Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: NiicrodMf/xP75Bltll7TIM941O3IO5fpaUJNgM87B4=
Subject key identifier: 79:80:FE:A1:80:39:B6:44:3D:C4:E0:3E:8A:6E:CA:CC:02:92:DC:67
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 01975DCB85CCB21EB1E7A020BA8BE1A50B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 1120
Signing time: Wed 11 Jun 2025 07:01:48 +0000
Manifest this update: Wed 11 Jun 2025 07:01:48 +0000
Manifest next update: Thu 12 Jun 2025 07:01:48 +0000
Files and hashes: 1: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: r6yEhfz7UW2+ar22eGCxeUPAXVqCRuRyJFqvk2xHYdk=)
2: rKZbB3iW2mhQrV3B7dzkdgnj7Hg.roa (hash: bzWIX1UDDDSaemHwck5e4pimDCRd9S56ZPwPBB+GA2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:85:cc:b2:1e:b1:e7:a0:20:ba:8b:e1:a5:0b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: Jun 11 07:01:48 2025 GMT
Not After : Jun 12 07:01:48 2025 GMT
Subject: CN=7980fea18039b6443dc4e03e8a6ecacc0292dc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:82:80:2f:05:07:b8:2c:62:31:b3:ea:63:92:
37:82:f3:f8:35:a0:6b:27:a7:1e:a4:8e:9d:86:0d:
f4:78:d1:44:ad:73:50:89:e4:70:33:24:77:f2:95:
74:b7:14:76:6f:90:af:e7:54:b1:27:10:69:74:e6:
d8:59:f1:ee:cb:84:0b:46:6e:ff:26:d7:c5:2a:ed:
f4:de:21:99:01:0a:1a:db:49:d1:8b:57:93:03:7b:
6d:4a:2f:b9:a4:6e:10:1e:8f:f8:8d:90:c2:8e:74:
49:a2:52:61:c8:c9:56:b7:ea:49:be:37:4b:ab:68:
c5:aa:39:37:f1:1a:d6:01:e5:c5:cc:55:e6:4f:8e:
9e:f6:9b:47:de:d2:ee:0b:0a:d6:5a:65:1d:ca:a8:
07:1c:a2:b1:f2:ec:1e:43:b3:e9:51:40:34:79:6a:
bb:1c:c6:04:9e:1c:4a:fc:3f:52:55:f5:24:b6:a8:
2a:3a:88:23:40:4a:7e:63:14:e3:ae:57:04:5f:8a:
b7:e8:11:86:88:ea:4e:42:d2:f5:86:94:c0:64:09:
ab:4d:24:af:33:2f:d5:da:d8:2b:3b:5a:56:f1:64:
02:71:83:e0:a1:de:b7:21:5f:10:29:2a:87:ba:65:
c6:63:eb:dd:c7:ba:88:44:ea:75:7e:fa:6c:e0:9c:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:80:FE:A1:80:39:B6:44:3D:C4:E0:3E:8A:6E:CA:CC:02:92:DC:67
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:35:25:37:b5:56:e5:1a:52:cf:92:7c:f8:36:39:c7:ad:b9:
aa:9f:55:05:37:a0:d3:ed:32:05:bc:ef:85:f5:fc:c2:93:5a:
b7:38:39:43:4a:d2:f5:ba:02:1b:7c:0f:1d:1b:80:85:35:16:
2b:1c:39:88:ff:76:04:25:63:1d:7a:43:9d:8d:ae:06:b9:93:
c6:02:ca:5a:b2:e8:60:65:38:b2:1c:6f:9e:d0:59:64:e0:1a:
0c:29:03:6e:3c:8d:d3:1b:2c:0d:39:ed:21:38:37:cb:94:9e:
4d:8e:12:a7:91:b5:43:90:91:b1:f3:d2:ba:41:da:34:d2:46:
11:a0:67:6e:3a:83:97:92:a3:87:32:b6:0d:35:6c:87:51:52:
52:28:d3:2b:7f:75:e5:87:5d:cd:06:ce:04:7d:86:18:c0:9d:
11:c5:2c:63:67:21:de:9d:f7:fe:24:c9:f4:92:61:1d:8a:82:
ca:c6:a7:b8:79:80:f5:74:b0:49:78:31:f8:7f:73:5f:90:06:
3b:47:b9:f4:31:b3:18:d7:b6:ac:78:eb:32:6e:1f:96:2c:13:
96:65:25:17:04:9f:76:67:4b:09:a1:d5:4d:a5:d6:da:65:98:
c7:0b:ed:88:61:4e:05:4e:f5:2d:2d:fd:49:3d:18:87:67:a1:
09:ba:cb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:38:00 2025 by rpki-client