Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier: U5MF7Ydjz3WtKJ2uY3Tp5PyJBAbwvU3+VCMXRga65XU=
Subject key identifier: D0:20:28:AF:83:85:51:5F:88:37:4A:8E:29:02:84:5F:20:2E:79:21
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 0197B9340F0D2EAC4C43F9C7943C3511E3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 01:01:25 +0000
Manifest this update: Sun 29 Jun 2025 01:01:25 +0000
Manifest next update: Mon 30 Jun 2025 01:01:25 +0000
Files and hashes: 1: NxzgzrcAsHWy0jDkGocEc3A82GY.roa (hash: 49MMg/vk9brRgJNoRcoYkHau0scqC/ahxGjMTh7J3YU=)
2: mPhBEESpSSmoxdu-n5OAjI6sC_I.roa (hash: 6Dj5yn1/ctkVobyO+cPsteiP8qKS3BhAZ1jJUQtNU9w=)
3: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: q/WySx0zplgpNoNyFpVnn9dc0ZHqfKDJiC5jMnT1GIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:0f:0d:2e:ac:4c:43:f9:c7:94:3c:35:11:e3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Jun 29 01:01:25 2025 GMT
Not After : Jun 30 01:01:25 2025 GMT
Subject: CN=d02028af8385515f88374a8e2902845f202e7921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:0e:c4:56:c2:7a:f7:f9:fe:31:0c:1e:f1:64:
8c:19:26:ff:0e:4b:63:f8:40:c8:eb:db:29:08:4e:
e4:20:b7:22:c3:4d:a2:f5:2a:3b:e6:e2:72:b3:78:
76:b5:72:73:0b:0e:0a:7a:29:af:57:9c:ac:0f:5d:
9d:58:ed:92:52:77:20:49:5c:2a:33:e0:a9:18:dc:
52:9a:6c:fe:1c:71:9d:34:b2:3d:68:20:24:20:0b:
71:6e:47:d8:d4:3e:e7:2c:bb:7f:63:54:1c:c3:14:
31:0d:00:48:06:85:8d:82:31:82:12:6e:3d:0a:96:
7c:ef:fb:8d:02:bf:69:9c:d5:65:da:be:20:93:ba:
a0:e1:4f:51:56:17:e4:ae:4b:f9:8d:1b:87:e6:a1:
ff:f3:50:7f:02:3b:fc:2f:f1:6b:54:90:8e:2d:7c:
54:23:32:7a:44:6c:ae:51:e8:a5:16:cd:c9:44:75:
f5:32:c3:bd:48:d9:3c:01:06:e1:3a:e5:e3:1d:d8:
ab:a9:04:a2:ef:82:fa:15:3c:a5:aa:dc:6a:ea:cb:
9a:fb:f3:1e:5d:c1:c4:0b:41:18:38:cd:a4:5d:b5:
7a:a2:44:1c:35:1a:3d:63:6c:1a:aa:56:bb:39:2d:
56:6a:f5:b7:38:ec:a3:cb:9c:6a:7c:6a:d7:4c:ad:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:20:28:AF:83:85:51:5F:88:37:4A:8E:29:02:84:5F:20:2E:79:21
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:af:55:22:f8:cb:5e:b6:fe:23:95:d5:0b:63:b4:fc:9a:eb:
87:31:14:6b:8a:1f:e5:b7:28:c6:13:cf:d5:8d:3d:1f:00:78:
1d:65:70:51:50:6f:4b:f5:9f:dd:4e:5e:6f:3d:c0:1a:49:fd:
71:6a:45:85:d6:dc:ff:a7:09:cd:4e:b4:65:db:6e:ea:ef:5a:
8a:3a:3f:e1:f2:8e:9e:ad:d2:4c:6a:48:59:1a:62:b2:22:34:
f2:38:cc:22:f3:17:5d:22:6e:ae:13:bd:d2:e0:f1:65:a2:c8:
81:19:5f:0f:68:c9:c6:8a:f8:2f:c0:33:57:ef:df:a1:17:85:
21:10:57:e4:cc:11:27:cc:2e:ae:a8:30:d9:9b:81:26:b4:d7:
31:ce:a3:15:00:c8:73:34:cc:da:d0:12:4c:3d:7c:f4:15:0c:
2a:55:23:46:9e:ec:db:e6:78:ba:fb:bf:7c:2a:9e:b9:9d:d8:
59:5b:a0:10:cb:99:1e:62:12:dc:c7:b8:f2:59:ab:94:a2:0c:
5c:9f:32:a0:04:c3:d0:2e:c1:12:a2:f2:05:ae:68:65:d6:dc:
b9:67:8f:dd:16:5a:4b:56:7b:d9:30:23:e4:14:08:df:8f:22:
e3:c0:40:a5:dc:d7:70:3a:1d:47:23:f3:9e:b2:ff:55:d9:02:
2f:dc:38:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:20 2025 by rpki-client