Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
File: sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft (raw, json)
Hash identifier: h4Y0YRDycB+L8SfBLrkURfLvZeRYHxcGP1kieQTiU4s=
Subject key identifier: 66:38:09:68:B1:4C:74:12:84:50:57:0C:6E:D2:B4:1D:46:7F:EE:E6
Authority key identifier: B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
Certificate issuer: /CN=b0d8f469b90711a1282bf490d00f156096597760
Certificate serial: 01975046CEE05EC1A804B9CF7306EB4C2746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
Manifest number: 14DA
Signing time: Sun 08 Jun 2025 16:01:47 +0000
Manifest this update: Sun 08 Jun 2025 16:01:47 +0000
Manifest next update: Mon 09 Jun 2025 16:01:47 +0000
Files and hashes: 1: 4W2MsaFzCqc3vmN-m_KV3fKLCCE.roa (hash: yb1ZkdtEhTyv9DB1WP29BM5drsp9NA6SmJ1955YSoLA=)
2: sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl (hash: PY8jdwi7U2a0VdxvIM3E8vaCn54CuKs1nwFip/4XcFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:ce:e0:5e:c1:a8:04:b9:cf:73:06:eb:4c:27:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d8f469b90711a1282bf490d00f156096597760
Validity
Not Before: Jun 8 16:01:47 2025 GMT
Not After : Jun 9 16:01:47 2025 GMT
Subject: CN=66380968b14c74128450570c6ed2b41d467feee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:ea:f3:ca:30:da:cc:46:ac:ea:f1:00:18:
77:63:e4:5e:95:ac:ce:86:c8:fb:a3:62:94:0f:63:
a9:a1:5f:95:ec:c9:b5:cf:1f:4f:13:31:d1:af:53:
15:20:1b:31:97:78:1a:54:ae:87:2a:a9:7a:21:0a:
b9:38:9a:6e:9d:33:67:6a:a2:36:8e:ca:46:1c:0e:
81:59:c5:e2:e9:2f:0e:1f:79:ff:ca:dc:e2:87:d5:
db:94:d2:a0:93:3c:98:fa:da:66:3e:cb:ce:72:a1:
a7:e2:74:0b:a1:95:d0:90:a4:1c:ff:b9:8c:39:cb:
29:c7:01:23:2f:c1:eb:d4:e9:1b:e2:2a:6e:48:c4:
76:14:c6:e1:25:9b:ae:93:24:37:24:94:bd:af:d4:
1a:54:b4:41:f9:e4:6e:1f:72:e1:d3:4c:7c:df:25:
f1:8a:ac:11:e9:f3:fe:6f:9c:be:67:82:7a:4c:f1:
b8:4c:4d:bc:fa:d6:29:0c:ee:a0:4b:95:cf:48:63:
55:b9:cf:b2:7e:6c:74:4f:a6:1b:bd:79:3a:2d:5e:
46:1f:75:56:83:24:91:1a:d2:35:78:24:bf:a3:b2:
42:74:c6:3d:8b:de:23:62:c7:3e:b7:9c:05:11:f1:
36:a4:2d:a9:fd:26:e7:6e:2b:10:da:39:78:8b:22:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:38:09:68:B1:4C:74:12:84:50:57:0C:6E:D2:B4:1D:46:7F:EE:E6
X509v3 Authority Key Identifier:
keyid:B0:D8:F4:69:B9:07:11:A1:28:2B:F4:90:D0:0F:15:60:96:59:77:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNj0abkHEaEoK_SQ0A8VYJZZd2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/530c2b-9442-4621-8e91-d0e48680f232/1/sNj0abkHEaEoK_SQ0A8VYJZZd2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:44:e4:86:11:94:9b:e1:3c:3b:b5:aa:12:cc:a8:86:bd:e4:
59:48:60:81:1e:81:c7:73:75:30:79:2f:d4:29:11:63:24:d2:
7d:30:38:3a:75:19:60:c0:90:ae:6b:76:c5:0d:c4:28:54:62:
a1:bd:f1:0d:ba:14:79:dd:4e:9d:c1:8c:5e:e5:6f:12:24:f1:
50:10:bd:c8:6e:8b:7f:e2:f9:e0:33:91:fa:6b:b3:7d:dd:85:
61:34:22:e3:6f:04:d0:86:b0:cd:14:2c:a0:46:3e:a2:7f:1f:
70:51:5f:8f:60:fc:0f:70:e1:55:73:10:0a:e3:7c:e7:14:1c:
93:4c:08:f1:0e:1f:69:22:e1:de:91:e9:79:6d:ec:4b:f6:fd:
f2:bb:06:9c:5f:3c:0c:16:0b:dd:81:63:9c:d0:05:1c:b5:b3:
3a:7c:ce:d4:81:eb:26:87:23:55:93:26:34:83:87:4f:1d:27:
a7:be:96:70:fd:f4:af:e5:34:09:5e:2b:d8:8b:97:2d:b9:1c:
ae:85:4f:6e:05:93:c7:03:cf:67:2a:45:80:9b:36:d4:64:27:
31:54:16:4e:e4:41:47:44:08:38:00:52:5c:d6:03:09:1f:0a:
a8:fd:c7:82:eb:6a:fb:6c:ee:af:46:5c:90:c1:b7:e9:41:1e:
66:67:58:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:43:07 2025 by rpki-client