Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
File: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft (raw, json)
Hash identifier: QW/SllFeRPlLdCGBi4lLmhMVR3CDUmMcrF+D7jfWY10=
Subject key identifier: 9D:62:D8:BA:5B:0F:8A:F1:EC:E8:16:44:B1:28:98:40:BF:F5:BC:73
Authority key identifier: 49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
Certificate issuer: /CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Certificate serial: 01974AB193523C5E769AB09EC2497F6FD2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
Manifest number: 0125
Signing time: Sat 07 Jun 2025 14:00:40 +0000
Manifest this update: Sat 07 Jun 2025 14:00:40 +0000
Manifest next update: Sun 08 Jun 2025 14:00:40 +0000
Files and hashes: 1: 2VOoNC3U3dbfOvp8BLzsJ1f-ifE.roa (hash: /4n1vWOP9xioYbfhWLfqMCZdtH551Gxmhk/RZPxKlZ0=)
2: 75LTo_jTlCg81UcwDjwfJUQMDKk.roa (hash: EkR0b+zKTp/aZ94o/SjZ2ZZg+QA0fvdyyS6BFZkQ6d8=)
3: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl (hash: pfYEmiVGnaFnudC40lHF/VUngqPoK5endcYRyHvhWTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:93:52:3c:5e:76:9a:b0:9e:c2:49:7f:6f:d2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Validity
Not Before: Jun 7 14:00:40 2025 GMT
Not After : Jun 8 14:00:40 2025 GMT
Subject: CN=9d62d8ba5b0f8af1ece81644b1289840bff5bc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4e:ff:19:97:e4:76:7e:1a:1a:f2:fa:1b:fd:
5b:b5:62:a1:7a:c2:3e:00:6d:39:68:39:1f:d8:dc:
ec:1c:94:6d:6d:2d:2e:6b:b4:68:f2:80:63:31:e5:
10:26:9b:c1:34:5d:fb:1f:34:2c:2c:c3:14:f7:81:
44:7b:e5:a3:b4:99:fd:b1:33:d6:52:cf:87:20:d4:
ad:02:45:04:06:e6:0a:8a:69:84:e9:39:7f:cb:c8:
38:5c:34:39:5b:04:e2:1b:58:e8:c4:26:c8:f6:d1:
fb:9b:0a:89:15:d2:d9:4c:33:6c:6d:e7:29:7b:25:
46:38:5b:93:e2:6c:2c:14:25:c3:72:28:cc:af:a9:
30:65:43:33:8b:c4:07:97:b3:21:61:61:38:4d:82:
63:8a:91:9b:a3:77:26:4b:6b:e3:24:9c:09:f4:ac:
f6:f1:6c:c3:5f:61:8a:b2:03:4b:99:12:ac:94:00:
3b:89:10:d1:99:bc:40:6e:26:42:d7:4a:de:65:08:
03:93:ef:1e:cb:9a:c0:ef:55:92:28:00:81:8d:28:
69:bd:82:bd:70:87:ac:bf:13:fb:7f:5c:0c:fe:a7:
88:d5:4e:39:fc:83:70:c5:1b:97:d2:12:a2:b7:1d:
cf:d2:2c:ed:7e:a8:f7:64:2d:73:2f:43:23:89:a0:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:62:D8:BA:5B:0F:8A:F1:EC:E8:16:44:B1:28:98:40:BF:F5:BC:73
X509v3 Authority Key Identifier:
keyid:49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:02:0b:96:ed:b9:c1:40:58:84:94:1d:f8:00:29:99:0b:11:
07:68:65:81:6c:94:84:fe:2b:d5:50:e6:d8:20:cb:44:b8:12:
76:a1:6d:df:f7:85:45:f7:8b:3d:39:09:3c:fb:1c:5a:b8:b3:
f0:e7:01:bf:03:3c:52:66:d6:69:3f:74:a5:7c:f0:8c:4b:c7:
82:e8:22:e1:3b:6d:4c:86:4f:25:d6:3e:59:c2:20:44:74:81:
c1:96:60:27:1d:cb:cf:12:51:16:cb:80:f2:51:41:48:99:b1:
ee:c0:e3:0d:5a:21:bb:fb:1c:b1:6a:5f:b0:97:06:73:a3:80:
26:51:67:46:d3:26:91:8a:56:13:d7:44:c3:fe:7c:ce:0e:62:
41:78:7b:8a:b2:ce:0f:9d:59:90:02:f1:2a:1b:08:1e:0c:63:
74:16:9b:6c:69:54:3b:ee:9a:36:8a:71:ec:6d:dd:b8:62:2a:
36:8d:76:bb:50:f7:a6:3d:0d:83:e3:bd:d9:04:ed:64:d9:cf:
96:cf:82:b3:3d:ca:f3:af:07:56:85:47:2d:dc:bd:3f:60:88:
de:51:a0:ab:13:80:9c:8f:58:1d:f4:2e:0b:58:ab:01:5f:6e:
f8:8a:83:88:69:13:0e:c6:64:73:11:e5:24:62:3c:e7:59:b2:
ed:1c:5a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:25:11 2025 by rpki-client