Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
File: SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft (raw, json)
Hash identifier: bXrf4HAnAdHMcinbxs4t9QfuADJsRzAdz2Q7ft7wqaI=
Subject key identifier: 87:FC:22:E9:F9:86:FE:CE:A6:C9:A2:C2:50:9A:80:76:78:8A:86:34
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial: 01975D936636F8C84A2C6FF7428FDBCDC1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
Manifest number: 0CA3
Signing time: Wed 11 Jun 2025 06:00:30 +0000
Manifest this update: Wed 11 Jun 2025 06:00:30 +0000
Manifest next update: Thu 12 Jun 2025 06:00:30 +0000
Files and hashes: 1: SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl (hash: DRoZS33bsSA237l3DcwIY6cffDAz1fABTTRqXk8iv3I=)
2: q3FDx21p8smEfAYPTo0ZQLgPkqo.roa (hash: 2Du6IDXw8hGPYtGe+KE8+hTPSOOHZMlNjWnrWGKbnPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:93:66:36:f8:c8:4a:2c:6f:f7:42:8f:db:cd:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
Validity
Not Before: Jun 11 06:00:30 2025 GMT
Not After : Jun 12 06:00:30 2025 GMT
Subject: CN=87fc22e9f986fecea6c9a2c2509a8076788a8634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f0:22:02:15:33:20:07:a2:dc:70:26:4c:c4:
ed:aa:56:72:45:b5:bf:ae:af:ac:f4:ee:48:67:eb:
c9:2e:2a:ca:e0:65:32:3d:99:b5:c5:42:4d:1d:24:
17:49:72:5f:25:f4:17:36:73:ef:3d:24:db:33:97:
3c:d1:38:28:8b:56:8d:2b:a2:39:63:3a:43:bd:5b:
81:c1:3b:ff:87:fa:d2:ce:a3:b6:9e:16:3e:d6:90:
74:c1:2f:4d:e9:6c:a0:c5:f2:de:80:21:03:49:8a:
20:17:45:c4:16:f7:00:4e:d1:02:09:8b:44:6b:2f:
23:36:cb:3a:be:9c:60:9f:07:d3:07:08:7f:87:59:
32:3a:fd:3d:8c:e8:25:d7:8f:6f:cf:18:80:e7:ba:
7e:ed:e3:1e:69:24:a2:1e:b5:21:c4:cf:41:61:eb:
ff:2e:91:bf:ed:b3:fe:fd:3a:4f:92:f6:60:3b:93:
53:e7:35:6f:a9:fe:9f:9d:07:37:b1:2b:b2:e7:b0:
64:98:01:33:a3:80:c4:b8:69:ff:9b:5b:a6:78:ac:
4e:45:51:45:04:f1:08:eb:2d:84:b4:67:84:93:4f:
53:05:04:35:5f:63:7b:94:2b:c5:3f:09:16:e9:04:
c9:50:e5:4a:e9:6a:f5:38:c3:d4:cf:cd:f5:c0:84:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FC:22:E9:F9:86:FE:CE:A6:C9:A2:C2:50:9A:80:76:78:8A:86:34
X509v3 Authority Key Identifier:
keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9a:90:ef:1d:c0:66:61:bc:93:bf:5a:2b:a2:27:9d:78:51:
9c:34:19:a2:54:5f:01:55:39:d7:e2:75:f6:c1:d7:d1:0d:aa:
ba:b0:d0:41:a4:d5:0e:e9:c6:cc:33:c1:a1:99:e1:57:cd:52:
8d:48:9a:2f:9e:03:cd:b1:a4:09:4e:c4:05:d8:bf:8c:cc:29:
98:86:5b:f7:79:d1:e2:6e:70:ba:f8:f2:57:32:79:15:4f:d3:
f7:b9:37:c2:17:c8:01:de:a0:b7:c7:08:f7:9e:c1:e5:99:4b:
ff:5e:a2:38:ef:f7:5b:1e:7d:ce:ec:d6:db:ad:50:98:5e:d2:
11:06:91:4c:d6:a6:60:df:95:79:37:d8:0a:79:de:57:1e:df:
80:1b:e4:76:82:58:28:69:5b:6e:b8:4f:04:01:57:5e:cc:05:
66:4a:f6:e1:fa:5c:7b:3e:95:19:06:0e:8c:db:76:e6:07:7e:
f7:32:08:44:97:0a:a9:86:54:ff:bd:4e:0e:e2:0c:8d:b1:26:
84:2a:a3:6e:52:38:77:22:14:2f:9f:45:76:7f:56:af:6d:ec:
b4:04:96:4c:c0:d6:e3:df:9a:c4:cf:6b:e6:eb:24:2a:9d:c4:
91:3e:a9:87:88:71:b8:db:e1:a9:17:a9:98:5f:a5:dd:55:41:
5b:1e:6a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:13:25 2025 by rpki-client