Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
File: sDQCUfGCY0f06WRfaCTTuT9H5d4.mft (raw, json)
Hash identifier: 4fHyyPiwQUD+im3HlXxoIHHatspVTGuSmyBdbJXZ6hk=
Subject key identifier: D8:28:C9:3D:E1:66:A3:FF:EA:45:28:AB:F2:D7:3E:ED:F2:66:99:45
Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
Certificate issuer: /CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Certificate serial: 01974742E03D1BBD6F3748317CAAA51528C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
Manifest number: 0B7F
Signing time: Fri 06 Jun 2025 22:00:54 +0000
Manifest this update: Fri 06 Jun 2025 22:00:54 +0000
Manifest next update: Sat 07 Jun 2025 22:00:54 +0000
Files and hashes: 1: qrqtK-ZhNnqsmvUdjEvFxU-EYdM.roa (hash: w1CKR1mGTdMnfdWKUqyIUV2nyHBupF+j5wpw/8wUJ44=)
2: sDQCUfGCY0f06WRfaCTTuT9H5d4.crl (hash: 0l1CVgRK6CSmfGT6G628yVeRJnfwT2Yu9uQFWv7Lvxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:e0:3d:1b:bd:6f:37:48:31:7c:aa:a5:15:28:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de
Validity
Not Before: Jun 6 22:00:54 2025 GMT
Not After : Jun 7 22:00:54 2025 GMT
Subject: CN=d828c93de166a3ffea4528abf2d73eedf2669945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:84:37:cb:5f:44:fd:43:2e:de:c2:4b:fd:
8a:e7:ba:67:8f:e4:26:14:29:fb:1f:22:72:f0:3f:
a9:2d:b9:52:80:82:39:d6:8f:59:96:05:23:71:8f:
98:03:c0:68:3c:66:7e:c8:5a:e3:3b:fb:02:cd:67:
15:c2:12:0f:cb:11:a0:b4:40:bb:a7:97:21:59:65:
f7:62:d9:15:23:ac:a7:38:37:0e:c3:ae:e8:14:c7:
cf:cd:83:9c:34:8a:5f:15:f8:88:2b:c0:ae:71:da:
a5:6d:83:e6:ad:61:d2:9a:26:72:59:31:a3:0b:c8:
92:f8:e6:cf:bc:41:4d:52:c5:2f:87:5b:9d:79:17:
35:76:04:21:9e:84:6b:32:9f:5c:06:51:90:d6:fc:
81:b8:70:24:01:9c:a5:e0:f4:2e:c2:46:a8:ce:4e:
03:39:d2:bc:c8:83:56:4d:f9:26:e7:8d:e4:ba:d2:
d6:0f:60:7d:19:69:40:54:8a:c4:d4:f4:e4:50:7e:
d2:23:50:d5:13:75:a5:d9:0b:66:66:4a:f6:76:07:
17:fd:6e:50:25:00:8c:bb:c1:47:9f:12:d2:76:d7:
53:7f:b9:74:fa:da:98:f5:f5:b5:6b:73:99:b6:34:
be:82:4a:67:34:6d:66:9e:7b:28:bf:af:8e:44:bf:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:28:C9:3D:E1:66:A3:FF:EA:45:28:AB:F2:D7:3E:ED:F2:66:99:45
X509v3 Authority Key Identifier:
keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:79:31:e6:0a:63:9b:5d:1a:98:0d:17:b4:ad:b7:1b:d1:e7:
46:e0:a0:e4:20:54:e7:dd:13:c8:c7:fb:85:59:1e:59:84:9d:
78:85:f5:a0:68:84:62:69:e9:63:09:31:9a:8b:13:3e:31:f1:
cf:5e:19:f1:40:cc:a1:4f:02:4d:41:08:2a:4f:9d:6b:43:63:
aa:0a:1b:9e:a2:97:40:07:6f:24:e3:4e:e7:d1:c5:4d:56:c3:
bc:3c:b9:84:9c:cb:34:be:23:48:27:3e:6a:4a:36:a9:a5:38:
20:96:50:83:97:6b:fd:e0:09:e6:af:87:c2:2e:a3:ce:da:33:
f6:af:75:10:7c:41:da:45:3e:46:4e:0a:69:23:26:2f:5d:31:
57:dd:4e:b3:c4:d1:00:e0:08:32:ba:74:10:47:b2:07:fe:9f:
a8:c6:03:52:a3:f6:d3:18:83:11:92:83:0a:4b:bc:35:d2:93:
82:f5:62:a6:63:f1:39:01:84:fa:19:3b:39:26:b0:43:92:6d:
01:d6:a5:31:a6:36:97:b3:03:e3:43:e4:f7:b0:9e:da:55:18:
7e:5a:88:17:c0:a4:4d:eb:6f:09:38:e4:33:ba:54:23:8c:3d:
38:ac:c6:d1:1c:3a:ef:14:78:52:ee:2c:a9:b1:35:e7:bc:c0:
d5:f1:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:32:09 2025 by rpki-client