Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: JMhTXBvBjY7VLEgZNiDnW8t3bbInu5YhLPUHiMlh7Uc=
Subject key identifier: 55:75:2D:1E:E0:2E:EB:37:C3:C3:18:00:28:68:43:9E:86:9F:4C:C9
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 01975C13230E3D5DD5DBC0E075D471B40034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 0356
Signing time: Tue 10 Jun 2025 23:00:47 +0000
Manifest this update: Tue 10 Jun 2025 23:00:47 +0000
Manifest next update: Wed 11 Jun 2025 23:00:47 +0000
Files and hashes: 1: TtWAkSfWnAdWkPSbjWsj0bQP2Qs.roa (hash: aq+t6Xrt8tsoSTCr/VP5wkOGWF6BiCi7pgwlC8GWdxs=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: 0vAqA8sN1vJV24d4tOnNYnEvBB1pBgDCPB4Y1nWTIPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:23:0e:3d:5d:d5:db:c0:e0:75:d4:71:b4:00:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Jun 10 23:00:47 2025 GMT
Not After : Jun 11 23:00:47 2025 GMT
Subject: CN=55752d1ee02eeb37c3c318002868439e869f4cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a2:19:25:0f:0a:e3:fc:16:7d:23:ff:78:d4:
47:90:6b:0d:33:78:58:67:a1:b7:90:e4:06:d7:8f:
63:6d:2a:1c:01:51:ca:7d:ac:62:b4:a0:23:96:f4:
57:e2:55:8a:d6:e4:63:e5:be:03:c5:53:57:4b:f4:
13:ab:c8:89:da:d8:48:41:84:c0:c8:9b:44:ce:d6:
6b:46:6e:23:22:43:a4:10:9d:c9:67:ab:b2:30:31:
da:f4:f4:67:b6:e6:1a:e9:56:ab:39:c6:2a:de:cd:
3f:c6:e4:5a:60:f2:f4:22:ca:e0:91:0d:0c:a3:54:
93:7b:4b:d1:9c:47:5b:0f:83:a6:9e:f8:b4:94:dc:
7e:3e:97:c1:f4:81:52:73:84:16:df:ef:d6:0a:35:
ae:39:b3:80:b5:de:c2:8e:29:84:b6:68:99:79:59:
df:53:00:32:dd:e4:43:51:54:05:cc:1f:49:06:54:
25:ca:98:aa:5c:4e:8f:70:6c:8c:96:3b:41:09:eb:
a7:24:81:77:90:c3:80:7f:6a:e4:62:65:e7:b0:a1:
17:02:ae:52:4f:04:38:91:1b:92:d0:07:4b:0a:25:
88:83:04:1b:f6:8c:0a:5f:1c:a4:ba:0e:98:90:55:
c6:4a:76:58:a9:82:7e:e6:21:59:53:0a:63:2d:28:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:75:2D:1E:E0:2E:EB:37:C3:C3:18:00:28:68:43:9E:86:9F:4C:C9
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:23:89:a0:03:dc:a3:c9:d3:e8:38:c1:95:b8:a2:e9:a4:4e:
66:36:1c:64:c7:3d:6f:ab:53:07:c5:5a:49:3e:c1:b2:54:9b:
79:07:24:7a:ac:d2:1e:b6:62:14:ee:6a:d6:36:dd:b7:e0:6c:
4d:a7:c3:68:a1:99:4c:14:75:b4:31:c3:6c:ec:89:b7:76:8a:
4c:b9:1b:c9:4a:d0:22:3c:38:3b:bc:1a:b1:24:20:ba:ee:d8:
78:17:70:ee:95:4f:32:a0:15:26:47:e4:79:5b:45:4b:1a:42:
97:25:ce:9a:bf:13:f3:c1:11:15:77:5d:dd:b7:70:fd:2b:36:
b7:19:dd:2e:fa:5c:de:34:32:bc:f5:53:eb:17:35:31:27:8c:
58:ba:53:e6:d3:e4:86:7b:c2:9a:2a:99:51:53:53:c2:48:21:
de:20:d8:05:9d:60:3f:62:93:52:e6:28:81:83:d7:bd:fe:2f:
73:19:83:ed:8a:c5:04:f4:4a:a9:62:56:96:bc:68:76:9f:42:
70:ad:4d:b4:b5:bf:ec:2c:04:8a:05:71:43:e5:3b:63:cd:94:
b8:14:d3:43:50:06:3c:97:a9:59:f3:32:c9:cc:c2:90:2c:8f:
91:a4:6c:f4:a2:cb:ac:09:51:a4:d3:7e:72:0c:c7:53:7d:7b:
8a:85:4a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:34:09 2025 by rpki-client