Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
File: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft (raw, json)
Hash identifier: nyHnK/k1dyI8jm+weeycEWfXj7Mvc1QEKt2ObaZvtCk=
Subject key identifier: 2D:1E:B4:26:C9:69:E5:BF:E0:0D:0E:B8:A7:1D:06:5A:42:36:7D:D4
Authority key identifier: 4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
Certificate issuer: /CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Certificate serial: 0197534762CD5E343D7371BC10CF9A3210A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
Manifest number: 023B
Signing time: Mon 09 Jun 2025 06:01:16 +0000
Manifest this update: Mon 09 Jun 2025 06:01:16 +0000
Manifest next update: Tue 10 Jun 2025 06:01:16 +0000
Files and hashes: 1: 8m2tBlzpxiqL6kK0VrkHkgcTou4.roa (hash: 0P8p9ZGo9OL3ArRsj5WLpA2L7n8Ub+2jDkN4NpO9vF0=)
2: SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl (hash: QE+4o5X8RAPslzNAzwonaWOi0ucWGNhk5t0NW8Bqu54=)
3: s4XNe0m5JYFtPI85hv2GLzYIY68.roa (hash: pE7eHdiD/UhztagcGqo6QdniDLwOOKzreXSfWjlvBJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:47:62:cd:5e:34:3d:73:71:bc:10:cf:9a:32:10:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a04bcc2fee1c3a2e04388260e10644b65e701f3
Validity
Not Before: Jun 9 06:01:16 2025 GMT
Not After : Jun 10 06:01:16 2025 GMT
Subject: CN=2d1eb426c969e5bfe00d0eb8a71d065a42367dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:d6:15:86:34:33:de:17:4e:bc:b6:5f:c6:
53:72:af:39:8c:13:b9:b9:cc:97:93:ff:24:97:6c:
23:66:9c:46:8e:15:da:8a:f3:5e:a4:33:e0:a0:20:
b9:83:6d:8e:8b:8a:bd:da:8c:f7:88:1d:c1:54:8c:
9f:d6:32:51:d2:c1:38:38:22:fd:81:03:d0:f2:2c:
10:a6:e2:d2:54:3d:d6:74:07:cd:9e:1d:9c:33:fd:
6e:8d:a1:dc:ea:a8:ac:cf:fb:42:45:ec:73:ad:43:
67:1a:b0:62:17:cd:d6:85:b6:69:2c:13:41:cd:ef:
91:0b:c2:8f:81:93:c8:e3:3b:e4:6f:4b:25:20:de:
80:81:a1:40:74:2c:f4:a4:53:cb:5d:05:5b:8b:77:
0c:38:30:58:0d:e2:45:4e:2c:6f:88:bb:6f:27:e1:
45:77:1a:8f:2a:a8:c4:5b:fe:7c:33:1f:12:c0:56:
76:10:a0:35:59:0a:f5:fd:dd:1f:3f:b1:39:76:a6:
ae:07:d3:b6:bf:e1:53:f5:e9:d9:ab:86:89:96:7d:
63:e2:b3:b8:a5:47:02:12:e9:71:7d:14:3b:26:58:
e1:13:13:bf:ed:fe:bb:56:cf:3c:10:da:48:35:f0:
5d:a8:38:3f:74:90:64:38:1b:60:95:97:5a:66:35:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1E:B4:26:C9:69:E5:BF:E0:0D:0E:B8:A7:1D:06:5A:42:36:7D:D4
X509v3 Authority Key Identifier:
keyid:4A:04:BC:C2:FE:E1:C3:A2:E0:43:88:26:0E:10:64:4B:65:E7:01:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/599740-b96e-49c4-b604-63f197fb1c96/1/SgS8wv7hw6LgQ4gmDhBkS2XnAfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ac:c4:69:94:c6:0a:40:98:4a:19:f5:17:de:2c:c3:45:0d:
a6:9f:41:83:00:fa:0b:34:a2:f1:bb:7e:6f:05:f7:17:69:c9:
71:d4:eb:c8:10:60:64:64:73:89:c1:91:8d:06:2e:99:93:90:
4a:88:00:25:b0:eb:58:69:bc:38:95:5d:fa:62:2d:cd:2c:a3:
53:04:6d:ac:1d:d4:8d:1d:66:d9:7c:8c:67:4c:4c:24:1d:99:
f0:b8:d2:21:ae:cc:9d:82:d3:04:f4:b9:ee:92:e2:f6:de:f4:
2c:66:39:b4:de:3f:70:12:a2:7f:69:09:af:23:37:fd:3a:99:
45:d1:3e:c5:70:3b:99:20:08:6d:00:0e:ca:a6:c6:3d:ed:56:
68:32:7e:af:52:7a:83:17:bc:9c:69:da:cc:83:f7:76:38:26:
d7:e6:0e:d4:01:c9:9c:59:dd:03:2e:6c:08:4b:10:83:22:27:
55:02:37:75:13:8f:75:de:09:90:13:ae:98:15:a5:3d:92:fe:
ad:56:cc:eb:62:6e:f2:e2:45:f3:dd:0e:b3:fb:25:5a:bd:30:
e7:23:4a:11:91:7f:32:b3:a0:b2:d7:6d:bf:c8:e8:20:4d:2a:
a0:a8:2c:63:59:c7:20:05:49:8e:c5:b4:73:fd:fd:d7:a5:52:
fc:b5:5a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:52:36 2025 by rpki-client