Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: TO6kmBtfVDzlTVSsFkufSAaxvwil2vgbnMPOZkdJCZ0=
Subject key identifier: 92:C1:AF:A7:52:73:EE:BC:51:18:78:43:2F:D8:F9:40:69:8B:34:12
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 019767733824E469E26D0DCB4EB65CB95142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 1125
Signing time: Fri 13 Jun 2025 04:01:33 +0000
Manifest this update: Fri 13 Jun 2025 04:01:33 +0000
Manifest next update: Sat 14 Jun 2025 04:01:33 +0000
Files and hashes: 1: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: cnr1QMDzvudvd+CKxdGvoQAf4dFSwVDvJZk3p5anayI=)
2: rKZbB3iW2mhQrV3B7dzkdgnj7Hg.roa (hash: bzWIX1UDDDSaemHwck5e4pimDCRd9S56ZPwPBB+GA2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:73:38:24:e4:69:e2:6d:0d:cb:4e:b6:5c:b9:51:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: Jun 13 04:01:33 2025 GMT
Not After : Jun 14 04:01:33 2025 GMT
Subject: CN=92c1afa75273eebc511878432fd8f940698b3412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:24:15:80:85:83:0f:18:1f:c9:2a:c9:30:
22:7f:e4:54:b6:3a:8e:5a:a2:c7:0d:a0:ef:3f:ff:
84:63:1e:4e:b8:0f:98:e7:10:88:40:46:1d:c0:a5:
16:d0:50:bc:3f:85:36:10:d8:40:71:b6:7d:6d:a1:
91:93:d9:eb:d9:26:33:1a:f6:3f:a6:9b:ea:08:6d:
ad:b5:fb:b0:b9:cc:bf:68:ab:b3:fd:db:9c:77:19:
57:9c:9f:d9:b7:c9:ee:a3:f4:f6:db:11:6e:4e:72:
2c:78:4d:4f:cd:16:d7:a8:d7:ee:2d:b3:d5:de:a0:
ba:fc:f1:d7:89:3d:a3:1b:cc:24:e6:c2:b2:37:d1:
5b:a3:cb:22:2c:11:03:ff:b5:06:08:69:12:53:ee:
3c:48:48:5d:11:37:ce:95:26:54:bd:9b:78:7a:34:
72:54:66:91:f7:f4:80:90:19:bb:ce:89:ec:80:e8:
5e:4c:a5:3c:81:b7:c4:db:dd:47:64:75:fe:f2:21:
4e:8a:c2:0a:fa:0c:c6:92:aa:9c:45:a4:1d:59:d6:
35:63:f9:1e:02:15:d7:3a:f5:ec:c7:12:9a:e4:b9:
50:4f:a0:93:45:bc:de:15:0f:58:3a:f5:53:79:ca:
15:7b:d1:32:e5:f1:58:be:6a:da:4b:fd:c4:11:75:
8b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C1:AF:A7:52:73:EE:BC:51:18:78:43:2F:D8:F9:40:69:8B:34:12
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ef:35:20:6c:47:c9:76:b1:8b:a9:2c:c8:63:38:c6:38:6a:
7e:23:2c:52:de:88:37:5d:14:12:25:2a:20:0d:22:9e:0e:7b:
bc:97:ba:f0:53:42:0d:c5:80:5f:1c:3e:4b:53:59:a4:40:60:
f6:1d:79:5b:c3:94:01:c6:29:ba:8b:dd:4e:f0:16:96:eb:f6:
29:9b:c1:ce:2e:d1:7f:4d:1a:a9:30:b2:71:df:a9:f8:10:00:
33:94:78:79:69:49:69:88:5e:3e:d4:e6:80:28:ad:39:4f:e8:
d6:92:d6:af:a9:3b:85:7f:52:3b:17:91:d2:bc:cc:5e:16:45:
d5:d7:7b:b6:3d:c7:cf:ef:7a:bc:88:60:95:3e:00:47:7e:b5:
07:2e:14:3f:44:c2:f5:6e:28:cb:61:e6:c0:f1:f4:8b:c8:da:
8d:30:d8:c1:d7:8d:eb:ac:fe:6c:e9:d1:60:0f:d5:86:79:76:
db:8e:05:40:db:83:30:30:2e:e0:19:50:b3:91:6e:e6:19:2f:
4e:10:32:33:e1:5e:dc:22:2d:3a:e2:ce:45:e4:2f:47:9b:ee:
6f:93:40:ea:14:f4:d4:d4:18:61:1a:b1:55:f2:65:b3:ce:c4:
9e:4f:30:a0:0d:0d:8a:a6:a9:52:9e:d7:6d:ca:2f:b1:e1:b0:
a5:ca:9e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:17:48 2025 by rpki-client