Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
File: suORFp8MnyGqjy6J5zdccuxnT-s.mft (raw, json)
Hash identifier: PIBcqjR0Fslkyhleay13O4QQpEwgs2is8l4kCRwhVH8=
Subject key identifier: 00:85:33:1A:1C:12:46:54:F5:B1:8E:C4:09:98:0C:09:3C:61:0F:1E
Authority key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Certificate issuer: /CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Certificate serial: 019769CEF38D039EC547E848A0A2EB01E797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
Manifest number: 1520
Signing time: Fri 13 Jun 2025 15:00:59 +0000
Manifest this update: Fri 13 Jun 2025 15:00:59 +0000
Manifest next update: Sat 14 Jun 2025 15:00:59 +0000
Files and hashes: 1: SMvSpcul2Uq4ULXG7ttuvxBBLrU.roa (hash: 2+bGMEFTYIooOi165hCQ7BSjW1Q3smQG481hPb6dBzo=)
2: suORFp8MnyGqjy6J5zdccuxnT-s.crl (hash: Ecab/MRGJAOLqJoe7xI/BkjMGOAYPq2gDVxH7F87fGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:f3:8d:03:9e:c5:47:e8:48:a0:a2:eb:01:e7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Validity
Not Before: Jun 13 15:00:59 2025 GMT
Not After : Jun 14 15:00:59 2025 GMT
Subject: CN=0085331a1c124654f5b18ec409980c093c610f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:1b:00:15:5a:d3:9e:cf:4e:37:65:31:32:
fa:e4:79:3f:f7:ac:9d:b0:a9:b5:49:50:b0:e9:df:
d6:17:0e:26:35:7a:17:9f:76:93:3f:26:74:cb:d2:
b4:0a:bc:30:a4:28:ec:3e:7a:4c:55:89:5f:7a:93:
12:56:3b:66:5f:76:92:c8:ac:3c:87:15:0d:dc:8a:
b7:b0:2e:1d:4a:af:96:db:41:08:2d:ae:93:ce:75:
64:f8:58:e7:4d:68:b7:43:71:79:f8:97:9b:a5:b3:
49:c6:e7:b7:5c:d0:4a:bd:a1:c3:cc:30:38:df:ef:
51:67:82:06:7e:c1:8e:b9:f1:66:92:b1:dc:5a:7d:
98:06:40:39:59:f8:99:d6:4b:63:aa:fd:4f:d1:f0:
3d:54:81:4b:d4:bd:4c:01:34:a1:82:50:85:de:c1:
b9:5b:60:ac:6a:83:38:e7:3a:29:26:53:77:41:9c:
cd:19:6e:9e:9c:73:08:f2:a5:3a:74:12:b3:de:75:
2a:a1:f2:b6:f5:ce:a7:f9:1a:dc:4e:87:4d:6b:f1:
4b:39:40:be:ee:d3:87:09:f4:3c:4c:a5:3c:0e:20:
aa:c3:13:19:62:72:31:58:9b:be:ce:12:14:de:6a:
c7:69:8a:08:9e:16:e3:97:9a:f1:a0:dd:6d:64:74:
05:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:85:33:1A:1C:12:46:54:F5:B1:8E:C4:09:98:0C:09:3C:61:0F:1E
X509v3 Authority Key Identifier:
keyid:B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f2:dd:f8:2c:01:0a:d2:40:87:bf:75:fe:a5:20:dd:c0:01:
9b:0b:e6:b7:b1:d3:44:21:74:f1:82:0c:86:21:4f:54:ee:eb:
a0:fe:e4:de:7b:d6:81:09:76:74:e0:43:32:ff:e5:67:1f:f7:
3b:56:38:0c:03:fd:cf:62:4a:33:06:94:3a:df:08:49:fc:1c:
2a:84:94:08:21:8e:a2:07:6e:e3:86:bf:88:e7:e8:87:f0:88:
08:a1:ab:8d:6e:30:6c:7b:e6:e3:2e:0d:c4:7b:b9:20:01:5c:
62:9c:8d:15:05:61:b5:aa:bf:9a:21:38:79:04:b9:e6:06:d7:
24:a7:38:f0:d0:5a:70:8f:ac:03:d5:1f:10:4a:06:59:8f:4d:
e4:21:1d:f5:53:bd:11:ef:30:74:23:3b:50:f0:7d:1b:3f:28:
c9:41:35:bc:6b:be:79:46:a5:d1:9f:ba:73:08:23:c4:5a:69:
e6:87:b3:38:ed:e2:30:2f:1d:df:39:fc:46:c9:ad:ef:ae:de:
6d:af:98:68:c4:2b:0a:cc:05:19:4f:d7:e3:90:46:db:32:e5:
21:c6:95:97:2e:d2:d9:16:6a:ea:de:84:61:ea:be:2a:2f:e6:
c4:ef:03:64:c7:b6:66:6d:46:d4:1f:58:02:d5:72:d0:69:20:
41:06:88:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:00:37 2025 by rpki-client