Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
File: SFNVcGg2xtB8f9JdW1nbC22JT7U.mft (raw, json)
Hash identifier: nzuzNH543WU+w9sHb4qvOU/1KduP7cb0SpvCPOhrCng=
Subject key identifier: AE:05:7A:6A:AD:37:36:6C:9A:20:BD:A7:0A:37:4A:36:6C:F2:55:45
Authority key identifier: 48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
Certificate issuer: /CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Certificate serial: 0197B7EAB62A19EF1DFC56C07DF230EFDFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
Manifest number: 0950
Signing time: Sat 28 Jun 2025 19:01:41 +0000
Manifest this update: Sat 28 Jun 2025 19:01:41 +0000
Manifest next update: Sun 29 Jun 2025 19:01:41 +0000
Files and hashes: 1: SFNVcGg2xtB8f9JdW1nbC22JT7U.crl (hash: 2VlUM4qUPKEn2tJ3OouRtMgsnFJKBZFEcelSYT+GYY4=)
2: xMvpgjkxKbx_nJXqKUz8HP8cBlY.roa (hash: xpvtl/jAMstPAGZTh7RwpFcbxDqkgPOXgahD3aZqXp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b6:2a:19:ef:1d:fc:56:c0:7d:f2:30:ef:df:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485355706836c6d07c7fd25d5b59db0b6d894fb5
Validity
Not Before: Jun 28 19:01:41 2025 GMT
Not After : Jun 29 19:01:41 2025 GMT
Subject: CN=ae057a6aad37366c9a20bda70a374a366cf25545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:e3:9c:fd:65:65:6f:61:f8:04:b3:be:6f:
67:c4:04:8f:a8:2a:23:01:75:ad:e8:07:70:15:ae:
e0:2d:1c:38:c7:f2:74:a6:53:b9:12:43:16:4a:ca:
a5:ff:8c:2f:47:bc:e4:ec:db:f8:eb:6b:c8:2c:1d:
9d:0d:f6:73:7e:a3:61:83:87:38:13:b5:d2:e2:87:
c3:8c:07:a3:de:fd:22:1a:51:08:8b:34:cc:93:80:
d3:b1:2c:55:8b:82:ef:6d:3f:c3:bf:2f:a6:9b:66:
60:eb:5a:c1:d1:aa:4e:00:06:ff:57:c4:77:80:5a:
23:97:ed:c8:c3:00:e5:98:62:44:d0:a0:80:c1:a4:
7f:fa:c0:11:ec:cb:67:de:e6:39:ad:7b:7e:82:21:
61:8f:34:2a:d5:fe:c2:e0:dd:15:51:1e:81:c8:c1:
27:b5:cd:6a:2e:c9:79:53:34:7d:7f:c4:2a:86:19:
9c:bd:53:e3:90:71:64:23:00:f3:35:7c:a8:b2:93:
a5:54:da:7c:f7:12:0a:77:c7:c0:e7:1b:b1:5e:e3:
5a:4d:89:73:01:1e:cb:ad:20:cd:59:02:d9:5a:85:
ec:bb:d5:ac:02:82:8a:43:75:e0:f4:c8:7e:58:77:
91:c2:6d:d2:9b:cf:6c:ed:41:e4:a1:e6:de:46:15:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:05:7A:6A:AD:37:36:6C:9A:20:BD:A7:0A:37:4A:36:6C:F2:55:45
X509v3 Authority Key Identifier:
keyid:48:53:55:70:68:36:C6:D0:7C:7F:D2:5D:5B:59:DB:0B:6D:89:4F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFNVcGg2xtB8f9JdW1nbC22JT7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/00ec37-3841-4f64-a1bd-dd9dd763339d/1/SFNVcGg2xtB8f9JdW1nbC22JT7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8d:56:94:e4:b4:c9:e5:8c:4e:63:0c:b4:4c:d3:c3:08:d8:
b6:8f:fd:ff:37:0f:c0:bc:92:81:e4:9c:5f:e5:0d:e6:05:90:
e6:d0:e0:8b:27:32:32:af:b3:f9:d4:f9:72:f1:cc:09:7a:33:
ff:23:e0:06:0a:ac:c3:62:4c:47:39:d8:ad:93:8d:e5:9e:37:
a3:76:41:97:30:69:89:e8:da:89:88:d6:ab:12:2c:36:e7:7f:
d4:fc:58:2c:91:39:b9:5f:ab:83:b8:07:25:86:03:b1:96:73:
8c:fb:c8:1f:5d:66:ff:f3:15:a4:70:32:9d:bd:54:b7:d9:54:
01:22:68:cc:66:ec:56:92:be:65:24:67:6c:80:de:f7:77:3a:
89:8d:cf:db:77:94:ca:b2:c6:28:e2:df:c3:12:93:3f:ce:32:
ad:1b:3a:74:d0:b7:e1:b4:fe:84:0b:93:7c:cf:2c:8f:9c:b2:
ad:d5:c8:26:6f:49:fd:4d:0d:34:a8:e8:9b:c5:23:f2:2f:49:
82:9a:66:f3:d3:7f:2b:56:39:6a:41:b1:03:de:51:b1:05:52:
69:62:63:11:55:6b:37:39:fa:94:d3:d9:21:9b:1e:f6:09:91:
ba:f2:79:8f:74:fc:a4:ff:ec:b9:61:f5:2f:82:8f:dd:32:2a:
66:bb:56:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:21 2025 by rpki-client