Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: GcnvwvdK/6P69EQsnMkNcb08EDp9CJBFjUBhVMxjx20=
Subject key identifier: C1:99:8A:FB:0B:50:5F:B4:42:E0:1A:25:CE:19:BA:55:45:CF:80:1A
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 0197B7458A467A30602D493F71DEE19C3E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 055E
Signing time: Sat 28 Jun 2025 16:01:17 +0000
Manifest this update: Sat 28 Jun 2025 16:01:17 +0000
Manifest next update: Sun 29 Jun 2025 16:01:17 +0000
Files and hashes: 1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: aSHkSM/CiTJKRoyAI7Bhdf7Xo6moHCwSlRnKMptW0NY=)
2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:8a:46:7a:30:60:2d:49:3f:71:de:e1:9c:3e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Jun 28 16:01:17 2025 GMT
Not After : Jun 29 16:01:17 2025 GMT
Subject: CN=c1998afb0b505fb442e01a25ce19ba5545cf801a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:09:29:17:b4:ca:9c:11:19:9a:fb:39:ec:
06:80:1c:cd:eb:d9:0d:ac:87:34:27:e7:dc:bd:6f:
66:cb:92:8d:46:67:07:e4:a3:13:3f:47:aa:ba:57:
1e:f6:9d:ed:29:4d:95:a4:a1:90:f2:b8:25:4d:c0:
24:4d:fa:35:91:c4:f4:7f:84:27:d2:eb:4d:9d:62:
7f:45:67:db:92:f0:81:e3:f1:85:2b:03:ac:3c:fa:
69:ba:61:19:1f:e5:0f:64:15:4f:eb:3c:a1:e4:80:
87:a1:4a:8c:9f:e4:81:fe:1b:f0:34:80:93:80:d3:
17:82:f9:18:55:9d:e5:45:6c:88:24:bb:1c:9f:2c:
62:28:b5:0f:fc:50:ab:2c:45:91:69:81:5f:bb:15:
37:c2:e5:20:fc:42:4a:ce:41:94:be:ed:6d:e3:95:
14:dd:64:2e:00:52:e8:be:ac:af:64:fa:e8:a0:db:
46:ca:8b:75:59:4c:21:99:04:a6:87:bd:c2:1a:02:
ed:c3:dd:c0:16:9d:59:fa:ec:5f:11:af:7c:67:bc:
f0:b9:32:78:55:2b:91:d6:ee:27:4e:ec:9d:2e:15:
65:a2:08:91:10:d4:18:64:08:e8:5b:f1:51:84:dd:
41:4e:c8:31:31:bb:9c:de:33:52:f2:72:52:2f:c2:
39:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:8A:FB:0B:50:5F:B4:42:E0:1A:25:CE:19:BA:55:45:CF:80:1A
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:52:5a:89:e9:90:57:f5:3d:28:54:99:f9:01:01:85:89:41:
54:fb:33:b0:34:92:60:11:66:6d:12:aa:2e:c7:0e:a2:69:3d:
ab:20:0d:9e:49:0d:31:59:30:6f:04:93:ec:dd:80:ba:69:12:
cf:09:c5:da:e1:54:11:ce:c3:c5:07:8b:7f:71:fa:fc:00:ba:
ae:14:91:58:0a:3f:4f:aa:d7:56:5f:ac:60:d1:a4:50:61:5a:
b0:85:15:37:27:cb:01:6d:50:8b:2a:ae:63:aa:f1:1a:e2:ca:
0d:34:f7:cb:6d:f3:67:58:90:9f:fa:17:02:9e:cd:50:51:47:
63:ab:78:11:1b:79:8e:29:00:22:34:c3:cf:15:e6:9d:72:e5:
37:87:14:4e:5b:99:70:ba:c8:c5:4d:47:40:b6:be:8b:b5:0b:
20:ea:e7:ea:82:9a:5e:67:f4:a8:58:47:63:19:6d:64:2c:5f:
6c:9d:03:7d:86:52:9d:a4:c8:13:41:b9:88:c0:5e:3f:97:bc:
cf:2f:c7:69:8c:c9:e8:d4:5d:ec:b8:92:61:ed:cc:89:d0:a9:
a1:99:64:c0:46:c0:71:99:4b:e1:f4:52:73:36:59:65:05:5a:
d7:ae:2b:1c:46:7a:c5:12:5f:13:69:cf:b2:f7:ac:ac:2a:f1:
46:97:a6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:15 2025 by rpki-client