Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
File: sIrODrPi30n9u3dyZxb7Zed3eWQ.mft (raw, json)
Hash identifier: aO79BEsQEzJ+kUKANDyMpD94k8DQOA3p9l7DhwGAdOg=
Subject key identifier: 0F:04:76:14:B0:AF:8F:50:F6:CA:62:12:A9:50:EA:C8:3A:85:37:97
Authority key identifier: B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
Certificate issuer: /CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Certificate serial: 01974B1F73A8DA451C1E5E0FB1F244240C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
Manifest number: 0971
Signing time: Sat 07 Jun 2025 16:00:41 +0000
Manifest this update: Sat 07 Jun 2025 16:00:41 +0000
Manifest next update: Sun 08 Jun 2025 16:00:41 +0000
Files and hashes: 1: diUYpUKMIXz1gLgZaNSVSKV18U8.roa (hash: 2LacqRpLn+KwsMEDop6qn6ZSkweQldM8ZPPhx+K/olo=)
2: sIrODrPi30n9u3dyZxb7Zed3eWQ.crl (hash: v1Nw4UytIVZTH273d35fvqIkK5d8dnsRwuLcXH7ps4E=)
3: ypDy4xS2R6Ye6aWBkCNFAdcm0wI.roa (hash: hjIAAkji2+ZqYHRNKyPRkJEyLfHtgHEfz/xpi/TOXR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:73:a8:da:45:1c:1e:5e:0f:b1:f2:44:24:0c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Validity
Not Before: Jun 7 16:00:41 2025 GMT
Not After : Jun 8 16:00:41 2025 GMT
Subject: CN=0f047614b0af8f50f6ca6212a950eac83a853797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:71:24:88:9d:ed:2a:18:71:ef:c4:60:62:
00:b7:85:1d:88:9f:9b:42:01:d1:82:08:d7:43:6e:
2d:c8:48:9e:6e:a2:95:a4:0b:b2:9f:1c:5c:17:38:
a4:3a:64:62:ac:21:d5:30:3f:57:02:57:5e:27:5f:
5b:25:c2:69:72:22:94:30:58:e3:5f:e4:ea:ff:cf:
86:58:f8:86:ec:13:37:5f:7d:ea:46:10:89:33:91:
ec:6e:98:e2:a4:dc:2d:65:7c:3b:af:f7:a1:41:35:
55:ed:7a:40:24:0a:b7:e7:a2:cf:93:10:bf:ff:1d:
7c:80:0a:77:87:ca:e1:9c:12:94:af:4e:31:ac:b5:
a5:27:7f:06:00:b2:3b:e1:a4:8f:22:05:5f:8f:f7:
9e:d2:40:24:ec:ed:8d:d3:36:bf:21:10:06:64:4c:
56:02:cb:e7:14:ac:46:79:02:bc:b5:94:e7:32:8f:
83:31:ac:e5:9f:ad:76:0f:55:5b:32:d9:c0:77:15:
f4:1c:2c:1f:47:30:c8:99:4a:c0:07:7d:6c:42:cc:
4d:9e:f8:79:22:b7:44:49:8d:17:12:7f:91:46:e6:
3d:61:a6:da:34:ae:3e:68:6a:ac:96:d8:72:6b:24:
e0:c1:07:f2:0c:5c:7b:b9:45:13:fa:78:fa:7e:91:
b4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:04:76:14:B0:AF:8F:50:F6:CA:62:12:A9:50:EA:C8:3A:85:37:97
X509v3 Authority Key Identifier:
keyid:B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c9:9b:44:5c:95:b5:33:ba:ca:ca:11:2a:d1:ad:08:e8:35:
2e:23:ce:ba:6a:d0:5b:c1:43:59:b1:2a:6f:40:c4:94:2a:ef:
65:61:ef:5b:67:74:92:c6:23:77:af:b1:53:2e:ab:6d:40:30:
de:a4:75:ed:21:d7:9e:9b:34:77:d0:2c:52:e7:60:7c:b5:ea:
9c:14:b1:33:e6:25:fa:70:53:87:3e:d5:a6:3c:ce:42:00:1b:
3b:a7:6a:14:8b:bc:ef:7c:9d:55:ac:cc:74:5e:da:f8:e1:5f:
57:6e:6f:61:1e:a5:7e:03:5f:71:37:1d:f0:ec:14:4b:cb:af:
10:e5:d0:63:1b:88:4f:d9:7c:79:94:ad:bd:0d:69:bb:b4:e2:
3d:50:f1:3a:a5:15:4e:7a:cb:bf:39:2a:0e:ad:61:41:61:ee:
b7:a2:f4:5f:d9:f8:a6:41:bd:b3:40:69:9f:90:94:7d:66:e5:
1d:5b:52:b8:57:7c:15:51:e6:12:bb:76:8b:8e:da:c4:24:a8:
fc:b2:cb:df:a9:66:90:e6:86:1a:d5:fd:98:31:d0:a0:9a:33:
6a:28:19:3f:b6:b4:f1:ce:03:0e:95:c6:71:a2:8b:5e:7f:60:
1e:5d:18:73:ef:ef:9a:47:12:ae:af:3d:a0:81:c2:94:85:30:
70:c2:cd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:51:52 2025 by rpki-client