Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: 9K1iWpnryZlxH3Ad6lcYI23z9s6E6NWI+BdxYTeMhDg=
Subject key identifier: B8:0F:85:EC:08:9B:48:20:C6:AD:A8:A4:49:AB:F4:2A:51:35:49:40
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 01974A0C702D93D005493446FCB488A1F1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 11:00:18 +0000
Manifest this update: Sat 07 Jun 2025 11:00:18 +0000
Manifest next update: Sun 08 Jun 2025 11:00:18 +0000
Files and hashes: 1: CwqvWSmBdm9lt3PehiaP0H6J-oY.roa (hash: gTSav2fMjMmokQJGJr0YwjWXX9H3AhJSgjsJ2wpM5SA=)
2: QdvbepQukFmfMSQYf6HBBLcHcMk.roa (hash: F/Id75RSk4+xz0N0tNwJ7jB7AAssoyiwdWIUCFeT7Qg=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: yIg6/oneLCJU6GJA8BEoeiBvcH9wDBc28G9iGk5k1Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:70:2d:93:d0:05:49:34:46:fc:b4:88:a1:f1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Jun 7 11:00:18 2025 GMT
Not After : Jun 8 11:00:18 2025 GMT
Subject: CN=b80f85ec089b4820c6ada8a449abf42a51354940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4b:80:33:fc:57:cc:89:d2:a6:c7:02:1c:2a:
4d:8d:0b:43:6e:0c:d7:49:a9:d5:aa:93:cc:59:94:
0d:49:f2:85:1b:6f:94:df:bd:d9:fb:e3:c6:e5:74:
4a:fe:5d:9c:79:11:91:7c:6e:9d:4a:7c:0e:de:09:
d8:3f:30:b4:a1:03:62:c3:fa:3d:90:fd:59:48:68:
93:9c:23:3b:f5:a7:c4:0e:ce:55:d5:4d:50:be:91:
bc:c6:a6:90:7f:11:43:c2:61:01:9a:f8:94:66:67:
aa:ff:1d:4f:a4:df:1b:c5:de:42:12:c1:ca:29:ad:
86:6a:e2:58:fc:7b:b0:eb:ae:5c:8e:d6:d6:cb:a8:
16:73:fa:4a:74:86:ae:d9:cb:d2:0f:04:d0:9a:ec:
22:56:7d:42:8c:6a:df:8f:95:83:b1:c1:7b:c1:84:
38:82:c7:9c:f9:c3:63:16:6f:99:77:fa:6c:6e:b6:
60:2a:0e:50:a7:f9:ad:90:98:d8:fb:18:7e:a1:78:
18:ea:20:52:80:60:b1:43:6b:ee:64:b7:2e:c2:0a:
5b:bc:df:bc:5d:5e:58:78:98:62:70:ae:ce:83:09:
e3:73:bd:50:9b:2d:dd:5a:43:cb:44:dd:7a:74:ed:
a5:fb:40:a2:81:20:b6:bc:d3:56:f2:90:41:95:ee:
a0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0F:85:EC:08:9B:48:20:C6:AD:A8:A4:49:AB:F4:2A:51:35:49:40
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0a:66:86:52:43:fb:67:ea:75:6a:ba:a4:e2:b3:c4:d0:c9:
be:43:49:1c:83:4d:92:8b:8d:94:a6:2d:50:a2:4a:1e:a3:ff:
ea:aa:36:54:c5:59:44:21:96:3a:42:f9:46:d4:18:25:13:3d:
14:62:cb:21:64:b4:ec:10:43:be:02:56:2a:20:9d:07:f0:f9:
86:17:32:bf:fe:ad:13:82:95:b0:2d:41:22:99:24:39:f8:89:
e3:b5:d0:65:44:a8:6f:06:b5:e2:f5:a9:0e:a2:44:8d:65:86:
36:db:57:d4:9a:64:63:19:fd:d8:db:18:1e:90:09:0c:d9:4c:
52:c4:a7:d5:af:40:86:3b:6e:20:8d:26:0b:cb:10:62:91:0e:
d9:8e:17:29:15:47:5c:c5:bc:bb:b3:ad:46:e0:1c:1c:de:51:
4f:2f:5a:b6:8c:c9:a2:79:e4:8c:dc:ab:1b:16:50:e7:2b:14:
0c:28:38:4b:65:80:c8:60:b9:e5:6f:6e:99:94:13:e5:ea:ca:
53:fd:22:40:f6:6b:81:19:3f:3a:52:81:6a:18:5a:57:98:e1:
de:ec:e9:8a:f8:be:f5:8a:3b:59:c4:0e:0b:43:e0:1b:5e:25:
3f:c4:3c:3f:6d:b5:9c:4b:67:54:95:6a:f1:93:e3:cd:29:76:
45:58:64:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:37 2025 by rpki-client