Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
File: sDmrgpj6NjroN-UwAolpzFy_EE4.mft (raw, json)
Hash identifier: /lppmBzt+IN8MIgRIIXk8AGr/B3977rOxt8y0hI9Yyg=
Subject key identifier: 21:40:C6:C5:61:25:CC:97:0D:53:CD:99:B9:92:3F:0E:F4:7C:76:52
Authority key identifier: B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
Certificate issuer: /CN=b039ab8298fa363ae837e530028969cc5cbf104e
Certificate serial: 0197C838CC4145D6DD8488535AAF66BB57F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
Manifest number: 041D
Signing time: Tue 01 Jul 2025 23:00:54 +0000
Manifest this update: Tue 01 Jul 2025 23:00:54 +0000
Manifest next update: Wed 02 Jul 2025 23:00:54 +0000
Files and hashes: 1: cofMrZUGj5NsQp1oLa40MN7rEkw.roa (hash: wmR8/1eMWv5ki7+/+pR2G+FNUzCKSL6K5OVlD8TTm08=)
2: sDmrgpj6NjroN-UwAolpzFy_EE4.crl (hash: ESKDRSNhWgMb9Ebr8dz7LfoMS6f8nI44z0JhUR0po10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:38:cc:41:45:d6:dd:84:88:53:5a:af:66:bb:57:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b039ab8298fa363ae837e530028969cc5cbf104e
Validity
Not Before: Jul 1 23:00:54 2025 GMT
Not After : Jul 2 23:00:54 2025 GMT
Subject: CN=2140c6c56125cc970d53cd99b9923f0ef47c7652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:a1:a9:a5:b1:53:dc:81:85:32:06:fd:42:
3a:7c:16:3c:4c:6e:67:8d:48:47:83:5e:93:56:12:
73:4f:38:70:0d:d2:f8:d8:aa:2a:85:24:14:b3:b7:
c1:36:b8:27:4a:ab:19:8d:19:68:ad:ef:84:0e:3b:
e7:cc:14:f0:57:a5:1c:e0:a6:9f:b9:12:a6:ca:e5:
39:24:66:72:e5:b8:d8:97:db:07:7c:47:a0:15:46:
2a:b5:b5:5c:4a:a2:01:27:6b:cd:4a:f3:89:77:ff:
48:d1:66:d6:a5:d6:88:8d:61:06:9d:30:73:56:c7:
56:9d:ba:18:31:4f:55:eb:07:3d:fe:a7:10:16:d8:
c1:4c:77:8c:23:2e:06:fd:ca:5c:a9:e1:56:22:76:
db:ec:16:bd:33:6f:05:06:5b:39:78:ec:d4:14:be:
60:12:12:45:ec:d7:b8:b4:33:fb:dd:c5:b6:b7:c1:
2b:ed:3b:1b:29:26:85:df:48:07:81:8e:0e:81:ee:
ae:cd:98:df:62:ed:cf:ea:97:72:51:e4:ac:92:ff:
c3:81:19:c2:4a:53:ce:a5:22:de:f5:b8:c6:3e:db:
4f:17:ef:68:5e:50:c9:b7:ae:68:71:27:ea:95:7a:
44:5c:cf:bb:77:47:f7:99:af:b5:bd:d8:11:eb:e2:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:40:C6:C5:61:25:CC:97:0D:53:CD:99:B9:92:3F:0E:F4:7C:76:52
X509v3 Authority Key Identifier:
keyid:B0:39:AB:82:98:FA:36:3A:E8:37:E5:30:02:89:69:CC:5C:BF:10:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDmrgpj6NjroN-UwAolpzFy_EE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5fd72f-ef77-4537-89e9-9fbd963a513c/1/sDmrgpj6NjroN-UwAolpzFy_EE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:39:28:26:3f:59:c9:5d:17:2e:34:34:f9:f4:14:07:c7:6c:
85:a9:d3:f5:5c:7f:f5:5b:d9:ff:6b:da:f6:ae:a0:d3:45:3c:
b3:35:57:04:1e:54:a2:a5:d8:74:78:5a:42:98:84:0e:3a:47:
6a:3a:0d:a6:f3:23:b9:c0:26:32:18:08:15:90:fe:85:06:95:
ab:b8:4f:90:ff:45:3b:f3:cc:50:91:62:c9:cd:7e:c1:6a:5c:
24:55:68:d0:06:cb:4e:bd:d8:3c:f1:75:d4:31:0a:95:f7:8f:
07:8d:8e:ad:87:4d:5a:7c:c0:eb:bf:e8:81:95:ab:d9:c2:b8:
11:1f:6b:7f:2f:3a:9a:0a:af:b4:26:2c:df:10:d0:05:89:ab:
d5:65:1a:55:84:26:ef:7a:d9:ba:13:87:e6:78:8a:2f:20:ca:
b0:09:99:ef:a7:ae:39:12:10:13:be:36:e1:6d:ca:78:5f:c2:
a5:dd:27:30:11:81:29:13:6a:da:b3:84:f1:de:67:90:5b:7a:
99:1b:e6:b2:0e:d2:2c:48:e2:9c:2f:4d:93:4a:a4:29:27:37:
9c:47:33:b8:c0:48:b4:b8:99:8b:87:65:67:ec:e2:c6:ad:cd:
42:93:3f:51:d7:a1:ec:d8:cf:53:84:ae:e3:6a:dd:7b:c9:65:
b0:7a:1c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:37:03 2025 by rpki-client