Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
File: seWdsb2vITytIQJfd4-slhj9TpE.mft (raw, json)
Hash identifier: rsVSvfC3J+yB2Avc7bmQe7WxA3Hr/BJRKpsd3piNYeA=
Subject key identifier: 62:82:9C:EB:60:73:28:B3:5F:DC:86:63:DD:23:3A:1B:ED:DA:50:D0
Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
Certificate issuer: /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Certificate serial: 01974EC5867D9ED35C3F1AF7CE21FB369F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
Manifest number: 0534
Signing time: Sun 08 Jun 2025 09:00:57 +0000
Manifest this update: Sun 08 Jun 2025 09:00:57 +0000
Manifest next update: Mon 09 Jun 2025 09:00:57 +0000
Files and hashes: 1: Y6XguoASkuj117zapWikDdhsOwE.roa (hash: cYRIxVqFr0BZZuT1yz+/1pm1CRjn1QkJKZ6Frd8lRoI=)
2: rJqP0FlZEZ4nTdC9T0nsIw-r0R4.roa (hash: 0/AMhBxslSHnkSz/7atutBB8j75xjJ93LSUDUChOOQk=)
3: seWdsb2vITytIQJfd4-slhj9TpE.crl (hash: UOhlkpLp8pdHtJMcPfof0ZBmMLJkZX13ACD8MY7yHNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:86:7d:9e:d3:5c:3f:1a:f7:ce:21:fb:36:9f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Validity
Not Before: Jun 8 09:00:57 2025 GMT
Not After : Jun 9 09:00:57 2025 GMT
Subject: CN=62829ceb607328b35fdc8663dd233a1bedda50d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:49:1e:50:9c:17:a7:15:2d:85:f2:67:4e:9d:
ec:8f:c6:42:aa:5f:91:b5:f4:aa:b9:a7:f6:f4:8f:
8c:f4:b8:81:67:6d:8a:0b:be:85:55:2e:de:30:7c:
5d:8f:c2:13:eb:3f:b1:68:92:dd:97:c7:16:a2:02:
89:05:5e:e4:a9:7d:28:a7:f3:70:43:8f:22:a6:95:
33:c2:e9:15:3b:c3:78:5c:23:8b:c8:a7:ef:ff:76:
50:8a:09:85:57:19:a8:b7:7a:ca:5d:98:d5:07:0a:
23:92:3a:3b:64:a3:f1:55:db:0c:53:c2:f0:a7:d5:
54:9a:7a:2c:5a:af:93:b8:02:36:42:59:2e:f8:fa:
12:2b:c3:62:c2:51:31:7f:88:83:50:dd:bd:fd:b9:
2b:fd:d0:e6:c0:95:aa:11:66:0a:0c:3c:d8:dc:53:
5c:53:18:0a:40:90:e8:98:91:01:99:68:df:db:96:
7c:3e:1a:01:ff:8d:e8:85:d3:ba:f4:23:1a:2c:07:
65:84:d4:00:ec:50:5a:a8:57:6f:35:88:2f:c9:74:
f6:1d:f3:c6:9d:2f:ff:ba:ab:ed:00:c1:09:00:79:
e6:74:31:9e:e2:0c:71:47:cc:5d:6d:31:26:88:53:
85:bc:4a:3f:14:b0:b3:3b:6a:1e:74:d6:9c:2c:78:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:82:9C:EB:60:73:28:B3:5F:DC:86:63:DD:23:3A:1B:ED:DA:50:D0
X509v3 Authority Key Identifier:
keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e5:4f:05:8c:3b:78:8f:1b:5b:97:e2:57:3e:0d:e5:03:cb:
ec:2f:94:b6:e3:52:77:a3:69:65:2d:61:f7:8c:3c:67:29:de:
db:88:46:48:9d:49:e1:4a:e7:6b:b3:e6:39:5f:8e:9a:ca:6b:
fb:79:4a:43:9b:0f:0c:c1:db:b3:94:94:45:74:62:52:28:8d:
a8:b8:8f:32:cb:8c:1e:2c:0d:59:d4:26:ca:47:1c:70:50:f6:
a6:42:b0:33:d8:d0:73:42:21:ff:6b:1d:0b:8e:48:32:fb:5e:
06:94:06:0e:18:2c:2a:1d:c2:f2:a5:0e:29:d4:0c:16:f3:4b:
9e:f6:98:b9:84:31:c5:ef:96:c7:7d:4b:90:2d:4b:f5:ef:0e:
62:d7:bf:32:3d:e0:65:0e:14:97:0d:25:99:31:c0:80:24:e9:
ea:6b:f0:36:a8:69:37:6f:fe:db:dc:5a:dc:35:93:32:be:22:
ef:c5:3d:00:9f:62:dd:8b:09:ab:e2:23:9f:78:ae:1a:71:63:
ab:64:24:9d:40:d1:b2:2a:b1:b5:30:31:ae:f5:b5:79:50:21:
62:11:6f:71:93:79:e1:67:7c:2d:e6:be:70:8c:16:00:38:c2:
84:35:12:aa:8c:d3:15:87:5d:da:88:38:d2:0b:2c:4f:90:76:
25:fa:54:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:49:10 2025 by rpki-client