Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
File: SfCTu46K0RxMg07f0t9U1By0n3k.mft (raw, json)
Hash identifier: tqWfnLL9y9fyM0t9beibMs5A8GlhNSW2gKkP+NDHZao=
Subject key identifier: 3B:97:4B:69:2A:37:D4:E6:91:4F:40:62:8D:42:00:31:BA:C5:BE:E6
Authority key identifier: 49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
Certificate issuer: /CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Certificate serial: 01974DB2998FC770C65DE234C7560CB14125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
Manifest number: 03E1
Signing time: Sun 08 Jun 2025 04:00:39 +0000
Manifest this update: Sun 08 Jun 2025 04:00:39 +0000
Manifest next update: Mon 09 Jun 2025 04:00:39 +0000
Files and hashes: 1: 5GNPm8h48A-gwMWqDZ4JoMYcVZc.roa (hash: 9ZBWY++nE/D6/RJTqjkk/4Q4ufkyFaszCX0qNKOcYVk=)
2: SfCTu46K0RxMg07f0t9U1By0n3k.crl (hash: rLpcaOedZ+At9oNOtF8gH+Min2uWdHw8iLayErCEnSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:99:8f:c7:70:c6:5d:e2:34:c7:56:0c:b1:41:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f093bb8e8ad11c4c834edfd2df54d41cb49f79
Validity
Not Before: Jun 8 04:00:39 2025 GMT
Not After : Jun 9 04:00:39 2025 GMT
Subject: CN=3b974b692a37d4e6914f40628d420031bac5bee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:71:70:4b:9b:3f:b9:89:40:64:2f:4f:e4:
94:e7:93:50:ae:4e:dd:3d:ce:c7:69:99:1f:dd:74:
7d:93:7b:96:89:c7:97:b3:9f:74:58:40:8d:67:94:
b4:d3:69:bb:42:1a:71:d3:06:c7:dc:67:94:de:c4:
f2:a7:e8:8d:7d:92:1d:bf:4b:24:dc:fd:ef:89:56:
7d:b4:cc:54:64:91:3b:29:b2:9e:3b:88:f3:da:da:
1a:53:bb:65:9d:87:d9:f6:8b:74:c6:5c:57:3e:64:
f8:55:f4:4f:2d:fc:f4:98:36:4e:f7:1c:2d:39:22:
66:2c:2f:db:b1:50:23:34:f0:c3:eb:80:81:4d:2f:
b2:77:ef:8f:c6:a6:ec:ae:22:09:da:11:e9:f8:f3:
ea:4d:82:20:73:89:5f:6d:89:e5:c5:31:4f:a4:68:
4a:8b:47:52:bb:1f:24:65:d1:ec:ed:4f:4d:48:52:
02:4d:d6:32:7b:98:37:27:f8:e0:e7:f8:6a:fb:d0:
48:b4:a1:74:8a:4d:39:09:f7:4a:23:22:05:bc:32:
29:0a:4e:0e:fb:27:0a:65:fb:f2:a0:71:49:44:c8:
d3:74:ac:19:0e:00:d4:e2:1e:82:18:8b:55:c0:cb:
70:78:8e:07:29:ee:dc:39:a9:9c:72:d6:b0:12:18:
aa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:97:4B:69:2A:37:D4:E6:91:4F:40:62:8D:42:00:31:BA:C5:BE:E6
X509v3 Authority Key Identifier:
keyid:49:F0:93:BB:8E:8A:D1:1C:4C:83:4E:DF:D2:DF:54:D4:1C:B4:9F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfCTu46K0RxMg07f0t9U1By0n3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4ffe92-00ce-4faa-885c-e9617d66a74b/1/SfCTu46K0RxMg07f0t9U1By0n3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9e:9a:04:ce:e1:57:75:ac:70:b2:3e:e9:8b:a6:fe:cc:a1:
c3:81:29:74:32:3d:66:9d:06:60:c4:b9:f4:0e:3b:61:67:b0:
cc:3f:6d:8b:34:f6:0b:bf:d8:6d:c7:44:4f:50:44:60:8a:f5:
c8:d5:34:97:bd:43:b2:16:72:36:21:b8:63:6f:d8:39:2a:12:
ab:77:8e:47:b6:10:34:50:9f:1e:ee:fa:50:88:57:19:26:b3:
e8:ce:32:a1:47:46:a8:b0:8e:f9:d0:db:f1:81:2e:1a:92:8f:
20:ac:b1:b6:4e:ac:8e:7a:fc:44:ec:5a:1f:d4:e6:98:53:38:
d0:d4:b0:b4:f6:0a:63:1d:e5:cb:ed:f9:0c:15:2c:34:b8:06:
ae:fb:71:83:18:da:3a:f8:2e:c7:64:3d:dc:b8:21:b6:e4:c8:
1d:3e:2f:cf:0a:59:6f:22:24:e3:be:4b:9b:84:4b:84:f8:fd:
76:78:74:ea:ce:0b:26:c2:aa:e2:dd:13:0b:4f:fc:92:74:8b:
1c:17:db:3f:e8:55:f7:dd:f0:d1:46:9d:21:5c:11:33:51:33:
82:c2:b2:32:7e:80:9c:8a:a4:8e:bd:6c:70:ed:61:0d:29:9e:
d1:1c:4e:3b:18:02:50:ff:fd:3c:f2:c1:a9:5f:3a:8d:aa:7b:
83:fc:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:52:27 2025 by rpki-client