Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
File: SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json)
Hash identifier: T1w8PhXDFPlC7U4+wu6/nMwz/hj4yruGVy+GaSriIgA=
Subject key identifier: E0:FA:16:49:BA:A7:D8:50:05:C3:16:33:3A:F2:A1:D9:9F:07:9F:95
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial: 019745F90708E3D94B1DEBD0EB0DAEFCA7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
Manifest number: 103E
Signing time: Fri 06 Jun 2025 16:00:37 +0000
Manifest this update: Fri 06 Jun 2025 16:00:37 +0000
Manifest next update: Sat 07 Jun 2025 16:00:37 +0000
Files and hashes: 1: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: Vec9DdO6hdqts8GJvzcW57Rzw/R/Mo3E5jyj3s4YLZE=)
2: bOFB3LalOSOdSrbz-a4cUkkG03M.roa (hash: SZa6u36skxx1rALcmnxtRi0278XWZ89tCnch5FRpzoM=)
3: ipcAqlbQdh9QjilJG8UTA6cw-zw.roa (hash: RUMHng+Xlo2Ru6wmJaBAotc3mLSEqq30G4I26Jr98jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:07:08:e3:d9:4b:1d:eb:d0:eb:0d:ae:fc:a7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Validity
Not Before: Jun 6 16:00:37 2025 GMT
Not After : Jun 7 16:00:37 2025 GMT
Subject: CN=e0fa1649baa7d85005c316333af2a1d99f079f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:17:b7:27:44:3e:41:c5:b2:e1:54:e9:7a:
8f:77:35:18:c6:fb:bd:4f:4f:59:2b:3d:8b:81:02:
65:5b:da:1f:dd:85:af:9d:e1:e4:50:4d:23:66:3b:
13:0c:4b:51:ce:94:c4:ef:b4:26:49:c0:2b:be:c2:
af:78:05:90:19:72:aa:21:06:23:43:f6:0a:2f:4a:
59:fa:ef:51:a4:b0:97:54:2b:0e:a8:8f:7e:b7:c6:
0b:fb:42:08:bf:b5:f1:36:ce:f9:ef:16:da:53:93:
19:3a:da:22:a9:29:a1:70:a6:0a:67:37:44:19:b6:
d9:3c:8e:23:fe:50:d2:9f:3d:9d:49:58:66:7e:64:
30:cb:85:e6:b3:1d:eb:01:8c:2f:ef:59:49:73:30:
65:e7:19:40:7d:87:76:91:63:ab:5d:04:6f:68:d0:
37:28:d6:c3:86:06:ec:62:35:50:dd:a1:34:6b:bc:
bb:6e:df:b1:24:be:f6:2a:47:d6:f8:9c:28:07:aa:
90:67:a2:cf:b5:f6:c5:03:1a:6c:94:42:ed:f4:08:
a3:a4:1c:5b:a3:59:f7:1e:ca:9f:0a:cc:8c:5a:33:
a5:f2:95:23:17:5b:f3:88:b0:5f:a6:38:0d:73:41:
bc:a8:ed:10:b0:93:13:24:21:8d:1d:0b:25:ea:6b:
b1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FA:16:49:BA:A7:D8:50:05:C3:16:33:3A:F2:A1:D9:9F:07:9F:95
X509v3 Authority Key Identifier:
keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:12:8b:fe:5b:05:a2:4b:6f:5f:7a:57:91:8c:93:31:41:83:
71:4f:0c:7a:f8:64:74:b3:3c:b4:e6:49:a8:2a:c5:d9:90:68:
ad:b1:45:22:69:68:9a:72:62:e7:8f:dc:cb:38:92:bb:40:83:
dc:ee:8f:99:c7:e1:62:03:cd:aa:b8:89:9f:fd:80:3f:06:ae:
ce:f3:10:e1:cb:ed:41:6b:0d:7c:9d:9c:9c:71:6b:2c:eb:80:
ba:34:4f:6b:a8:6e:14:d0:89:09:fe:1a:7a:60:e5:6b:af:57:
49:1d:f1:39:71:69:ee:73:ac:86:ef:a4:b7:64:5b:40:cf:f3:
7b:69:7d:11:76:44:45:e6:f0:33:c3:5e:1a:a4:ce:ba:6d:e1:
4e:8a:64:91:90:08:09:06:c8:b9:ed:bc:a8:23:c4:86:e8:ee:
00:52:08:ef:41:ad:ed:a9:de:3d:c0:af:1c:73:1b:96:6f:90:
7b:f9:24:9e:3c:67:8d:57:98:89:62:32:83:b3:d3:46:5d:ab:
e9:32:73:fa:ff:d9:45:cb:1e:52:2c:78:9f:30:a8:f6:59:85:
ba:ca:a7:89:1b:89:55:43:3e:10:4b:30:68:aa:b7:45:9c:4f:
b7:6f:89:10:02:54:72:e7:19:86:0a:ab:e5:ca:39:c2:ec:91:
69:f3:41:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:18:55 2025 by rpki-client