Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: lhhSo9HxIM+Cm75AvMqL2PuF69p0tHP85076ULsXNDY=
Subject key identifier: 66:48:E9:5C:1F:8B:9E:3E:A2:55:F3:B0:95:FE:D3:D6:BD:79:DD:14
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 0197B6A03A21137AA6B0FE4EA7FEF3CB8017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:00:43 +0000
Manifest this update: Sat 28 Jun 2025 13:00:43 +0000
Manifest next update: Sun 29 Jun 2025 13:00:43 +0000
Files and hashes: 1: kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa (hash: Jh3vTnZ3BASMX35rtVJIhlA72LY16bLBZs3GxE20F90=)
2: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: hEk7ZukZA/Eob20GXFcWGsl1it9IS8DPFUciN4QgbIo=)
3: yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa (hash: oqr96EpWpl0SR82NHdTiNdunGc2ZUGnDoW9Ug/N3aIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3a:21:13:7a:a6:b0:fe:4e:a7:fe:f3:cb:80:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Jun 28 13:00:43 2025 GMT
Not After : Jun 29 13:00:43 2025 GMT
Subject: CN=6648e95c1f8b9e3ea255f3b095fed3d6bd79dd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c7:05:2e:84:26:91:22:1f:f7:18:d4:00:7c:
6c:6f:fc:98:b4:63:1d:c1:b1:10:c4:6d:64:4d:fe:
e7:2e:3e:e9:79:c9:06:81:5d:45:29:80:e3:ac:99:
14:82:5d:92:fd:7a:55:da:85:a2:d7:5b:e8:c5:34:
2e:48:5e:5c:c0:f6:25:a1:13:a7:97:12:03:39:81:
6f:e8:a1:97:f6:2b:f8:51:e4:0c:29:41:74:d5:7a:
4a:bf:ff:9e:83:c5:77:15:34:dc:d5:bb:2d:67:6d:
8c:99:f0:5f:12:cb:09:e6:f1:6a:07:64:ce:7e:bb:
57:23:37:9b:bb:89:92:2b:b4:b9:5c:64:00:e6:53:
2b:a2:e8:23:91:ee:ec:3e:b5:49:70:55:82:88:3a:
34:6e:21:d2:8a:b1:b4:14:63:fc:e8:ba:46:6a:91:
a7:4a:34:e3:4d:3a:ea:a8:d2:94:8b:77:6c:27:97:
94:9b:f3:37:80:12:90:b8:00:b7:9d:88:c7:f1:ef:
b0:fe:ff:8e:5e:6d:17:29:9c:60:8d:4d:27:68:f0:
83:3c:4d:3a:93:04:7b:6c:2c:d6:5f:23:58:71:a5:
db:36:28:17:d9:0c:8b:94:c8:3d:ad:cc:91:5d:35:
a1:de:3a:bc:23:39:68:7b:3d:d8:98:e7:c7:9b:f8:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:48:E9:5C:1F:8B:9E:3E:A2:55:F3:B0:95:FE:D3:D6:BD:79:DD:14
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:36:e9:da:2a:62:0c:3c:78:38:4c:5a:af:d2:8f:ae:a0:66:
a7:b1:30:87:f4:25:6d:13:8a:51:09:fa:4c:cd:7e:5a:f7:2e:
ed:38:4a:d6:53:26:dc:fc:13:1e:b8:70:7f:91:80:18:9b:1a:
0f:91:19:1f:cc:50:95:01:c2:e9:05:ef:24:35:c2:fe:01:fe:
59:5d:a1:c7:fb:7d:37:43:b9:db:11:54:b7:e1:48:dc:c0:48:
85:75:f4:89:a4:c8:8a:08:25:73:87:5b:99:94:77:e5:e8:9e:
c3:03:54:d2:b9:bd:16:40:f2:93:07:bf:25:61:23:0f:82:a4:
92:c0:42:53:cb:8a:e9:f4:44:71:33:e3:0c:96:16:8c:57:66:
f0:e5:01:6a:53:8e:27:e7:e2:ce:eb:6a:c0:0e:0b:d8:5d:3c:
e9:70:49:cb:9c:ad:5c:37:40:84:13:fe:b6:b1:0a:b2:41:2d:
56:ab:9c:6b:ca:a3:04:02:55:3f:1d:84:d3:40:83:d4:a7:62:
06:3f:e1:7a:85:18:fa:64:95:23:58:75:c4:cb:bb:3d:27:b0:
04:76:d3:f1:8f:9e:da:ba:d6:db:81:ed:62:58:a7:28:d8:33:
e0:2a:c6:29:3a:9f:7c:1a:98:86:e7:63:5a:b1:52:2b:84:9b:
f4:10:8d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:23 2025 by rpki-client