Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
File: sV49wOv7EOu5QZdFRzLveGrHW3A.mft (raw, json)
Hash identifier: 5Q2BQIsRcA8vCft6YxNA99mrTpkRMiwa61mWTdrko1s=
Subject key identifier: 61:1C:E1:45:AC:BF:C7:9A:D1:FD:2B:BA:EB:B6:F9:49:6C:98:5A:C7
Authority key identifier: B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
Certificate issuer: /CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Certificate serial: 0197B6D76606815B67CF4FA4CA3CE09DF6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
Manifest number: 0A70
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: sV49wOv7EOu5QZdFRzLveGrHW3A.crl (hash: yY9N4W3GLAwBA0j50NXZYIHSy/6zkeV0gDkUl/fndKI=)
2: xqJHtB7Nv0rU8nAxtjI4F8Ssziw.roa (hash: xXaHko57KcXgGPz0/l3ONXw7AGqXwRHBoA+nggaHNQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:66:06:81:5b:67:cf:4f:a4:ca:3c:e0:9d:f6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b15e3dc0ebfb10ebb94197454732ef786ac75b70
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=611ce145acbfc79ad1fd2bbaebb6f9496c985ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:be:4b:08:37:44:19:6b:11:a5:56:28:5b:
f6:e4:13:e9:5f:63:75:3d:55:bb:d2:4a:94:05:30:
c1:43:4c:5e:ce:91:98:34:8e:f4:35:24:94:65:28:
67:c7:5b:02:e3:28:ae:cc:5c:13:93:67:ee:8b:e3:
6f:ff:e8:b5:d5:6a:b8:45:0c:74:a8:d5:71:8c:19:
69:e7:ca:ec:f6:84:62:53:74:88:cd:ae:55:4e:31:
c2:8c:c5:4d:f6:3a:1e:b9:e8:87:68:ac:57:f3:05:
bb:c0:58:f9:57:ba:ec:a4:1d:5a:17:9d:ec:c9:31:
ea:da:af:64:8c:81:2b:c0:10:df:ad:0b:c0:d4:6d:
c7:10:dc:73:0a:78:33:06:92:50:2d:74:e6:e9:0e:
c4:c9:3d:65:e9:8f:e9:21:9d:38:e3:fd:f2:8b:0d:
73:1e:73:38:af:a9:7b:e4:3b:52:0b:1d:e5:f5:0a:
05:41:b3:a6:92:03:76:2b:e4:62:b5:54:b4:2f:45:
3c:65:7d:fb:b3:1c:4e:a0:a5:63:30:67:43:bb:22:
0d:eb:65:25:7d:34:e4:ab:b7:59:b6:64:53:3c:46:
95:66:6f:e4:ed:f1:19:20:ba:16:6a:7a:28:ee:f2:
46:f9:26:41:21:8f:de:64:22:53:6d:78:d1:42:78:
d2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1C:E1:45:AC:BF:C7:9A:D1:FD:2B:BA:EB:B6:F9:49:6C:98:5A:C7
X509v3 Authority Key Identifier:
keyid:B1:5E:3D:C0:EB:FB:10:EB:B9:41:97:45:47:32:EF:78:6A:C7:5B:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sV49wOv7EOu5QZdFRzLveGrHW3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4adc3b-3bd3-4547-8006-1d007be9cdd8/1/sV49wOv7EOu5QZdFRzLveGrHW3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f5:10:13:ef:67:eb:80:bc:46:55:53:f1:d4:37:a3:84:e8:
ba:44:3b:3d:16:8f:37:d8:a4:a2:39:63:be:c1:61:55:15:49:
3d:6e:ea:1b:52:ff:c8:25:05:75:6e:5c:5e:c4:79:28:b9:ac:
f3:40:e9:96:e7:3f:1f:70:9a:4e:9c:3d:ea:8f:80:7c:4d:59:
57:e3:76:16:29:48:ae:3d:00:04:e0:2a:f5:33:38:22:ee:4f:
b5:28:0e:21:b2:da:c6:01:54:d8:3d:85:a3:31:86:72:58:74:
f9:4e:59:bb:d7:84:f7:ee:64:1f:51:5b:9c:21:0a:aa:17:82:
32:0a:15:fb:9f:7a:c0:60:b4:6a:ca:e9:df:55:59:34:8f:0e:
1f:db:f1:1f:e5:49:28:f2:a3:38:fb:06:1e:c3:0e:24:c5:46:
d5:a0:3e:29:c9:78:ff:15:7a:2f:6c:6e:8e:43:42:38:b4:08:
f9:c5:05:e0:0d:2d:e9:a4:3b:b7:75:4f:33:65:4e:e3:3c:39:
cf:c6:dd:86:0b:eb:9b:63:30:78:c4:79:75:45:21:c2:f6:72:
54:78:de:fd:d2:6b:79:0d:19:bd:39:a5:eb:0c:a7:19:eb:13:
13:dc:77:09:67:f0:be:22:b3:6c:42:6d:00:55:8d:19:e2:47:
0f:be:8b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:05 2025 by rpki-client