Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
File: sKVpmgjHv9cHz7BtMhP1ysvyglc.mft (raw, json)
Hash identifier: Np5gB7PPVgzF77eZj8e58Ci5XQS5hF2qKDttmPSjFPA=
Subject key identifier: 9F:F4:A4:FA:CE:BC:E4:22:C3:0A:49:64:C8:70:96:86:58:17:CA:37
Authority key identifier: B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
Certificate issuer: /CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Certificate serial: 01974D44AA024D9D7FE7B647C8928B68C35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
Manifest number: 05AD
Signing time: Sun 08 Jun 2025 02:00:34 +0000
Manifest this update: Sun 08 Jun 2025 02:00:34 +0000
Manifest next update: Mon 09 Jun 2025 02:00:34 +0000
Files and hashes: 1: 0Z-sHAnSl4bp7AfPwuyFGmDsZbs.roa (hash: Qd7UsFgJxINuR8Lxz3kq3vgAmJnbsTZmvzg3tBE1gSg=)
2: PLGff91PpnIaKhW2uDOuQAHfxZI.roa (hash: tVtdUbnR9K0LDd3rO9R8lG1IenCOkCUAxrqcCPMKhz8=)
3: sKVpmgjHv9cHz7BtMhP1ysvyglc.crl (hash: hGjW1HHOgeg3djEgJ2P4OR8YPNB9uJ58IwOJp2ovi80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:aa:02:4d:9d:7f:e7:b6:47:c8:92:8b:68:c3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Validity
Not Before: Jun 8 02:00:34 2025 GMT
Not After : Jun 9 02:00:34 2025 GMT
Subject: CN=9ff4a4facebce422c30a4964c87096865817ca37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c6:aa:2d:4e:27:66:20:fb:96:3c:1c:97:74:
55:62:24:c3:b7:64:39:c1:0a:82:98:6c:54:5b:96:
c7:25:7f:8e:41:c0:f3:63:c5:ef:ed:f7:01:74:fd:
16:67:aa:e8:6e:89:00:90:e2:1c:56:22:ea:af:0e:
2f:1c:7a:8b:a7:d8:59:79:a0:33:ef:72:96:ad:34:
e0:a0:9f:77:9b:17:82:0c:53:8a:93:e3:85:23:e9:
83:0c:7b:71:ae:c4:3a:d1:8e:82:3f:bd:1c:db:e8:
a0:c1:8f:c1:81:27:d2:6e:62:99:56:d8:c7:26:71:
fd:2f:55:09:a4:f2:39:84:d6:31:d8:1a:6e:d4:c9:
54:50:93:7c:9e:eb:91:f0:a6:64:75:ce:91:88:b9:
d0:50:a0:b2:45:fe:1e:18:16:3b:a4:79:61:5d:4f:
07:b0:19:60:22:63:fc:05:aa:a3:0e:3f:88:16:1c:
53:49:eb:15:4a:f7:d7:8c:98:4c:1b:42:53:4d:d7:
e2:8f:1b:ad:71:c6:d7:99:2b:b8:0f:6b:20:46:1a:
3a:1e:cd:ca:8d:61:ae:dc:44:de:a6:06:f9:5b:58:
56:c9:86:5b:8a:9d:22:49:57:57:27:1d:dd:9f:7d:
5f:be:01:59:a8:2f:34:be:10:b9:32:49:17:72:17:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F4:A4:FA:CE:BC:E4:22:C3:0A:49:64:C8:70:96:86:58:17:CA:37
X509v3 Authority Key Identifier:
keyid:B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4e:f3:c0:db:6e:01:80:0f:b2:8e:30:20:98:d0:0f:6e:01:
4d:62:ec:a1:cb:33:6d:35:ad:78:88:c1:67:1e:42:e5:03:d1:
1b:59:65:09:3f:b7:b6:46:9b:d7:a1:e0:f0:7d:cc:c8:21:e9:
2a:6d:84:82:a9:2e:96:6b:85:b8:a1:36:9d:c5:86:c0:b3:83:
b2:82:d7:d4:95:2e:65:33:db:6a:dd:b3:c0:d6:da:f8:b5:56:
ee:c0:14:68:29:e6:78:0b:7d:33:ab:fc:ba:85:a3:5c:d6:2c:
cb:2e:0c:67:40:ee:c7:45:30:3e:b6:c5:3a:4f:79:80:55:87:
af:f1:92:4c:88:0a:ae:0a:96:2d:c5:3b:33:ec:20:94:7a:6f:
dd:bd:0a:4c:13:5d:42:34:ae:cb:36:a9:9a:7e:82:80:28:e6:
ea:b7:f2:ec:96:a4:52:75:d2:13:96:1c:8c:4f:db:63:8d:76:
d2:c0:43:b2:43:e8:26:2f:b1:66:59:94:00:e7:5b:2a:8a:95:
84:44:96:d7:0e:12:87:23:86:c7:5e:16:00:f9:ff:36:dc:3e:
8c:b7:85:cb:cd:4f:4f:80:b9:88:69:bc:59:7a:c3:96:d5:0a:
d4:af:10:e6:19:4f:2f:fd:22:5e:e0:26:49:c3:41:c8:a6:d7:
d3:61:0e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:15:25 2025 by rpki-client