Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier: v7LFZ5O2ZPHniU2Bhm+TGbMtaDStk6O9Ik71Pg+86xs=
Subject key identifier: 9D:09:BA:D1:96:1E:7D:CE:4E:24:8A:AF:AC:C0:3F:32:D3:20:1A:0F
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 01974967F5CD08101E55D3C61BDAE06A33AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number: 1585
Signing time: Sat 07 Jun 2025 08:00:39 +0000
Manifest this update: Sat 07 Jun 2025 08:00:39 +0000
Manifest next update: Sun 08 Jun 2025 08:00:39 +0000
Files and hashes: 1: 0JGiKje1faw9lacGbk5NhV2XAbU.roa (hash: Z5RBvg80RTlugYiMNKYpsKysKI83C+571C6SNSSEK3o=)
2: 2DxKgawRIdwPHYKPKO80oLEjXnQ.roa (hash: GkiqXgjmsGCVt8nP5qXPMp6hqSSrH1HiN32NDxCXRyM=)
3: CzOVrXq8s2rQFDCGaFJZ_xM7OZ0.roa (hash: 5XAPorQnylekwHM79ynLgJVh80voKy6A8YYVF6d1gL0=)
4: DpKy84xGq4bZRMW3bg3Qqscpy-g.roa (hash: Pghneqh0rqfe/wIbx3lltKoFinQFr3Xds6By1KC5GTY=)
5: Zf4cfRQ8Yb3zaonMniOY9mHCgZU.roa (hash: 7qovkktB6alfndSsebLaLeESbLcFDoOHnNh2I5l6SkM=)
6: rJBUoTOBCbGpyq2LQ5qyqtlWDVk.roa (hash: OOOBfJlZtCKY/fNu/6lDyCNmP9uVM4ZIRjn3vJc9saw=)
7: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: gsrK+nhUZofxcWDEMFJu3Aq/2B6Up3V9cJl+5BK3X2E=)
8: wz_TvTU1xF0eJ_9EwkVCuufFGFo.roa (hash: Vtdi4r4GuCz7NyZSMqwPceN5sJkZoRY3YKYSc4S4CjI=)
9: yDDPfOYkq9TvDo49z4rJ89YrUS8.roa (hash: h90+S4fhQ3iqdh42EvmGUJBw540N3+LmJjYWM7l7haw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:f5:cd:08:10:1e:55:d3:c6:1b:da:e0:6a:33:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Jun 7 08:00:39 2025 GMT
Not After : Jun 8 08:00:39 2025 GMT
Subject: CN=9d09bad1961e7dce4e248aafacc03f32d3201a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:be:0c:84:65:86:35:81:ce:4a:1a:26:0e:
dc:f3:17:f3:2e:93:d7:d3:81:e4:9e:6f:f1:4f:8b:
f9:f7:a5:01:47:88:cb:cb:2f:3d:f0:c1:6e:9a:b5:
52:6e:d5:30:b0:0c:27:ff:7a:ae:45:78:cb:9c:7a:
c8:c9:9e:54:0c:5b:a4:27:39:3e:27:0f:25:9c:e8:
2a:7e:57:13:d3:63:a3:97:d2:7b:d4:cc:c1:76:84:
73:11:b1:5c:be:43:5c:79:a4:52:d6:88:d9:3c:c0:
96:fc:50:c6:33:18:96:7f:83:2d:78:8b:c7:ff:f7:
5e:9e:c6:04:0a:07:39:72:3f:58:71:5c:01:86:a3:
a1:9f:46:31:b9:9a:00:42:0f:1f:5c:01:09:79:c3:
56:fe:9d:e7:00:6c:50:0c:4e:64:06:a0:43:cc:df:
15:b8:b4:bc:12:18:1c:9b:c7:f6:35:6a:83:7f:52:
ba:32:0a:e8:7a:5b:33:b7:2e:bd:da:e6:63:b6:95:
03:74:74:59:09:37:fe:21:b4:e6:20:30:82:4f:6d:
20:3d:78:21:26:50:e7:48:99:93:be:25:d4:f4:a6:
a6:1b:1d:a2:d5:0c:c8:25:1c:67:bd:32:ed:67:ee:
40:45:51:ff:af:f9:29:6a:2e:d1:a0:62:df:e5:02:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:09:BA:D1:96:1E:7D:CE:4E:24:8A:AF:AC:C0:3F:32:D3:20:1A:0F
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b1:03:91:eb:9f:ee:72:d6:72:ec:bf:7e:22:c5:06:fb:d7:
8e:33:82:8f:48:17:66:38:aa:90:fd:44:c5:d5:96:da:74:be:
c5:20:43:ea:be:4d:f8:bb:0c:c3:83:17:19:09:9a:42:41:e7:
43:50:4a:17:fc:f7:6d:d5:de:77:69:a3:c6:33:04:9e:7d:83:
fe:40:98:be:31:a4:a9:e9:3c:3e:23:18:cc:94:28:d4:d8:6e:
46:1c:e8:b2:0b:24:04:d1:60:3c:5f:81:3a:92:12:14:f3:df:
e1:cc:85:2a:7c:62:9f:d9:9a:6b:fc:bb:25:a5:90:c9:6c:6d:
a2:90:e3:1f:c2:70:31:9b:5c:1f:20:06:5b:6c:32:65:8e:8f:
0b:d3:59:f4:f7:eb:28:23:4a:37:50:82:94:9a:6b:d6:b3:46:
75:cb:46:e1:7a:6b:b5:60:57:4c:b0:eb:8f:69:31:b3:67:06:
30:28:c0:08:5a:f2:cc:84:1f:65:79:15:18:6b:d4:cc:a6:c4:
e3:14:f5:4b:95:37:7f:f8:2c:27:10:86:a6:39:cf:ba:81:73:
a6:20:ae:dd:99:58:83:4f:5f:c4:7d:f8:93:d7:07:92:26:76:
de:20:d1:78:db:ce:67:7b:df:2a:a3:3c:07:06:d5:d0:35:b5:
87:5b:98:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:14 2025 by rpki-client