Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: 9fFekTJ4sEt2NRgcue0sobe3VVnFOle0UH5kZnWOwPQ=
Subject key identifier: 6A:CB:6A:56:F6:0F:B5:79:E5:67:E4:20:74:2E:7C:23:30:B4:CF:AC
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 01974B1F467D5F5FF55491DB72AF6C427C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 106F
Signing time: Sat 07 Jun 2025 16:00:30 +0000
Manifest this update: Sat 07 Jun 2025 16:00:30 +0000
Manifest next update: Sun 08 Jun 2025 16:00:30 +0000
Files and hashes: 1: Y9lkKqKsnQqZGmQo1Xo2fiLr5iU.roa (hash: 6A0trmFdZaEK+JW4D/IW96VMnZJTTVLOPMuYPUfapNM=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: DgiZorKAJqX3jn50HeZpczXaspjaNdbmkMQVFyobaC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:46:7d:5f:5f:f5:54:91:db:72:af:6c:42:7c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Jun 7 16:00:30 2025 GMT
Not After : Jun 8 16:00:30 2025 GMT
Subject: CN=6acb6a56f60fb579e567e420742e7c2330b4cfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:76:e8:10:96:9d:d2:d4:93:e3:b0:92:77:
53:22:1b:15:7e:b1:74:17:15:30:92:a1:13:3e:68:
ce:eb:46:ab:b9:7f:7f:b0:88:a6:f9:15:65:fc:57:
a4:66:83:61:c0:4a:b3:53:e6:2f:ec:c4:34:5e:cb:
94:3c:10:11:5b:f3:e3:aa:71:45:15:5e:c1:79:0c:
db:d2:4d:08:8a:bc:f7:c0:2b:c6:f9:0e:a3:af:c4:
59:32:a8:35:bd:1a:cf:3f:f2:d0:ff:ff:67:e1:41:
d2:63:a1:47:97:34:5f:31:50:ac:50:30:f5:ae:d8:
9c:f0:9e:b5:b7:e8:a2:79:e7:6a:18:3f:48:83:5f:
29:30:a5:3e:cb:df:07:2e:e7:75:ea:90:ef:9c:77:
a3:b7:b9:92:61:d6:c0:d6:d7:f8:79:ee:c9:94:7d:
9b:77:5c:c6:71:c6:43:41:e7:1a:8d:f5:57:fe:2f:
5e:0f:fa:44:48:a0:bb:a3:59:66:cb:08:7a:f8:97:
ec:47:87:91:25:09:59:79:5f:9f:56:a5:d0:ee:16:
b6:46:fa:82:4a:14:88:ef:48:a9:98:35:89:b5:ac:
7c:dd:f5:a0:78:80:92:ee:28:78:78:17:1e:7a:ed:
48:14:42:b2:f6:02:84:c2:d6:0e:fc:85:89:38:41:
56:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CB:6A:56:F6:0F:B5:79:E5:67:E4:20:74:2E:7C:23:30:B4:CF:AC
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a6:92:9a:e3:30:ed:55:3d:1f:3b:19:f8:b9:c4:44:3f:ed:
aa:92:24:a2:8e:93:69:13:53:ef:c0:9b:7b:88:39:85:df:7d:
86:9c:cc:9f:2a:de:fc:07:bc:4d:e7:bc:13:02:1b:18:cb:68:
22:41:52:18:9f:b1:8d:1a:28:56:a5:b5:a5:e1:bb:39:3c:a7:
3c:87:2a:60:da:97:fa:c2:11:f5:cb:6a:21:a4:06:b0:08:0a:
ac:3e:8e:6a:72:98:8e:ae:fe:cd:b5:92:46:d0:03:57:e6:42:
ec:26:e3:7f:81:71:2d:10:71:f2:24:ec:67:67:2e:8f:26:da:
95:10:c2:01:c6:69:8b:2c:a8:8d:f2:75:7a:21:58:91:14:b9:
04:f4:cb:e6:82:7c:fc:c7:0e:18:c3:da:84:7e:b1:53:d9:72:
a9:58:35:6d:07:ae:3e:59:c5:86:b3:7d:95:f2:5e:6e:ea:d6:
b5:63:04:d4:3f:05:ac:30:a8:b7:07:b1:a7:40:65:95:0e:61:
66:ac:69:a7:9f:5d:e0:e5:be:38:94:6f:a7:b6:5c:f5:e5:32:
e0:f4:9d:11:70:66:44:c2:c7:fd:c7:04:b7:87:fe:b2:26:f5:
fd:75:40:10:2b:f8:1f:de:fa:96:d5:97:39:1c:52:f7:35:e2:
7c:cd:ec:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:03:41 2025 by rpki-client