Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
File: sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json)
Hash identifier: gZeiWVOoBtKFlrcmLU5f7OVUmHUUj8knjVEvUdNe814=
Subject key identifier: 63:A5:61:CA:54:F6:B9:6E:1E:EE:EB:56:DD:03:D2:DA:AD:E3:31:43
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Certificate issuer: /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial: 0197CDCD3DC9993B57E00567C8C6344141FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
Manifest number: 141D
Signing time: Thu 03 Jul 2025 01:01:09 +0000
Manifest this update: Thu 03 Jul 2025 01:01:09 +0000
Manifest next update: Fri 04 Jul 2025 01:01:09 +0000
Files and hashes: 1: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: Q/qQJswfZaXRlNEVB1KoJRlpNQIbFonFR8CW9Zv9tmI=)
2: tUy7VKDDVboY2Qo-sNWljYmxPOI.roa (hash: nOufD9VcAARAPXFJN7YbCFA3vo77wDsfl0JVajaSTdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:3d:c9:99:3b:57:e0:05:67:c8:c6:34:41:41:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Validity
Not Before: Jul 3 01:01:09 2025 GMT
Not After : Jul 4 01:01:09 2025 GMT
Subject: CN=63a561ca54f6b96e1eeeeb56dd03d2daade33143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:e0:a8:e6:9c:5f:bc:70:a7:d4:5a:ce:c5:
a7:58:65:29:1b:c6:bd:8e:c3:1d:02:72:b3:b3:58:
c8:a3:44:67:a8:54:ca:ef:5d:8b:79:d3:04:8a:d8:
21:35:28:29:b3:96:6c:50:45:28:95:a1:36:c7:17:
0a:9a:d3:96:26:34:4c:70:a3:c6:16:f9:59:8d:a1:
a1:cc:ee:5d:ee:9e:4d:29:bb:58:6d:b1:74:79:98:
30:c3:c0:16:87:af:92:a9:5b:f8:96:fe:d5:88:fc:
fb:65:8f:45:36:1c:32:41:8f:38:08:41:dd:e1:7a:
bb:7f:f5:24:47:2d:0b:ca:9e:8e:60:de:a7:02:91:
b8:31:72:36:c0:09:f6:44:00:63:57:bc:49:51:75:
70:90:67:b0:e7:e7:3b:7b:25:c6:07:e6:19:32:76:
90:19:dd:de:d6:4a:ff:2a:3b:21:50:8e:79:5a:80:
89:46:6a:0d:67:6c:45:f3:40:21:8f:2a:e8:a1:4d:
4d:88:e1:af:c5:17:2e:08:bf:af:3b:59:9e:a0:c7:
df:f4:7f:4d:09:94:7f:55:fa:f3:1f:9d:05:ab:1e:
43:e7:1b:9d:4f:1c:10:91:d2:94:a4:06:ba:cb:77:
08:e4:a3:0f:be:6f:00:89:3e:12:31:4a:da:42:5a:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A5:61:CA:54:F6:B9:6E:1E:EE:EB:56:DD:03:D2:DA:AD:E3:31:43
X509v3 Authority Key Identifier:
keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e9:9e:f8:b2:8b:9e:93:1e:03:ad:e3:06:48:7d:43:98:85:
84:ed:93:f3:76:9d:1f:2e:9a:76:29:49:e5:51:02:3e:6f:10:
ff:30:d8:66:89:f7:b4:79:5a:6a:09:b8:a0:8a:e6:c6:85:14:
b5:bd:86:c1:17:3d:5e:0b:f9:e5:1b:2b:cf:e3:77:28:bb:39:
55:b9:34:6a:c6:b0:20:c0:9d:72:03:44:01:1b:7d:56:77:80:
fc:2c:c9:91:fd:15:9e:13:10:9b:14:7d:63:22:34:f8:28:66:
f3:81:78:d4:77:32:04:b5:5e:a5:48:e7:5e:06:18:a7:e1:b6:
4a:61:84:86:f7:92:52:1c:2e:92:51:35:cb:76:2a:0c:a8:8b:
52:00:d4:9e:df:b7:8e:eb:6f:ca:46:31:d2:90:af:17:21:dc:
f1:27:0c:e6:48:37:2f:31:d2:60:83:98:b3:a8:a4:a3:3b:56:
d8:34:f4:e8:55:e2:27:40:c2:d0:3a:e2:35:58:00:16:09:0d:
c1:6a:c7:e1:8b:e6:d8:33:52:cc:50:b4:a6:3c:82:9d:74:aa:
ec:08:e2:3f:5e:62:28:ab:6a:16:97:b2:08:c4:90:de:b2:06:
10:ea:59:81:69:de:ac:b9:97:ed:a7:18:b6:93:c6:e0:e3:a8:
c4:a6:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:11:22 2025 by rpki-client