:c2:b4:8a:90:cd:88:e1:6c:6e:
5b:8b:13:75:de:c4:90:43:6a:6b:5a:fe:dc:24:f6:
b3:8b:36:4c:92:21:ca:87:8e:1f:e8:54:fd:62:26:
cf:a3:86:69:39:08:6f:09:ad:c5:6c:25:3e:55:03:
ed:56:2f:a4:ee:0e:87:36:04:f3:4e:82:52:96:34:
b2:bf:af:38:48:5e:21:2b:ac:6d:8b:7d:0b:df:7f:
13:61:d9:ed:1d:d7:5a:69:d5:35:d7:f9:d1:d4:fa:
b4:d4:b6:6d:f3:ce:bd:3e:d3:90:e4:07:ad:c6:ca:
a3:0c:dc:d6:fc:bc:36:56:c8:2c:ee:03:7e:3e:0e:
2a:28:58:88:4d:71:ce:d7:66:c3:59:ce:5a:84:c3:
e0:39:1f:6b:01:89:c0:91:1a:a6:b8:fa:50:dd:4c:
8a:78:a8:6a:88:04:53:9f:a8:de:aa:b4:3e:72:dd:
3e:64:2e:52:dd:d1:be:16:35:95:93:0a:9c:bb:b9:
46:71:7f:1f:44:f7:6d:fc:4b:2a:7d:0f:a6:f9:4e:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E8:31:B6:7F:08:C1:7E:E7:F6:CA:FE:A7:E2:83:16:D5:F3:30:14
X509v3 Authority Key Identifier:
keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:39:af:38:c2:0f:b9:c5:12:6a:13:62:ee:26:f1:10:d4:ed:
d0:85:6a:e4:a0:09:07:c3:b5:9e:ca:48:b2:0e:bc:5d:86:1b:
7c:d4:f9:3e:be:af:ff:be:8a:26:72:14:cc:a1:86:a4:68:08:
0f:6f:eb:f4:44:00:dc:25:f1:5e:00:1c:19:b5:f2:2b:fc:0a:
25:8b:97:3e:69:78:c0:a5:f1:df:ef:f9:e3:0b:e2:0c:7a:3b:
07:8b:72:72:76:9b:9f:64:53:68:38:a1:05:af:98:ed:e8:2e:
09:d8:08:b6:d4:99:bd:e1:20:26:77:19:0a:d3:41:26:e0:4c:
7b:df:ae:de:ca:fa:39:02:2d:5d:03:c5:54:b2:5b:13:34:ca:
1b:a4:63:df:d6:51:7b:e2:1d:17:eb:56:0a:30:66:b5:03:5f:
fb:d5:d0:e7:f2:07:fa:32:b1:b9:d8:68:be:85:91:81:f4:6a:
8b:66:27:c3:49:2c:86:32:da:c3:bb:8a:2b:12:e6:bd:69:db:
7a:91:fc:d6:db:96:5d:28:5f:ab:d1:59:18:04:ae:37:0e:c8:
c6:9f:cc:79:02:97:b8:fd:ba:13:95:12:31:78:1d:0b:94:11:
27:d4:0c:af:f7:e1:d5:59:51:0f:58:cf:2b:1f:f0:d7:ef:02:
a5:13:3b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:50:16 2025 by rpki-client