Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: kLpRX80GRmkRNDthccgtHVq7ViDlHFkrVbCWcXr+MBM=
Subject key identifier: 2F:B4:E1:EA:AC:AB:0C:7A:6C:23:C1:FA:02:4D:52:B6:A9:DA:03:38
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 0197470C55B8696507DB45BBB8306370BBB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 0CEE
Signing time: Fri 06 Jun 2025 21:01:20 +0000
Manifest this update: Fri 06 Jun 2025 21:01:20 +0000
Manifest next update: Sat 07 Jun 2025 21:01:20 +0000
Files and hashes: 1: 4EkSsDmoQioZqy5Nx3ZgwgNVKek.roa (hash: VGhbj0GwVploD/uygEp/n7MuApEtZ3hQmaUGbybY4XI=)
2: LXrqqPRInqT0YQQrkSiScVOv68s.roa (hash: RhWWbbeT6YQP2eTW6sSumZ2mUd9atkadmzcbsktp9d0=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: 5E6InEUv7zGOrC8MUBvvpvWOFvL1rdTfBxovvCFpU98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:55:b8:69:65:07:db:45:bb:b8:30:63:70:bb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Jun 6 21:01:20 2025 GMT
Not After : Jun 7 21:01:20 2025 GMT
Subject: CN=2fb4e1eaacab0c7a6c23c1fa024d52b6a9da0338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:97:ed:b5:d1:87:73:02:99:6a:22:bb:f2:
2e:e0:4d:84:7d:49:50:50:13:7a:52:69:4f:f4:1a:
46:af:b2:82:24:45:78:f4:08:fc:e3:a5:80:c9:af:
e8:84:81:64:42:99:21:a7:41:f6:23:d3:c1:ef:b4:
a3:0e:19:53:6b:2a:b8:37:f2:21:3f:10:91:6e:34:
5b:7f:03:39:a5:0f:f5:71:f1:5b:4b:ec:89:b4:99:
f6:9b:88:fb:a4:8b:c0:0b:82:96:1d:54:af:99:ef:
e9:95:6a:a6:cf:d6:88:bc:0b:99:9c:50:d7:8f:73:
70:22:78:60:88:5b:3c:68:a7:ee:11:07:82:13:15:
2e:d3:e1:03:f1:b9:ed:61:b4:61:c0:f6:a8:af:3f:
e1:09:7f:8f:13:47:55:75:11:99:56:d4:6d:d6:58:
85:35:3b:d7:fc:65:36:35:e4:11:70:79:91:10:bf:
e2:6f:70:ae:8f:a1:ac:52:68:89:90:dc:7a:48:fe:
61:a7:93:5a:c1:59:10:8b:ca:7f:10:b0:a5:03:88:
dd:2e:dd:84:80:4b:df:a5:75:5a:c5:d3:2f:3a:1e:
3f:1a:0b:2e:54:ef:a2:48:fb:2c:d1:6f:1b:3c:70:
cb:de:90:25:08:dc:89:06:4a:73:02:a7:54:75:a8:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B4:E1:EA:AC:AB:0C:7A:6C:23:C1:FA:02:4D:52:B6:A9:DA:03:38
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:51:9f:3d:c7:80:81:9e:84:f8:02:50:5b:0c:84:25:ec:88:
ab:d9:74:b3:e4:c9:34:57:6f:6c:78:c2:1e:0b:ce:0b:a2:9a:
65:59:2f:87:14:db:7d:90:41:5a:e7:6b:9d:e0:39:a4:f5:71:
0b:f7:16:b3:02:fd:f9:4c:f3:7b:55:40:4c:ed:9c:89:92:e9:
69:9d:b0:4f:6c:d2:cb:dd:91:53:bf:f4:d6:7d:8f:55:19:44:
c9:ed:6c:33:54:16:f0:e1:6c:60:c3:7f:3c:8d:63:23:46:a0:
1c:4a:81:30:7f:b6:a8:d1:dc:1e:46:7d:e6:13:cc:cd:97:86:
19:2f:41:c0:21:26:b6:24:b2:0d:f6:44:98:7a:38:83:43:c3:
37:5f:9c:cd:39:61:7d:95:99:6a:7f:2a:78:66:58:7d:77:3c:
ca:a4:a7:5f:50:f1:86:c3:86:c2:d5:c8:75:e0:92:4f:27:73:
f6:99:10:ae:c7:fa:86:10:cb:18:c7:bb:e3:39:88:a2:30:cb:
98:f2:4f:3c:e7:75:b8:4b:3a:06:47:40:15:f5:da:1c:9b:c4:
d9:1f:73:93:ea:2a:5a:9f:5b:a0:e8:d9:b1:e3:93:53:44:44:
1f:00:b0:ee:d5:9a:ea:d6:18:bd:ba:8d:9e:60:93:7c:6f:53:
8a:59:01:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:15 2025 by rpki-client