Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: jwOnBtIq40eSBY4lRu55kX3prSjlrC4vtmpBMpKVwlI=
Subject key identifier: 18:E2:8C:C0:61:98:CD:BE:01:F7:1A:61:B7:A3:28:49:A3:0A:B4:95
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 019739501D277C2BFC4261CCE933DA399E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 1573
Signing time: Wed 04 Jun 2025 05:00:41 +0000
Manifest this update: Wed 04 Jun 2025 05:00:41 +0000
Manifest next update: Thu 05 Jun 2025 05:00:41 +0000
Files and hashes: 1: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (hash: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=)
2: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (hash: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: L9i4ZG2yvigjSi7qud3GOEQguRQmbpCwKBuX6KY4vO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:50:1d:27:7c:2b:fc:42:61:cc:e9:33:da:39:9e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Jun 4 05:00:41 2025 GMT
Not After : Jun 5 05:00:41 2025 GMT
Subject: CN=18e28cc06198cdbe01f71a61b7a32849a30ab495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:40:b9:4c:f5:60:4a:a4:b7:3e:2d:f0:fc:
09:2e:15:e8:b7:e4:2d:b2:06:95:a0:d3:79:d6:c4:
72:58:97:2a:b8:3b:6e:4f:2b:b7:8f:39:ee:f8:e8:
05:42:51:fe:b1:95:64:fd:43:94:14:07:2b:3d:40:
dc:22:35:21:65:6d:ac:85:78:17:86:4b:31:e3:49:
d6:7f:7a:79:eb:83:2c:53:44:ef:90:bf:4f:c5:0a:
4c:19:e6:e5:ad:e1:11:1e:d6:60:79:a3:bd:84:3b:
84:40:0e:aa:80:49:85:7e:b9:e7:48:6c:b5:fb:61:
a7:67:4c:cf:61:3d:c3:0b:c8:47:c1:0f:3d:de:a6:
f0:e7:6a:ab:5f:85:4a:b9:3f:fb:15:cf:c2:bb:63:
cd:7f:f0:eb:2f:2b:59:7b:de:fa:d0:10:77:63:1d:
40:76:2f:b6:39:05:17:b3:f4:c7:6c:24:93:19:99:
ef:46:31:49:b9:d2:c5:ae:db:53:98:a5:f7:82:12:
30:4c:6d:0d:89:41:f4:c8:bc:08:07:c7:de:59:b7:
46:88:3f:12:28:25:e6:e3:0b:07:9a:5a:d3:78:2e:
72:c5:a6:e3:b9:51:05:58:eb:e3:fe:2d:bc:a9:b7:
66:b5:f0:db:94:fc:93:bb:57:ca:8d:8b:c2:44:05:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E2:8C:C0:61:98:CD:BE:01:F7:1A:61:B7:A3:28:49:A3:0A:B4:95
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:61:f1:58:9a:36:b4:c9:48:fe:41:64:ac:cc:bd:e9:00:48:
46:57:e9:8e:6d:20:2b:87:f1:4b:5e:4b:56:00:52:10:37:b6:
30:0a:ce:2f:be:e3:a7:ed:77:98:e7:9a:6b:4f:ce:c6:07:91:
61:f6:ef:bc:58:23:9a:dc:a7:92:cf:f5:e6:37:23:d8:75:74:
fd:4d:0f:7d:55:fb:d5:00:fa:6e:ab:2d:ce:ab:1d:db:32:8b:
6a:fa:a4:e0:06:ea:2b:be:38:d3:8c:12:70:a6:87:11:81:1c:
c1:fe:c6:3a:e3:b7:e2:65:b3:33:9d:cb:04:bb:48:6f:99:79:
0d:76:a1:b4:15:ae:e2:6b:0f:3e:fb:5d:67:23:fe:cb:38:0e:
ea:9a:3e:e4:eb:41:9d:5d:fb:87:71:31:c5:01:c4:23:95:0b:
44:9f:06:86:40:df:f0:21:50:97:89:d2:d1:6a:86:a3:ce:e6:
c5:80:3e:bf:4f:0e:f4:9a:3a:21:ab:08:7f:e9:95:ed:52:f1:
cb:e2:89:84:3f:e9:70:2b:28:79:2c:9c:bf:f5:df:23:c7:be:
d0:07:67:fd:1d:61:9b:dc:59:15:12:e9:ca:18:ac:63:0f:96:
e7:62:03:94:36:be:7e:08:8c:50:b5:f0:3d:37:36:eb:2e:63:
29:3a:52:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:37:24 2025 by rpki-client