Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
File: SF92J0yAXSWxFaOtuh0uoVTe6tc.mft (raw, json)
Hash identifier: vMS0rFFnSjqS61VC9J2rx+Z3Q12pKI7HArru0s2bsdc=
Subject key identifier: 45:48:03:E9:2E:D4:D8:32:B7:A1:FA:69:D0:10:FD:5B:CD:7E:C7:A3
Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7
Certificate serial: 0197470B8E44BBA5AA04774EF7B196363267
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
Manifest number: 0F6E
Signing time: Fri 06 Jun 2025 21:00:28 +0000
Manifest this update: Fri 06 Jun 2025 21:00:28 +0000
Manifest next update: Sat 07 Jun 2025 21:00:28 +0000
Files and hashes: 1: JWbxkXMT1AbpQisEDcJK6XiKzB0.roa (hash: j5i4M4w+YBqEaXEsOz14p6tq/xzrFVxmrAYSCZG3o+M=)
2: S81leN1fuHkrYmn7HxOWRSa_EgA.roa (hash: jKDEc5FdU7Yds63BEna9vHfX9LdcVE/wlCXgfCTj304=)
3: SF92J0yAXSWxFaOtuh0uoVTe6tc.crl (hash: UIe+LCEDPSGD46969Pg23CwG+TS6cu8wIsImUUY/dW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:8e:44:bb:a5:aa:04:77:4e:f7:b1:96:36:32:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7
Validity
Not Before: Jun 6 21:00:28 2025 GMT
Not After : Jun 7 21:00:28 2025 GMT
Subject: CN=454803e92ed4d832b7a1fa69d010fd5bcd7ec7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b9:d8:89:8d:40:38:50:ee:92:f8:1c:33:8a:
01:83:29:48:ea:51:4e:00:f6:f0:be:f9:f6:7d:e8:
8e:87:bb:3c:09:cf:39:00:54:bf:9d:44:c3:8e:51:
6c:3d:31:16:fe:17:60:7a:53:88:00:7b:73:72:52:
88:21:f1:aa:e7:7c:80:3c:ea:ba:87:43:ed:6e:85:
9f:4d:f7:02:d4:d1:eb:9d:43:3d:db:04:9f:88:7f:
ee:14:d1:be:49:4c:83:3c:b6:d8:23:a8:a3:f8:1f:
d4:80:f1:d0:a3:e4:22:1c:04:61:f5:c0:20:ae:a1:
aa:1b:2e:3f:d9:b7:32:ce:e9:3b:df:d3:4d:9d:c3:
e3:1c:a5:96:f2:70:57:20:16:b4:64:f8:de:1c:87:
76:8a:8d:f7:a4:f4:d6:e2:16:60:ad:3e:69:47:eb:
24:ee:3b:d8:3a:2e:d1:a2:65:04:f6:75:70:c2:7b:
cd:c4:5f:dc:d4:e0:f3:fc:62:94:d6:44:76:72:a3:
09:d3:ac:00:78:4b:4a:73:a9:21:5b:cb:d0:0b:62:
c2:09:c9:ed:10:72:75:24:de:72:9f:c0:e1:8a:f5:
ef:be:25:96:c7:97:5e:de:94:40:de:c9:74:71:67:
11:cc:74:b1:a8:b4:4c:cf:bd:0d:9a:c9:20:1a:dc:
d4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:48:03:E9:2E:D4:D8:32:B7:A1:FA:69:D0:10:FD:5B:CD:7E:C7:A3
X509v3 Authority Key Identifier:
keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:55:a0:7c:66:7a:15:58:f5:2c:b7:cd:d7:5e:09:47:74:89:
13:3a:3f:66:52:82:0c:d9:28:4c:29:00:e0:aa:26:58:89:31:
2f:4c:2b:6d:49:e6:d3:4c:1f:ba:f0:27:10:11:e6:14:24:64:
83:78:39:9d:d2:19:a0:88:56:e0:90:95:4d:86:90:bf:7e:f5:
45:19:a8:02:c5:57:e1:86:07:91:98:85:b2:21:8b:9b:1e:19:
cd:b7:1e:62:88:ba:ca:0f:42:e2:3a:94:e1:57:50:e0:a9:50:
2a:a5:c0:9d:ed:1e:a4:6b:c2:1b:aa:20:f8:74:ba:81:15:28:
fc:b2:db:90:b8:0f:d0:a7:c7:c1:d3:5f:1f:02:24:b2:48:db:
9e:dd:42:9c:d9:61:f7:fa:73:94:d3:bb:08:3a:3d:c0:c8:47:
ee:bd:be:43:42:48:60:d5:50:d4:67:a7:c2:3a:ba:d0:37:33:
72:32:19:d0:7a:93:09:82:70:68:a9:8f:f9:62:9c:90:29:c6:
b0:fa:1f:ee:19:7e:a8:80:94:b4:9b:4c:e4:a0:18:ea:ea:63:
82:8a:58:ad:ef:e7:9c:0a:a3:11:7b:8a:58:bb:d3:2d:8b:35:
e4:e7:a2:65:e0:8e:15:c3:96:e6:56:fe:f6:83:5c:df:f3:2c:
54:fd:5c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:53 2025 by rpki-client