Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
File: Sd2PGmKl1_gCEt4PPv51svozj_4.mft (raw, json)
Hash identifier: 0HDIPAqAIFsHjU24DrDcBZ2DAXx7DARlysBGQ64u2I4=
Subject key identifier: 35:9E:D9:A7:EE:BF:BF:21:96:C6:2C:B5:3E:8F:49:54:6E:A0:66:79
Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Certificate serial: 0197B70E50AC13D9CEFF516B4955AB7C3762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
Manifest number: 0C16
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: 5hJAv1vo3oOPqWjQpBgMDKDCfMU.roa (hash: NHMZ+Lo+WMMXDw4UrqXBzj/Re+R0/j7Wcu84BebYuQw=)
2: Sd2PGmKl1_gCEt4PPv51svozj_4.crl (hash: vxOIEfkbB78fEpDtAylsOcG4u4UdxVxHIVYGz8ghC4M=)
3: exkTmhIrPHXpMpwbJ39TJjbGGQU.roa (hash: O4LImE4gF0VDKL+p9YeHfP2uSXH0M3XtEyfG3rkFcvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:50:ac:13:d9:ce:ff:51:6b:49:55:ab:7c:37:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=359ed9a7eebfbf2196c62cb53e8f49546ea06679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:75:38:12:ff:6c:86:77:1f:c9:8c:86:41:
b0:e1:34:15:45:2b:35:a7:2b:f8:43:9a:1d:6d:f1:
1e:90:4e:31:2d:37:db:d5:1c:01:d1:99:48:a7:b7:
8b:fd:a0:9e:e7:04:44:25:b9:80:42:e6:34:b8:0b:
6b:d2:f3:cc:1f:10:33:a3:c4:69:46:13:da:d1:5a:
c5:23:8c:f8:c1:a3:bd:3e:06:79:56:6b:f8:73:6d:
6a:03:0c:36:7d:32:09:21:a9:db:d7:3e:28:e6:32:
7f:7e:de:4b:af:3c:14:7a:a9:cf:d2:64:d0:28:0b:
4e:b6:a6:8e:11:e9:ce:de:51:19:19:93:d6:79:db:
54:e8:7d:7d:fb:8f:08:13:4a:07:8a:a0:5f:4c:b8:
11:ba:b5:50:38:90:61:ce:27:e2:ce:d8:d3:d7:9a:
86:c9:3a:ff:41:34:53:ad:98:5e:6b:d5:dc:18:d3:
cc:e1:d5:ca:e4:07:d8:9e:be:78:13:35:ac:48:10:
9c:39:be:a7:89:8b:9a:2e:b4:41:48:3c:07:0f:ba:
8b:d3:50:bf:9d:b8:a9:5b:29:78:39:db:25:9c:84:
ff:e2:e6:00:c3:bd:38:8f:2e:b0:95:4d:51:4d:2c:
c4:cd:bb:69:1f:9f:10:70:8c:6e:ec:90:03:bd:4d:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9E:D9:A7:EE:BF:BF:21:96:C6:2C:B5:3E:8F:49:54:6E:A0:66:79
X509v3 Authority Key Identifier:
keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d4:92:4b:b4:43:ce:dc:3e:4a:90:2c:28:dd:04:85:50:94:
92:dc:dc:6e:b0:24:5c:d7:5f:9c:b9:0d:13:f2:26:5a:20:c6:
ff:d7:37:f8:5f:31:21:96:eb:f1:30:24:81:1f:b0:b0:82:bc:
7c:73:82:9a:f5:e1:43:02:fc:33:dd:c3:96:11:a0:d1:d3:70:
c2:f1:a9:03:ab:9c:d8:13:55:89:80:29:36:38:cc:66:ae:ed:
2d:3a:32:9a:18:78:b3:c0:3f:21:d0:b2:b8:36:96:16:99:17:
92:06:af:37:a4:f2:03:c1:d9:94:ef:bc:2e:51:e7:8f:31:e9:
e5:dd:6e:92:ac:0e:8c:f2:8e:2d:76:14:a3:3a:1a:48:49:5d:
b1:7b:20:0d:01:8c:b0:30:86:00:ff:28:e9:f4:c5:58:e7:46:
c2:a9:08:01:43:4f:5b:c6:b8:7b:9c:17:f4:01:38:28:4d:31:
ea:fe:fb:20:b8:e9:95:47:92:21:d7:8b:df:80:3a:fe:d3:08:
27:fb:8e:35:fb:16:c5:0f:eb:1a:ed:4c:e1:09:c1:4b:c8:06:
fd:22:cf:c3:1a:2f:65:1b:10:41:f7:e5:f7:cd:8a:50:cf:26:
69:12:ad:a4:eb:8e:b9:88:99:07:00:ae:99:b8:ff:02:a6:d2:
8b:cd:17:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:50 2025 by rpki-client