Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier: 5s9tvxAroxVJcEtLMShYegQ54pINKFktmfLupl0jX50=
Subject key identifier: 63:AB:12:81:67:2E:73:E1:D1:D8:8E:AE:74:BB:38:11:00:85:24:9F
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 01974A43B1D02329A32F12F0731D31AE7B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 12:00:39 +0000
Manifest this update: Sat 07 Jun 2025 12:00:39 +0000
Manifest next update: Sun 08 Jun 2025 12:00:39 +0000
Files and hashes: 1: RlSX_O9nuK4visZrcXhuUrMTobY.roa (hash: rJSur0He4KlKRGvS+jaXIpRrSe2/3CDqYP07r9YT8i0=)
2: _FEDHOA1DaPuw5szVg_jX1NChtc.roa (hash: NTy69zIQkKyjkxDfKJ+X67SWRMXHN0I5/tJxmftqgVU=)
3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: 0wLetaOGcGs33zHPd9mmkove7Gz1DzMC2jIR66ugtRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:b1:d0:23:29:a3:2f:12:f0:73:1d:31:ae:7b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Jun 7 12:00:39 2025 GMT
Not After : Jun 8 12:00:39 2025 GMT
Subject: CN=63ab1281672e73e1d1d88eae74bb38110085249f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:d3:b6:af:db:64:fc:13:4c:4e:7a:5a:b6:
03:1b:5b:b9:f0:60:e6:36:78:b0:f5:b6:6b:23:2e:
c3:67:10:fd:0b:3d:8b:16:e6:18:9a:9b:ea:c2:f6:
0f:24:d8:3d:36:99:39:0f:d3:7b:2d:6b:fe:ec:8d:
d0:4c:3a:0d:60:d3:8b:68:2c:0f:5f:35:70:dc:91:
22:84:7f:aa:c2:87:ee:6a:93:85:ed:04:07:53:92:
0d:f9:a7:a8:0f:cb:f6:8b:30:e0:a0:a1:6e:54:d8:
aa:46:e2:25:73:9d:cc:4f:3c:55:c0:67:ea:61:64:
de:49:ff:b7:02:e5:46:8d:d2:b5:a5:72:14:84:a5:
2f:76:ba:4f:92:b2:5a:a0:07:79:02:5a:e1:eb:7b:
2d:ce:0d:23:b8:81:26:d5:f0:02:db:6a:49:fc:97:
a5:7d:c5:77:6b:9b:34:8f:93:05:7c:de:a6:e1:1c:
1e:a7:66:81:f1:00:34:58:a3:4c:bc:cc:22:cf:e5:
40:d4:ae:60:a3:18:87:b1:88:e8:c6:85:14:0f:64:
48:16:a6:c9:0c:f6:80:30:cd:78:1b:c8:35:89:10:
48:ef:c7:c7:0c:cb:97:de:c4:5e:26:52:56:2d:bf:
a6:36:b1:8d:29:f4:5f:a3:11:4c:c2:17:a7:a8:c3:
2f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AB:12:81:67:2E:73:E1:D1:D8:8E:AE:74:BB:38:11:00:85:24:9F
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:80:3d:30:7b:8d:87:3c:6e:99:59:02:8e:48:99:8d:bf:4b:
6e:37:a0:7a:29:fc:69:65:0d:52:ec:bf:46:e6:74:aa:0b:a9:
3f:23:02:8d:c9:6e:74:c5:f6:9d:ee:ea:d1:40:85:5b:f7:6a:
aa:d7:fc:2b:60:c6:0d:a2:45:8a:5f:5f:43:20:fb:0b:1a:43:
72:fd:6c:43:7a:76:ec:ce:b6:52:40:bb:7d:b7:e7:b1:bf:60:
be:19:07:6b:d5:1d:2b:fc:b1:64:eb:01:f1:2f:77:eb:9e:40:
5a:89:c1:08:24:5b:d9:5f:f4:08:40:fe:c2:58:37:54:62:57:
82:16:94:58:2c:6f:54:1a:73:99:1d:66:5a:c5:1d:42:4d:15:
24:a3:60:8e:53:0d:e2:93:1b:4c:6e:97:ba:3d:8e:e3:1b:ae:
2c:43:06:d3:b2:df:25:61:0a:72:10:65:e4:98:2a:08:95:e2:
68:ad:96:cc:a0:af:71:4e:41:70:d7:fb:42:67:3e:31:57:32:
17:66:c1:81:00:cd:9f:b6:79:24:f2:32:30:7d:f4:ca:94:79:
21:a2:d7:cd:92:5f:6b:f5:cf:4a:17:f7:12:35:aa:8d:94:23:
05:c2:f7:c4:ca:17:76:6e:0a:94:e1:b9:32:f2:8d:27:a7:c8:
06:4c:ad:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:45:31 2025 by rpki-client