Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File: sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier: aZi+PwWUN2BY8NkTmqsNqzUwBzczr4RJS8cwd9NyXJ4=
Subject key identifier: 2E:C5:FB:5F:75:4E:0A:1E:5D:CF:DF:3F:30:D6:CB:AE:5B:5C:43:B2
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial: 0197B6A08A437472F82A841CEEB738411138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number: 0E4D
Signing time: Sat 28 Jun 2025 13:01:03 +0000
Manifest this update: Sat 28 Jun 2025 13:01:03 +0000
Manifest next update: Sun 29 Jun 2025 13:01:03 +0000
Files and hashes: 1: 2pelV4FedV45XCLKgpg6a9aqnGU.roa (hash: JAMnQ7Ljsuvl5vUTIxSzwNI1IGVq+RkAOKUEPceEiRc=)
2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: OCF3tSuujwTANUcUNsyIigHUCqs6nw69M4ve6vXXpjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8a:43:74:72:f8:2a:84:1c:ee:b7:38:41:11:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Validity
Not Before: Jun 28 13:01:03 2025 GMT
Not After : Jun 29 13:01:03 2025 GMT
Subject: CN=2ec5fb5f754e0a1e5dcfdf3f30d6cbae5b5c43b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:5a:8b:a1:dc:10:ac:be:d9:54:d8:f1:e2:
7c:d0:0b:6f:70:5b:10:f5:bb:25:08:82:86:8a:63:
38:81:7a:3c:1c:90:4f:b7:7d:9e:b2:25:5f:c3:cf:
65:31:d4:07:2f:62:83:84:ea:dc:d4:08:58:b0:78:
da:01:b7:c5:10:e2:df:de:cd:8e:dc:77:19:d1:0d:
91:e4:32:f5:ba:b5:92:06:16:f4:6a:a9:da:d8:48:
69:81:f5:d5:2e:95:9d:c2:39:66:8f:44:bd:92:62:
e2:d8:73:4c:60:29:15:ae:14:85:db:d6:58:6d:01:
f8:5e:f4:ec:18:7b:4b:43:16:0f:ae:1e:af:07:ea:
a6:17:5e:58:cb:54:cd:8e:ca:c2:b3:61:0f:83:b6:
e8:9f:97:eb:1a:b0:d1:a2:9c:09:d7:c4:4c:f6:b4:
21:6b:30:86:2f:9c:cf:69:e8:10:0d:17:60:04:41:
d0:d9:8a:e8:df:a6:fd:5d:18:dd:90:42:f5:01:58:
7e:c9:0b:dd:ad:1e:18:1b:30:51:e0:92:91:dc:59:
a7:a4:a3:02:0e:f0:0f:4a:ea:71:31:61:db:5f:3d:
5f:2b:c0:2f:ad:41:30:dd:6e:25:da:14:a5:45:42:
75:95:49:52:d4:70:5e:ea:7c:06:95:aa:37:92:ea:
01:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C5:FB:5F:75:4E:0A:1E:5D:CF:DF:3F:30:D6:CB:AE:5B:5C:43:B2
X509v3 Authority Key Identifier:
keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:30:91:be:ee:8c:9f:68:79:6a:3c:b5:b3:b7:4c:2f:2e:cc:
ec:a3:cd:19:fc:8f:e6:10:20:29:33:ea:8c:70:e8:80:58:e3:
e4:56:8c:9d:6b:ca:66:53:23:2e:d6:5a:00:f9:93:d1:e0:9a:
06:1c:fb:6e:70:db:46:52:50:88:24:19:78:3a:79:ad:4b:6f:
5a:f2:54:ce:9c:3d:89:f6:f8:4b:b3:76:07:1e:bc:a7:ee:96:
96:ef:21:88:7b:58:2b:ca:27:0a:76:a0:9c:fe:df:11:51:9f:
f5:e8:13:59:be:6c:01:ce:81:63:ef:a2:fe:1c:99:94:6b:6a:
8c:f1:c2:fa:37:3d:0c:7d:c3:df:48:1e:1c:b5:76:dc:19:bc:
a3:0b:7a:36:a3:53:bd:ef:20:b6:f3:ec:ca:84:b7:69:f5:73:
05:6b:83:a6:83:d7:57:6b:71:f1:14:57:70:2b:9b:b9:f0:4e:
e0:1b:66:dd:0d:a3:bd:b2:fd:3f:ab:62:1c:e4:31:cb:4f:f1:
fb:00:df:d6:e2:53:a7:15:0e:64:9d:60:60:cc:60:a5:4a:01:
2b:98:f2:35:de:72:be:6c:92:ee:e2:f4:f2:b6:7f:84:4b:b4:
d3:49:a7:20:2d:18:0f:ba:ee:38:25:3a:fb:3e:6c:ec:9e:bf:
31:af:2d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:29 2025 by rpki-client