Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier: KEGQqjFVe0+yScS4iVGGfhE/xSX35YL1hdwWpQIyf0w=
Subject key identifier: 1F:C0:7B:D6:90:8B:38:CA:EA:10:43:43:57:0F:1C:8E:89:36:EC:90
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 01975121B34D04E5B8C9D588980DC959D579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 20:00:52 +0000
Manifest this update: Sun 08 Jun 2025 20:00:52 +0000
Manifest next update: Mon 09 Jun 2025 20:00:52 +0000
Files and hashes: 1: BHvEiTbi4Pq6B9PpmT5f6n87vL4.roa (hash: s+QevCZ3wcDACFh+jWTrJPdapoQkuOB0iQkRIdmgUkk=)
2: Nvgx0NStgiF6lAwa5XAPUa97GUc.roa (hash: HepcNDvL/nGXjv68tFuvUcj3BhJTbTJLihV6JiWEI70=)
3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: deb5IygMEJeUGOngLi1ONWbKw3i3PVxLnlTwVb9ajWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:b3:4d:04:e5:b8:c9:d5:88:98:0d:c9:59:d5:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Jun 8 20:00:52 2025 GMT
Not After : Jun 9 20:00:52 2025 GMT
Subject: CN=1fc07bd6908b38caea104343570f1c8e8936ec90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:f4:d4:e3:85:9a:87:9b:ab:86:3a:a9:9b:
66:97:a8:d6:22:20:f3:36:63:83:73:57:2f:34:51:
13:bb:10:83:1a:b3:5d:b1:3d:27:76:7a:ca:f3:21:
5f:1c:81:c0:63:f9:f2:5b:16:95:a5:3e:a5:d4:58:
2c:cf:3b:65:dd:4e:78:54:40:fa:91:ea:e4:73:e5:
fe:3b:e6:25:e9:45:06:be:b5:38:06:9d:ff:56:f7:
3c:95:34:a9:f7:a8:9f:ec:a8:c7:cd:44:47:28:59:
50:ae:35:f6:1c:e4:78:2b:15:87:98:ee:8e:a8:df:
6d:a2:d2:ee:5e:0f:b8:90:b8:23:6f:4a:7b:23:5f:
11:66:d2:9c:e6:d1:ff:95:ef:10:10:7f:48:d1:cb:
18:39:55:29:81:01:24:a1:49:e2:81:35:e3:72:f0:
c3:4b:af:83:c0:da:43:9b:d1:c3:82:30:22:52:6a:
2c:6e:45:cf:a5:53:4a:f9:a3:10:5a:c9:85:25:17:
a1:51:0f:dd:aa:16:90:41:0f:b7:25:89:25:dc:aa:
80:06:03:24:ea:16:a3:14:e8:c8:e2:0b:84:48:ea:
5d:cf:17:43:10:86:a3:bc:13:2f:3a:6f:66:25:02:
76:39:3b:dc:be:c3:90:92:0d:3b:ff:fe:16:b7:66:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C0:7B:D6:90:8B:38:CA:EA:10:43:43:57:0F:1C:8E:89:36:EC:90
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:df:df:8e:18:3c:30:ae:8b:98:6b:64:b8:0a:dd:16:42:1a:
f5:25:a5:ed:18:17:92:d5:8f:23:b2:63:2d:05:ae:a1:fc:e3:
be:70:9c:83:a6:5f:8d:03:58:81:1e:25:86:b0:fc:22:54:94:
fe:a9:98:38:7c:b2:44:9f:7b:bd:5d:01:d6:d4:fb:1a:fc:c7:
e1:cb:90:05:d9:a2:d8:c1:7a:ee:2f:5c:ba:08:03:12:0e:d3:
24:44:f4:c0:45:94:dc:f5:37:89:ed:d3:c2:24:85:f6:8f:ba:
4c:af:1c:ba:da:57:b0:88:c7:9d:9a:d4:76:02:64:19:fa:9e:
e8:e4:d3:40:d6:f7:3b:97:49:4d:b0:6e:72:1d:73:c3:7b:88:
f5:37:64:8d:bc:cc:78:cf:19:d1:1a:25:6f:9f:df:39:f7:e9:
9d:eb:93:3e:80:5c:de:8e:3a:7d:f8:61:4b:54:76:a3:c8:0d:
5e:99:1e:75:15:b5:19:0d:c1:4d:7b:08:f3:87:29:d0:19:d2:
55:a9:82:91:55:05:73:1f:e3:be:cd:a2:4c:98:45:19:9b:22:
d7:ad:8e:6f:d7:ca:37:37:ea:d4:18:01:b5:0e:b5:67:55:1d:
f8:86:1b:71:49:4d:47:a7:3f:e2:9d:a0:1b:27:27:77:9e:63:
ae:d3:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:45:41 2025 by rpki-client