Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json)
Hash identifier: kXS0BxOUt74z4svbdbAKnB0qggKnABZXbRXsgBuwYzE=
Subject key identifier: 92:E1:C4:2A:F3:A4:A1:B0:98:ED:0E:9B:E1:C4:EF:A7:90:25:C2:89
Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611
Certificate serial: 01974D0DB9E507FE2A2E12DB6523A50BC538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
Manifest number: 1041
Signing time: Sun 08 Jun 2025 01:00:34 +0000
Manifest this update: Sun 08 Jun 2025 01:00:34 +0000
Manifest next update: Mon 09 Jun 2025 01:00:34 +0000
Files and hashes: 1: MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa (hash: 15XIx+4E6jpmVYTgDMId5DLCY/biXmoyIZeEQt1OExE=)
2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: IOHZIuC9u+y9LWLqF4DCYDo28fZcXIKd+eWlWXQTNLg=)
3: V7TwuQchFJyj3FzgSo-quNHM3vk.roa (hash: hjNtsrFF5n1yKl43GjiftBGk4/SSn0HVl0kFwJ8ePwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:b9:e5:07:fe:2a:2e:12:db:65:23:a5:0b:c5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611
Validity
Not Before: Jun 8 01:00:34 2025 GMT
Not After : Jun 9 01:00:34 2025 GMT
Subject: CN=92e1c42af3a4a1b098ed0e9be1c4efa79025c289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ef:e0:a3:09:1f:d2:2b:24:01:af:5c:c3:4e:
ef:c3:a6:8a:87:b9:1e:c5:81:2a:0b:26:b1:2e:06:
77:8b:20:8c:44:21:15:72:40:f8:f1:1f:25:37:90:
49:3d:a0:85:1b:e8:7f:c3:67:2b:76:a3:c7:be:4c:
01:5d:95:48:c3:c0:e2:6c:d0:f9:7c:3c:08:92:98:
ce:e1:91:05:1c:27:f7:30:eb:df:de:57:7f:e6:3d:
0e:19:9e:e5:75:5a:c6:02:29:70:70:eb:07:b5:00:
7b:80:7d:f9:aa:6d:7b:d7:ad:26:c5:78:09:ce:d9:
ae:d4:19:1d:ef:4c:62:39:ed:fb:e9:75:4a:dc:90:
31:f9:30:77:f3:eb:cb:47:93:90:67:4b:c2:e7:88:
ce:b6:20:36:0d:2b:fa:f8:af:55:a1:3e:a8:43:4b:
b3:79:50:da:12:5a:de:63:25:f8:94:20:63:ab:07:
e1:bd:de:f7:48:f5:64:d5:c5:48:c6:e1:ba:be:0c:
67:7c:9f:55:14:d0:43:0c:6a:33:f1:24:aa:27:21:
0c:69:3d:22:4d:c2:93:6b:66:5a:53:e0:8e:c3:f2:
09:a8:28:bb:cc:f2:78:3c:b0:d5:99:20:42:76:d7:
34:29:f9:df:a1:33:ef:54:b6:19:fa:7c:91:9c:f1:
5d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E1:C4:2A:F3:A4:A1:B0:98:ED:0E:9B:E1:C4:EF:A7:90:25:C2:89
X509v3 Authority Key Identifier:
keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:93:65:f4:a7:75:f3:ea:ba:70:fc:a5:ba:36:31:ed:e8:f7:
38:6c:11:a6:7a:0d:de:af:61:2f:b4:e8:a5:10:52:c4:2a:99:
7f:59:5b:67:08:f9:10:a8:77:c6:48:17:78:38:6b:db:73:d4:
12:2f:a3:2f:1e:23:7c:5d:6a:04:f5:b6:cd:5c:09:32:77:40:
1f:e1:31:a9:d6:d0:65:f2:ed:f2:02:ad:20:e2:1d:88:29:cf:
76:bb:1d:04:98:66:d3:a2:28:06:f2:38:c1:65:f8:d3:87:61:
8d:4d:99:82:64:3a:b8:fe:ed:0c:33:30:d4:1e:1e:23:d8:55:
6b:bf:cb:5d:90:6c:52:a4:b1:29:57:cc:77:42:bc:36:61:cd:
ad:0a:2d:6b:f3:e7:c2:53:6e:78:41:7f:3f:bc:d2:28:4c:b1:
d2:6c:2c:06:06:b9:d9:9c:42:ac:de:fa:c9:67:dc:10:5a:5b:
5a:78:ce:c1:91:95:ce:e6:6c:7b:29:40:e5:57:09:7c:aa:49:
16:ff:5a:5e:fb:0a:6a:4b:94:89:82:67:7a:10:63:c8:ca:78:
1e:f2:d0:a4:02:fb:a8:e4:f3:b1:36:e0:1a:f4:0b:56:a1:5d:
1e:78:1c:27:3f:51:9e:59:ec:6f:ed:74:02:68:78:75:2a:ea:
96:5c:68:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:35:52 2025 by rpki-client