Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
File: SA4-gK7rhMMmEvT60RbiaQpUbHo.mft (raw, json)
Hash identifier: f5GKe5HAuPFLAvF8dJGzzFr+hbCr7T/KHgzjsHkEfHA=
Subject key identifier: 21:51:D9:C9:0D:D7:92:87:51:C8:E1:CE:39:83:A1:98:69:B5:34:45
Authority key identifier: 48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
Certificate issuer: /CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Certificate serial: 01975158B317535859A3BFBDCACD4A00B919
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
Manifest number: 0539
Signing time: Sun 08 Jun 2025 21:00:56 +0000
Manifest this update: Sun 08 Jun 2025 21:00:56 +0000
Manifest next update: Mon 09 Jun 2025 21:00:56 +0000
Files and hashes: 1: SA4-gK7rhMMmEvT60RbiaQpUbHo.crl (hash: Qi/jv+jkuqBn7EqSjawxnCtkg/QTPs0XSACUxvPRqbI=)
2: UgsM9IySNlxMAMu3nxLBQeRmBwM.roa (hash: iWc/Vehzon/VP/j65KvlMpaDrurTE8lXeWv7jdRc8u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:b3:17:53:58:59:a3:bf:bd:ca:cd:4a:00:b9:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Validity
Not Before: Jun 8 21:00:56 2025 GMT
Not After : Jun 9 21:00:56 2025 GMT
Subject: CN=2151d9c90dd7928751c8e1ce3983a19869b53445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:e3:21:cb:ea:74:ca:fb:fd:40:50:30:2c:
0b:55:6f:0d:48:92:a7:42:1c:e6:14:ea:05:61:8d:
af:c6:0f:1f:af:2c:a4:f9:d1:de:a4:37:c3:e6:cf:
3c:ae:2d:3a:c9:55:c7:b7:d1:85:f2:ca:b4:fb:97:
99:a6:f9:d0:57:61:1e:8d:90:d5:b5:01:38:7f:49:
b7:d4:bb:34:3c:33:c5:59:01:e4:56:b5:7e:fe:14:
a4:a6:9c:77:71:1c:68:b5:87:91:62:da:54:a8:5b:
d5:2c:09:6a:d5:6d:19:9f:f1:1f:4c:45:f3:68:16:
dd:a3:68:bd:13:01:7c:fc:21:ae:7f:e2:34:3b:89:
1a:01:91:ca:25:3c:67:cc:48:8b:83:ee:67:73:c9:
2a:aa:d9:ad:e5:9a:65:e6:e9:39:67:ea:81:94:13:
07:33:1d:9f:1d:98:86:37:bb:56:a1:03:12:fa:01:
a0:f9:f8:14:94:9f:be:d7:8b:99:b2:ba:42:9f:bb:
11:bc:bf:09:a7:dc:d2:8f:eb:d4:75:6f:fb:b9:2e:
77:bf:2e:0d:f1:7a:37:ba:72:d9:1f:37:55:85:db:
10:e7:97:ac:6a:81:12:08:ca:bd:b1:f0:2d:2f:0b:
06:a7:d1:07:cd:39:5b:e3:72:d6:63:96:8d:18:64:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:51:D9:C9:0D:D7:92:87:51:C8:E1:CE:39:83:A1:98:69:B5:34:45
X509v3 Authority Key Identifier:
keyid:48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:29:c7:26:c3:8c:23:7f:7a:23:91:7c:c4:56:25:37:af:e3:
a6:04:30:eb:07:33:ef:d4:12:70:9b:a9:a8:35:2c:b3:e5:e8:
0d:df:2f:2f:e8:48:96:3d:29:ed:9f:8d:05:df:f5:b2:85:4f:
3b:f5:ae:33:08:81:09:76:d5:14:2f:2d:ee:e4:03:a0:2a:93:
2f:8d:c7:99:ee:4e:8e:4d:fe:31:42:3c:11:c4:f8:cb:04:1d:
b8:26:0e:d0:d4:14:16:de:9a:a5:27:d7:c6:d1:99:48:52:f8:
7c:b3:c5:eb:0d:3b:20:09:b7:63:76:51:85:7d:70:3c:d5:c0:
da:e6:cc:30:54:7e:dc:a2:cd:76:12:a8:3a:46:36:0a:31:78:
51:33:8a:f1:f5:62:00:a2:08:02:ee:7b:ce:a2:8a:62:43:4c:
16:6c:f3:bd:0c:af:aa:bb:fd:f1:86:3e:8a:81:5b:85:ca:a8:
77:ec:89:ca:1c:4d:79:fa:c9:5d:30:d6:8b:27:e7:de:cd:bf:
30:46:00:cf:b0:a1:97:6a:53:a4:88:7f:e9:ac:76:73:60:0a:
e7:7d:88:69:30:d9:7a:de:c4:a9:2d:e2:10:86:4b:fe:ff:89:
d8:be:87:d0:01:d0:af:fe:bd:2b:f2:3f:a9:41:14:bc:f0:4c:
78:92:6b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:37:00 2025 by rpki-client