Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
File: SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft (raw, json)
Hash identifier: 0IMwX0qh3bxV6HrQswI1zzFQIxbZeRz3l3hthmn7cxc=
Subject key identifier: 89:C4:58:74:49:74:32:3F:35:B9:DE:95:16:D0:EE:70:97:7E:21:D0
Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02
Certificate serial: 0197B6A18B1E3353AA42A2D19E3EA395EA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 13:02:09 +0000
Manifest this update: Sat 28 Jun 2025 13:02:09 +0000
Manifest next update: Sun 29 Jun 2025 13:02:09 +0000
Files and hashes: 1: 2TabSpltHUMp_5ejqOpWZde5yuo.roa (hash: 3/hdPalq/aa4mw4O394+y1isU6rPiSjjsa/MhWeedzA=)
2: SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl (hash: 8jB+AN5YbaMsdsNnd2jZrsrESxc+5cSVPpYw68bncFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:8b:1e:33:53:aa:42:a2:d1:9e:3e:a3:95:ea:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02
Validity
Not Before: Jun 28 13:02:09 2025 GMT
Not After : Jun 29 13:02:09 2025 GMT
Subject: CN=89c458744974323f35b9de9516d0ee70977e21d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d7:c4:af:de:09:f3:43:4a:93:69:2f:12:4f:
ad:30:bd:db:03:47:d4:27:0c:ad:68:e1:43:53:ef:
13:86:cd:eb:40:b2:7a:58:19:60:06:de:3d:d1:80:
9b:e6:22:a8:f4:3e:85:85:e4:a2:5a:45:cd:c2:d4:
b4:97:bb:fc:8f:06:a0:9f:74:0f:c1:1b:8f:e4:55:
aa:e2:ac:8f:54:a1:cc:71:14:06:3b:d3:22:26:69:
56:48:65:9f:4c:c4:68:49:18:fb:42:42:65:a6:7f:
5c:2a:6c:67:9e:4e:9a:c9:27:53:b8:2b:4a:9a:c7:
96:7c:24:ff:c9:30:23:dc:a2:d8:9c:c0:6a:01:26:
36:89:ce:93:60:a9:e8:58:97:53:83:64:fa:12:00:
df:0f:f6:ca:58:b9:2a:2c:0b:f0:2e:38:df:70:94:
39:f5:db:22:19:f2:fd:c1:3c:fb:4e:c0:5c:9e:6e:
f7:10:f9:07:64:97:15:30:8d:14:8c:24:38:f3:62:
c2:98:c5:35:bc:d3:e5:df:27:93:69:53:00:27:12:
2d:dd:27:1b:0a:b4:84:06:fe:6e:0f:5b:b4:81:0a:
0f:10:ed:87:86:cb:8d:e8:21:72:27:e5:23:2c:7c:
f0:12:c7:47:9f:26:6b:06:3e:33:39:a6:30:5d:58:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C4:58:74:49:74:32:3F:35:B9:DE:95:16:D0:EE:70:97:7E:21:D0
X509v3 Authority Key Identifier:
keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6e:26:68:eb:82:54:d5:60:76:2b:48:c4:c7:e1:63:9f:a8:
40:ca:b2:aa:4a:76:46:11:b5:2e:be:47:1d:d6:22:c1:80:c3:
6a:27:8f:a5:d3:fb:ba:c9:30:a6:d9:53:9d:51:65:a9:1c:fa:
2a:05:07:44:90:3e:1d:b1:97:b3:6d:77:1c:45:cb:66:33:d3:
0b:29:49:78:9a:88:85:b1:f5:52:5f:35:25:e0:14:a8:de:e6:
3e:06:36:35:7c:1f:94:77:66:48:ec:57:74:32:d6:32:51:2d:
43:3e:43:b3:9b:1d:bf:a7:00:79:a5:36:ca:6a:8f:63:86:77:
a7:6b:c8:a1:57:da:d8:34:8a:9a:9f:06:a7:f3:29:25:75:ab:
4b:37:94:d3:1d:3d:61:0d:0a:c5:36:39:cc:1d:7d:f0:e5:dd:
21:ec:59:b7:fb:e6:74:0c:7b:e0:7b:0e:11:3a:13:38:01:90:
cb:1a:25:aa:d0:1a:30:10:79:ab:ba:6c:56:cd:35:e1:6a:e5:
c1:ae:91:a3:7e:29:f9:67:05:40:52:9d:3f:ae:33:0a:c8:3d:
cd:f8:f5:c1:95:45:0c:a6:ff:66:59:eb:66:de:8e:be:82:97:
56:3d:03:fa:79:ba:f8:60:99:dd:ea:71:a8:0f:ca:1f:76:25:
95:15:04:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:20:03 2025 by rpki-client