
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
File: SEhV5wGTloY1rESSrXAqgkjgM-g.mft (raw, json)
Hash identifier: uNurLFOt9E/2HGadLaEEokhI8VyJ5pTm1EI7rdIEBBE=
Subject key identifier: 6D:3C:0C:5B:7A:D8:6F:3E:90:45:BB:5E:FA:E7:6F:F8:56:78:08:17
Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8
Certificate serial: 01974E2078FA9CF5B57383EFF600B682E364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 06:00:40 +0000
Manifest this update: Sun 08 Jun 2025 06:00:40 +0000
Manifest next update: Mon 09 Jun 2025 06:00:40 +0000
Files and hashes: 1: QZ0qtYVoe9eTyxZ80lBv-di1FfE.roa (hash: 25XKDnhztQCemAlFiOHm1I7VVswm+flqcSO7FBEPKO4=)
2: SEhV5wGTloY1rESSrXAqgkjgM-g.crl (hash: BbHRqg2+lZkASsnV9lxkUvsJ5pa7OrAPdHufuQekMiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:78:fa:9c:f5:b5:73:83:ef:f6:00:b6:82:e3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484855e70193968635ac4492ad702a8248e033e8
Validity
Not Before: Jun 8 06:00:40 2025 GMT
Not After : Jun 9 06:00:40 2025 GMT
Subject: CN=6d3c0c5b7ad86f3e9045bb5efae76ff856780817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:14:51:66:89:e4:7c:88:0f:da:fd:3e:6f:
21:7a:71:8a:d6:14:46:83:e7:df:21:a5:0d:09:9f:
57:40:cd:bf:b3:3a:35:72:e3:ae:de:ea:13:35:4e:
2d:e6:21:a3:e4:ef:82:08:68:ef:50:30:03:d6:7f:
1c:54:9e:17:5f:e4:b6:29:45:65:ba:8a:69:38:f3:
93:99:d4:e1:ca:65:da:89:3c:a3:75:21:0d:f3:c3:
29:27:2e:0f:f6:c3:ed:b1:c5:27:e5:31:7d:b0:70:
d7:7d:bb:b4:7a:d9:a2:ff:a6:72:16:79:bc:0c:94:
33:bd:26:ec:b1:ed:ab:15:13:f7:3a:26:a9:42:05:
48:6c:6e:d9:9d:c7:ed:fd:a6:5c:a9:66:26:04:32:
65:42:57:e0:f7:8b:49:3d:27:11:ed:45:92:83:b2:
61:1e:d3:6c:1f:7b:4b:e5:7b:01:23:67:2e:d5:ff:
52:77:38:e7:42:c6:fe:70:c8:54:77:f3:1f:10:95:
62:19:d3:9f:eb:ae:e6:a9:77:0a:2a:fb:b3:83:79:
32:e1:91:cc:04:fd:40:9a:38:87:38:12:0e:9b:b6:
fb:49:d0:d1:b5:39:5c:f7:5b:90:2f:01:19:a3:d1:
10:d6:ab:fb:79:c4:ec:9b:62:14:6a:16:be:3c:0c:
80:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:3C:0C:5B:7A:D8:6F:3E:90:45:BB:5E:FA:E7:6F:F8:56:78:08:17
X509v3 Authority Key Identifier:
keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2a:57:00:09:e5:0f:1f:63:b6:cb:3d:f3:b9:be:b4:69:a0:
58:6c:69:40:68:08:50:e1:85:82:74:41:6e:2c:95:3f:8b:87:
c2:13:73:84:07:5d:e9:44:3e:b6:95:17:81:fb:83:24:f3:a6:
ff:d5:36:53:54:c6:87:8b:66:f6:26:73:4a:be:31:00:c0:4e:
0d:97:d6:11:7a:31:b9:d9:84:f9:b1:e9:37:b7:09:c7:e9:59:
ad:8a:1e:be:4b:77:ba:83:82:bd:46:09:48:9d:a5:27:08:3f:
04:c1:44:3f:d1:02:2d:20:ca:3c:55:2e:a5:5f:06:f5:b4:fc:
1a:8e:68:de:d7:03:bf:a4:7a:d7:73:04:3a:44:2d:8c:08:a6:
52:9d:d6:a2:23:fb:fc:72:83:17:4c:32:2d:d6:68:b4:de:c3:
13:f4:0e:d0:7c:a4:56:b7:cc:fa:b0:e2:00:66:79:8b:ca:71:
0f:8b:c4:cd:65:ae:f7:12:25:de:ae:20:55:51:6b:e4:6b:7a:
5b:22:10:10:28:03:bc:85:24:e4:45:31:12:3d:80:c3:70:ea:
0e:5c:36:47:c5:8d:21:db:c8:e7:62:0e:ac:ad:d5:9a:3e:90:
3e:36:af:1c:e1:92:12:f6:7a:1c:94:ca:5a:53:79:6e:3c:a0:
7a:92:be:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:01:09 2025 by rpki-client