Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
File: SGeaItDbyYDV1ZszNnn5ObmuPyU.mft (raw, json)
Hash identifier: FEOE+ZB5r6zf85r+C7UVtMlehJdonppDBmfG2Aaik0s=
Subject key identifier: A4:A4:71:50:5E:A0:D8:1C:78:F0:51:60:C8:51:F8:DB:0E:13:60:B0
Authority key identifier: 48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
Certificate issuer: /CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Certificate serial: 0197B6329DCE0980BC6B4AFD3D0AC5FFE3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 11:00:59 +0000
Manifest this update: Sat 28 Jun 2025 11:00:59 +0000
Manifest next update: Sun 29 Jun 2025 11:00:59 +0000
Files and hashes: 1: SGeaItDbyYDV1ZszNnn5ObmuPyU.crl (hash: WPzNUaB9KI+dDJq7xyWzsYOsYOtGtS3g9Jiji1ioVpk=)
2: lSVuH4_qT7VO0FFfSg8D4f45UxY.roa (hash: 9ZtD0p1FuMWX60A/XbYYtr6hffE/KiTmy0aXZ7EMf+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:9d:ce:09:80:bc:6b:4a:fd:3d:0a:c5:ff:e3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48679a22d0dbc980d5d59b333679f939b9ae3f25
Validity
Not Before: Jun 28 11:00:59 2025 GMT
Not After : Jun 29 11:00:59 2025 GMT
Subject: CN=a4a471505ea0d81c78f05160c851f8db0e1360b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e2:1a:68:7e:60:40:1f:ff:a5:3f:03:46:3a:
f5:aa:6f:4d:41:c8:5f:18:e7:de:01:a7:a0:76:3e:
3a:a3:8c:1c:af:a5:63:5a:5d:cd:19:9b:9a:34:07:
e4:c5:b9:08:15:44:32:df:b7:c9:c0:1f:86:6d:96:
4a:d9:70:f4:66:e3:41:af:5f:d7:af:72:61:44:88:
c0:a3:42:d2:b5:db:c5:47:24:6a:2b:a0:56:00:dc:
f5:d8:76:16:92:5e:7a:24:12:6a:02:e8:11:44:58:
db:5b:c0:de:ea:81:f9:ed:fe:0a:56:eb:62:a3:74:
3e:01:ff:8e:14:57:82:56:43:aa:5a:c8:99:b2:e7:
f0:14:5d:64:be:dd:6b:cb:1c:4f:80:54:69:03:13:
7f:58:1f:c8:9b:4a:32:2e:1e:fd:fc:85:91:ea:75:
eb:97:8e:02:44:62:e1:9a:07:a5:c2:0b:c3:05:f5:
a7:1c:d6:2e:60:ab:bc:1a:73:13:1a:d4:49:14:d2:
da:f2:8e:77:16:f4:65:c8:70:09:e8:f3:36:b2:00:
4e:bb:85:7a:e5:48:9a:ed:eb:d9:6b:c0:e7:d3:1f:
db:39:f0:c3:f3:a0:9b:81:51:3c:4b:be:e2:a7:ed:
91:72:fb:45:d5:6f:80:9f:3e:3d:54:d0:c4:41:12:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A4:71:50:5E:A0:D8:1C:78:F0:51:60:C8:51:F8:DB:0E:13:60:B0
X509v3 Authority Key Identifier:
keyid:48:67:9A:22:D0:DB:C9:80:D5:D5:9B:33:36:79:F9:39:B9:AE:3F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGeaItDbyYDV1ZszNnn5ObmuPyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7dfa04-7c2c-4ac3-a66b-0c180a0841ab/1/SGeaItDbyYDV1ZszNnn5ObmuPyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c0:e5:ff:8b:d8:b1:ed:8d:7a:5b:de:5f:ea:2c:40:7c:b2:
84:e5:fb:d2:c5:01:c5:88:db:a5:f6:bb:52:6c:d8:a9:02:b4:
9d:6b:26:d3:96:ff:c9:15:5c:43:55:5e:9d:4b:72:fa:b2:39:
b5:26:23:73:9b:c6:fa:0d:30:78:f6:1c:f5:67:7b:92:d8:29:
e2:b1:2a:fe:43:de:93:1a:55:d2:7d:13:fc:b6:5b:cb:1a:a5:
fa:c8:32:2f:79:a9:c8:ba:26:0e:c9:17:b2:b5:9d:70:b9:07:
a5:e7:11:09:9b:b2:95:a4:05:eb:28:1c:bd:87:25:c6:f1:75:
55:67:ff:73:db:13:35:c7:46:7b:40:b3:00:22:31:f3:1d:31:
e9:20:fb:ba:9b:28:da:83:f2:b2:b4:b6:c1:0a:57:2b:12:f9:
bb:29:48:c9:aa:e1:be:6a:a6:cd:e8:c3:14:de:ba:63:2c:3b:
b1:9a:86:3c:10:23:41:07:7d:ba:e6:39:cc:e7:e6:50:fb:66:
5c:3b:40:6c:db:95:8c:42:c3:0e:1c:5a:53:1c:30:2e:72:27:
a4:78:fb:ec:9c:91:b0:74:68:67:92:86:eb:5b:04:54:6b:bc:
dd:3c:00:2c:88:06:fd:6d:a4:bc:f6:9f:43:b5:a5:7f:4d:7f:
10:a4:48:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:24 2025 by rpki-client