Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: q0urBVqPytNu+/5piByproIrBaD5sEbXJpVJL98e1OU=
Subject key identifier: 9A:0F:7E:9B:4C:2B:BC:C0:B2:16:DA:DB:38:9A:D7:01:B9:38:D7:A1
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 019763CC70178BE46B44FF3E3F1F10A09E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 035A
Signing time: Thu 12 Jun 2025 11:00:31 +0000
Manifest this update: Thu 12 Jun 2025 11:00:31 +0000
Manifest next update: Fri 13 Jun 2025 11:00:31 +0000
Files and hashes: 1: TtWAkSfWnAdWkPSbjWsj0bQP2Qs.roa (hash: aq+t6Xrt8tsoSTCr/VP5wkOGWF6BiCi7pgwlC8GWdxs=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: vR+ypI/dA9Wmo78xCImjBMvz/HLFpb2iFtpSjTEXOuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:cc:70:17:8b:e4:6b:44:ff:3e:3f:1f:10:a0:9e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Jun 12 11:00:31 2025 GMT
Not After : Jun 13 11:00:31 2025 GMT
Subject: CN=9a0f7e9b4c2bbcc0b216dadb389ad701b938d7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:53:cb:6a:76:61:4a:a5:54:ee:1a:79:f4:
c9:49:1c:6a:d4:a9:27:06:98:e0:42:be:59:8e:14:
46:57:f7:06:7b:e5:72:0b:00:6a:8a:10:d3:79:51:
c9:21:51:94:b1:f4:b2:25:4e:01:76:14:af:a7:80:
35:f2:c7:1a:e5:5c:5e:8d:94:2c:5d:ac:d4:07:b1:
1a:30:ed:4c:88:b1:21:5f:94:85:97:05:4b:5c:c5:
b2:a9:b0:82:84:bc:d6:42:a6:42:ce:b2:27:1d:2d:
e0:99:3b:10:20:e1:d0:d2:a4:e2:db:2d:33:06:f6:
6e:6a:df:8c:bc:08:d7:cd:97:37:f0:b5:37:c5:4c:
59:b8:51:75:42:f5:90:31:ad:b3:ba:4c:40:2d:c6:
ce:f9:07:cb:48:d0:bd:72:bf:62:60:77:3d:6b:93:
c1:83:56:a6:b6:a2:6f:5d:66:61:5b:a8:7a:8a:60:
54:a9:10:48:80:18:5c:8b:11:9b:78:dc:16:55:5f:
69:3d:5b:4a:2e:cd:22:0c:de:57:a6:0a:00:21:65:
f2:36:a1:a7:a1:60:c8:ef:d6:48:d7:0f:f6:eb:a8:
00:11:2e:0f:53:bc:f7:ef:64:aa:0a:14:33:c5:2a:
31:c3:8a:60:10:2b:01:6e:cf:d3:81:e8:a3:35:1f:
2e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:0F:7E:9B:4C:2B:BC:C0:B2:16:DA:DB:38:9A:D7:01:B9:38:D7:A1
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:63:f7:a9:44:ba:ef:24:6f:18:a8:15:a4:9f:fb:54:a9:ef:
4a:5a:02:08:4e:fe:fc:d7:3a:15:d2:02:93:87:92:54:0c:be:
bf:4c:cf:9c:9e:0f:ea:1f:bb:83:85:86:79:67:0c:97:b0:a5:
90:b0:0b:c2:8c:b2:9d:6c:67:22:15:68:a9:46:34:0d:aa:09:
d5:99:0b:aa:31:c7:98:6b:e9:90:c3:ec:fb:23:2b:01:50:02:
17:8f:f8:8b:68:1a:b8:bb:28:e2:9e:9a:59:61:34:91:cf:4e:
71:d8:42:59:40:61:cf:0e:72:aa:9c:bd:33:b2:98:cc:8a:9c:
99:fa:79:30:a9:70:72:ca:3e:63:5a:75:1c:98:36:43:22:21:
ad:f1:4a:7c:c7:33:36:93:66:ac:91:2f:89:5d:89:05:80:61:
4f:cd:11:77:02:71:61:6a:ee:4c:a5:01:e4:d7:99:25:3e:95:
cf:29:5e:b9:f0:cd:21:ed:76:e9:f9:46:75:b3:ea:a4:72:a0:
da:00:bf:28:1b:23:a8:a5:51:9d:87:2d:15:36:02:83:d2:20:
7f:2e:b1:84:21:bf:ef:3d:7c:27:8e:6f:fb:2f:3a:14:37:30:
b7:2d:05:b9:08:13:c2:14:ba:86:53:af:3a:51:cb:cb:ca:81:
b4:02:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:52:36 2025 by rpki-client