Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
File: SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft (raw, json)
Hash identifier: 4P2CCUyRR0Rh5yhLfZIKEx9fjLlf25n/IBeACwwHZyI=
Subject key identifier: 81:FF:81:66:BE:84:50:85:1A:E7:88:6B:7A:19:1A:27:E8:F3:5E:08
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial: 0197673B552A06D08A8EC2E09C42942A1215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
Manifest number: 0CA8
Signing time: Fri 13 Jun 2025 03:00:30 +0000
Manifest this update: Fri 13 Jun 2025 03:00:30 +0000
Manifest next update: Sat 14 Jun 2025 03:00:30 +0000
Files and hashes: 1: SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl (hash: 1941eD/drz1krHBwVtRzdsrghUolinMbapzVx98jJgY=)
2: q3FDx21p8smEfAYPTo0ZQLgPkqo.roa (hash: 2Du6IDXw8hGPYtGe+KE8+hTPSOOHZMlNjWnrWGKbnPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:3b:55:2a:06:d0:8a:8e:c2:e0:9c:42:94:2a:12:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
Validity
Not Before: Jun 13 03:00:30 2025 GMT
Not After : Jun 14 03:00:30 2025 GMT
Subject: CN=81ff8166be8450851ae7886b7a191a27e8f35e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:a7:67:bb:12:13:bf:ca:0a:58:30:03:76:
22:f4:ae:9d:0e:73:32:66:3f:7d:3a:de:87:43:19:
b2:b2:0d:af:71:61:70:bc:a6:6f:c2:14:d3:48:20:
92:4b:41:fa:d8:99:ee:61:db:7b:76:ce:13:a3:37:
2a:f7:0c:93:e2:42:80:8c:82:33:be:a1:0c:d8:91:
07:13:76:3e:8d:f3:fa:8c:d4:09:68:8b:fc:b8:ca:
e0:bc:0e:84:44:38:cf:8a:e0:40:f2:5b:5d:5b:3b:
fa:c5:af:67:83:d7:0b:cf:f3:54:a9:66:c5:8a:cd:
07:71:d3:f0:61:e8:23:12:7b:11:b3:ce:0b:2a:65:
02:52:e6:5c:10:99:09:fb:8f:e6:b6:8b:e8:1f:18:
0a:72:33:8a:87:46:8e:c9:87:57:83:68:a6:0e:85:
67:9f:5a:72:74:da:42:a0:ef:1e:8f:a5:5c:de:e7:
9f:da:96:69:cc:8d:31:d0:0e:5e:24:58:ac:60:aa:
59:15:25:2e:c3:f1:10:9e:65:b8:40:1f:1d:d9:07:
bc:c6:75:df:d8:4b:db:b0:21:7b:f8:94:98:e2:01:
61:88:37:04:ee:9d:89:aa:a0:f2:40:7d:32:08:aa:
c4:4a:c6:51:ce:d7:8b:8e:b9:54:3a:1c:9e:72:94:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FF:81:66:BE:84:50:85:1A:E7:88:6B:7A:19:1A:27:E8:F3:5E:08
X509v3 Authority Key Identifier:
keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5f:0b:36:80:93:da:18:ff:cb:3b:84:04:ef:9a:7a:cb:88:
a2:bd:16:b8:18:e3:7c:94:fd:72:7c:7d:53:fc:c2:c2:21:95:
ba:da:31:b8:ff:63:f8:9c:d2:48:67:44:75:a0:fb:df:1a:33:
1a:90:08:8c:9c:43:66:1b:3a:72:d1:a2:3a:92:31:41:20:ea:
34:91:a0:69:18:16:ca:81:24:07:bf:8d:49:56:c7:b8:8a:ed:
77:6e:22:97:4a:71:41:c5:a5:7c:e2:57:f8:c3:38:c9:08:76:
b1:6e:74:a6:18:a0:df:b9:59:0d:70:ba:a5:f2:8f:d4:e5:31:
15:ae:21:d9:ab:6c:2e:63:8d:5b:9e:0b:b3:fc:58:17:b6:64:
28:e1:10:8b:87:d1:71:a2:6c:16:0c:73:10:b1:0d:30:2e:c0:
b5:ae:f3:ed:b9:b5:10:6c:4b:92:7d:69:d3:60:71:24:5f:3e:
6e:82:34:dd:ec:ea:34:de:c8:4b:2e:30:32:e1:2e:aa:d3:a4:
e8:1c:5f:17:ad:86:95:8e:4a:99:6f:a8:f0:a8:6d:b7:94:f2:
3d:4a:93:32:76:a3:09:e0:66:87:73:d9:f7:63:f5:13:0d:2c:
46:42:14:e3:97:fc:6b:2f:81:ba:c5:8a:c6:1d:e8:55:86:d1:
ab:66:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:40:43 2025 by rpki-client