Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
File: sLakm8wQ3jQOOdID9WZYvX1kjd8.mft (raw, json)
Hash identifier: XaPD7kIIQQsgZV41WHj9UrZtcGRSUuufv8xrk5CutCo=
Subject key identifier: 99:26:79:FD:5E:5F:13:BA:1B:63:5F:8C:04:8A:34:2E:C2:45:4B:82
Authority key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Certificate issuer: /CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Certificate serial: 01974DB29DD33C402ECED2E54DA28AB8C137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
Manifest number: 12CC
Signing time: Sun 08 Jun 2025 04:00:40 +0000
Manifest this update: Sun 08 Jun 2025 04:00:40 +0000
Manifest next update: Mon 09 Jun 2025 04:00:40 +0000
Files and hashes: 1: Atj5FbqUiBu2LLABCpGEzpH0Sg4.roa (hash: cBzZGlcz2mRnPCf/PBZJTLNK/ZEjrb5GaHlLhcC0rkI=)
2: GzsHZiR2L5z34hlU58GjHyHGhHk.roa (hash: zJEB0Ry2I/bKDFBGY5W04hlUw2kDIBYUIrcg6pqexm0=)
3: sLakm8wQ3jQOOdID9WZYvX1kjd8.crl (hash: 3jyQlvWS9WoqyVmJuuSCPy3/IPSP40LeGRP8h99NBZc=)
4: yd8rW0UVlTE0K5ESeZvtwc9yZa8.roa (hash: Y41c6KDcYXB4eyzG3GvmC+i3gLAgKFVoW5IRi29yMUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:9d:d3:3c:40:2e:ce:d2:e5:4d:a2:8a:b8:c1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Validity
Not Before: Jun 8 04:00:40 2025 GMT
Not After : Jun 9 04:00:40 2025 GMT
Subject: CN=992679fd5e5f13ba1b635f8c048a342ec2454b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:be:3c:b2:e2:5b:b8:ff:45:4b:66:1a:43:
60:a1:54:db:bc:6f:78:57:f4:9f:8e:bf:9b:f3:67:
1e:0c:1b:0c:d9:1a:a0:2c:e5:0e:37:2b:8f:a8:c9:
3a:2d:4a:40:44:d4:ce:d8:ac:77:fb:23:5c:55:c5:
b9:b2:c1:20:e3:6e:f9:fe:d2:98:f4:85:e7:d8:c7:
29:8c:e0:0b:87:fe:14:74:a4:d2:dd:1d:9a:b9:ef:
11:7e:39:66:27:73:05:be:ad:06:59:26:04:22:3d:
e7:3e:bf:ff:ee:07:e0:71:a1:97:d6:c8:69:df:67:
10:c0:1b:42:2b:c1:8b:36:5c:ab:4e:a4:0b:f1:b3:
77:b4:ee:9b:66:1d:10:77:8b:7f:0c:84:69:bc:23:
84:43:65:ab:fb:5e:bd:c1:7b:57:c9:65:7b:d3:0e:
cf:5f:75:59:ce:65:88:a1:ea:93:b9:53:05:27:39:
57:7c:df:d7:ae:24:50:b3:23:5f:c7:b5:47:c8:1d:
21:75:df:5e:32:22:e0:34:58:15:46:cd:f0:d8:81:
a5:2b:8f:f6:29:4a:a4:b5:a3:eb:ef:20:74:3f:8c:
bc:1f:1f:37:26:b5:11:0b:25:19:e0:94:35:64:21:
f8:73:c3:51:20:dc:23:8c:49:9d:6f:8a:51:a2:4f:
21:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:26:79:FD:5E:5F:13:BA:1B:63:5F:8C:04:8A:34:2E:C2:45:4B:82
X509v3 Authority Key Identifier:
keyid:B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:27:d8:a7:96:8f:fd:bd:ae:f3:4e:f8:25:bc:1e:46:59:ed:
0a:f5:d5:c6:35:fb:04:2b:74:5d:8b:ea:78:18:98:7c:f8:eb:
8f:46:e3:a2:6e:66:6b:3f:70:36:05:6a:97:4b:61:8e:fb:91:
68:4f:de:26:59:37:75:46:94:32:ef:b6:1a:12:16:18:8f:4d:
d2:73:d9:34:2c:10:08:91:70:c6:f1:14:b7:1b:a8:09:db:71:
c0:2f:c1:c2:c0:60:dd:dc:b5:70:0e:6e:0b:5d:b9:cc:83:e4:
99:69:41:43:5f:5c:67:73:32:05:b3:58:56:7c:e1:08:49:86:
7a:10:07:3a:c2:0f:70:5d:0b:12:e5:3e:bb:0b:91:40:e0:0f:
05:bd:53:61:7a:0a:25:63:2d:e7:7b:15:9b:62:4e:ce:bc:68:
cd:f4:2f:d6:1d:10:8b:80:3d:20:c8:3c:ef:04:35:fd:2f:77:
81:44:42:a7:0d:e3:cc:14:f7:fc:64:11:42:d5:b3:01:c6:bd:
ef:ca:d6:80:56:ca:48:a5:09:73:42:c9:5e:79:7c:fe:44:07:
d6:63:51:82:b5:61:08:3c:f4:c8:de:2c:5f:4b:18:e4:75:37:
4e:63:93:05:dd:24:b3:6f:a3:c1:a1:68:06:56:46:93:8a:74:
98:6b:a8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:39:54 2025 by rpki-client