Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: 6fw+Nlc1tIDaznOt6chCHjZwoCcTSjvV4Z1nWKqKh4I=
Subject key identifier: 0E:59:FD:AF:70:A6:E1:13:46:34:0B:D5:8B:3D:48:EF:0B:A9:38:7C
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 01976D3E94243A5ACAD04CA055A369E6FAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 1128
Signing time: Sat 14 Jun 2025 07:01:47 +0000
Manifest this update: Sat 14 Jun 2025 07:01:47 +0000
Manifest next update: Sun 15 Jun 2025 07:01:47 +0000
Files and hashes: 1: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: zwtsqiaXpbdtakzasxN+flma4qkZekSBgzo9RMisW+4=)
2: rKZbB3iW2mhQrV3B7dzkdgnj7Hg.roa (hash: bzWIX1UDDDSaemHwck5e4pimDCRd9S56ZPwPBB+GA2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:94:24:3a:5a:ca:d0:4c:a0:55:a3:69:e6:fa:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: Jun 14 07:01:47 2025 GMT
Not After : Jun 15 07:01:47 2025 GMT
Subject: CN=0e59fdaf70a6e11346340bd58b3d48ef0ba9387c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7d:29:5c:b6:46:78:a1:2d:09:8c:58:55:16:
e2:74:71:b8:4e:ff:64:0c:13:01:c9:89:58:1a:99:
1a:82:1f:fb:92:8b:38:87:a0:9f:6c:55:14:71:bf:
1f:d7:8c:f6:35:d1:98:7d:11:aa:0e:7e:72:17:76:
5c:e5:a5:32:5b:77:09:b3:3b:93:f0:d8:d7:d0:5d:
f0:a7:8e:76:ba:2e:d6:43:ea:a0:04:85:bf:b2:d2:
d0:03:28:77:9b:17:82:1d:f8:81:90:95:34:2f:c4:
97:61:6d:de:5c:7e:67:6d:a7:c5:d9:28:5f:95:80:
65:71:3c:8c:63:a3:97:04:ec:d0:e5:f5:bc:38:43:
16:57:f9:1f:43:fc:a2:cf:76:63:e0:05:d1:93:2d:
95:c7:64:0a:66:91:2a:1f:39:43:d9:f7:4b:2e:29:
80:f4:5a:d8:4c:f1:1b:37:31:d1:71:28:e4:c6:04:
16:07:2f:dc:51:40:76:ee:6e:cb:b3:d9:b2:84:43:
1f:54:5d:1a:df:16:26:5c:07:72:49:13:0b:c7:76:
8f:57:ad:68:a0:22:77:89:fd:e0:29:59:40:e1:af:
90:d6:67:92:db:9e:74:1d:ef:41:0e:f1:ec:75:9a:
11:62:28:6f:a9:3c:cc:4f:ed:15:2e:82:19:97:02:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:59:FD:AF:70:A6:E1:13:46:34:0B:D5:8B:3D:48:EF:0B:A9:38:7C
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:cd:2a:b0:7a:26:65:d1:8b:b0:49:67:b4:b2:f9:10:f2:c8:
25:c4:89:1b:1f:1f:3a:91:fe:47:13:79:35:cd:82:c1:b6:13:
a5:b3:c7:b0:62:4d:ff:1d:b4:c9:b5:18:1e:fc:18:f0:49:55:
2f:3a:73:85:82:b1:f2:9e:ab:4e:76:85:ec:62:6c:46:3f:f7:
70:7d:e0:b3:4a:48:43:bc:73:cd:d6:de:30:4e:eb:9f:d1:e2:
2d:54:0e:d9:34:9e:b6:9d:f2:8c:e5:d1:96:8c:af:c1:fc:bb:
fa:53:44:7d:b5:3d:84:0b:be:6f:23:68:eb:8d:f1:f9:70:f7:
eb:1d:02:1b:05:62:d6:93:19:cf:6f:22:9d:14:a4:6c:2d:1a:
d5:09:3f:09:40:d4:93:7f:aa:29:4b:3f:30:50:18:d8:91:d3:
6d:20:06:8b:85:46:9b:ac:00:91:56:19:c2:e9:e1:0b:3f:de:
27:c5:79:0c:eb:4d:3d:ef:f9:61:d2:4a:f7:b0:b0:35:32:0f:
65:4b:e0:0e:28:c8:9c:9b:53:c0:75:e3:6c:9c:8a:b0:2e:9c:
c9:4f:8c:89:18:91:0e:6f:f7:3a:fc:b5:6c:63:60:3a:49:43:
5e:12:9b:7e:99:9a:81:5a:99:1f:7e:ac:55:59:cd:46:d9:6a:
0c:13:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:47:08 2025 by rpki-client