Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
File: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft (raw, json)
Hash identifier: 78XlkwZjbg1/XcXSHgYTgjcchBv2HdRLpXFvqveSqN8=
Subject key identifier: AA:B1:6F:C3:64:A1:5D:5D:E5:A3:B1:C6:27:AB:39:04:1E:04:72:F0
Authority key identifier: 49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
Certificate issuer: /CN=49f9b880f259b88190702c22bf832171b7597434
Certificate serial: 01976D3DFAA51A970251319F2E59469391F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
Manifest number: 11E2
Signing time: Sat 14 Jun 2025 07:01:07 +0000
Manifest this update: Sat 14 Jun 2025 07:01:07 +0000
Manifest next update: Sun 15 Jun 2025 07:01:07 +0000
Files and hashes: 1: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl (hash: Njz+u8SM5awKKe20mfnUd7IXvjnejq0CBdqnkx8jCM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:fa:a5:1a:97:02:51:31:9f:2e:59:46:93:91:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f9b880f259b88190702c22bf832171b7597434
Validity
Not Before: Jun 14 07:01:07 2025 GMT
Not After : Jun 15 07:01:07 2025 GMT
Subject: CN=aab16fc364a15d5de5a3b1c627ab39041e0472f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:06:ae:5c:48:39:fc:0e:35:c4:e7:e5:b0:
4c:02:55:41:d6:23:00:9b:aa:2e:59:0c:c3:a7:66:
27:a3:4d:1f:ae:b7:3f:65:47:07:a2:90:09:21:6d:
a5:c4:7a:72:8d:c1:44:df:65:24:9e:a4:5c:65:10:
13:5a:ff:95:5a:db:38:08:b4:39:d0:df:33:ad:64:
36:d4:5b:7a:a8:04:5e:53:12:80:c9:e4:d3:ec:24:
3a:65:60:b6:ae:66:4e:4d:af:22:0f:1e:1b:43:ca:
6f:02:2f:d1:0f:f3:9f:75:9c:b5:b5:79:46:56:88:
41:44:60:86:e9:b1:35:e0:c8:7d:ee:16:c5:25:99:
b4:ef:19:2f:5e:eb:22:3a:5d:33:1c:d1:e0:af:80:
2c:70:b7:1c:a4:e5:f7:e6:66:9c:55:24:cc:d4:f2:
7b:65:c8:62:2e:94:43:99:63:12:ce:51:53:bb:71:
cd:a8:e4:ce:89:e5:aa:ac:d0:bc:7f:24:94:c1:af:
d3:20:3c:05:d5:35:fc:02:2e:ac:e2:02:93:2a:27:
f0:a1:a8:c1:76:bd:0a:da:d0:5a:26:0d:6f:4a:23:
43:c4:f9:47:96:d6:e7:ce:03:6b:d1:4b:4d:fa:1f:
a8:35:18:c2:8b:81:e7:b8:be:24:54:a1:dd:95:99:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B1:6F:C3:64:A1:5D:5D:E5:A3:B1:C6:27:AB:39:04:1E:04:72:F0
X509v3 Authority Key Identifier:
keyid:49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3b:21:e9:be:b9:bd:8f:03:c1:b5:b6:5b:7c:37:00:b1:03:
a3:32:e5:45:0c:55:a0:3a:4d:c9:49:3d:2b:b6:9c:f6:e9:ff:
8a:ce:aa:1c:ea:9b:64:9d:f5:28:21:15:5e:54:91:e3:a0:c3:
73:77:7c:47:2e:05:41:76:54:3e:49:2a:83:89:41:0c:83:df:
cd:ff:9c:1e:a7:6d:c2:42:2b:21:84:ae:68:e6:9f:ec:8c:8c:
26:30:da:e3:bd:42:28:4d:70:ff:61:c4:fc:43:f8:da:b2:94:
30:df:57:66:3c:3d:55:6e:64:d4:12:96:d0:a9:ab:30:7f:95:
75:ec:df:02:78:c5:96:89:d8:55:a5:91:e6:30:de:52:e6:46:
91:1d:37:7b:22:88:df:0e:5f:52:8a:37:eb:86:72:95:1d:54:
a8:25:44:9e:06:dc:a8:fd:ab:68:9b:bf:0c:89:62:d8:63:54:
71:5a:9b:1b:91:1f:40:76:e7:f3:c6:ea:d6:54:7f:5c:b9:6d:
08:a4:0d:18:35:5b:f4:96:12:58:7c:e2:c8:dc:95:a0:b9:40:
09:e2:84:37:56:c1:6d:01:42:7d:5b:69:57:9a:45:95:80:93:
53:16:8d:2d:db:08:b2:8e:9c:85:12:4b:ae:42:f9:5f:34:45:
8d:b1:b7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:29:59 2025 by rpki-client