Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: 3q+t8ure3ThnKGIb8CXHtm8Iu5tr4EAX7tLm4/WnnqE=
Subject key identifier: ED:EA:DA:22:95:E0:C6:15:E9:CB:7A:BF:9D:01:4F:C4:8A:31:F9:98
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 0197B70F021FA0DF895DFB6837C93E262F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 0D28
Signing time: Sat 28 Jun 2025 15:01:43 +0000
Manifest this update: Sat 28 Jun 2025 15:01:43 +0000
Manifest next update: Sun 29 Jun 2025 15:01:43 +0000
Files and hashes: 1: 4EkSsDmoQioZqy5Nx3ZgwgNVKek.roa (hash: VGhbj0GwVploD/uygEp/n7MuApEtZ3hQmaUGbybY4XI=)
2: LXrqqPRInqT0YQQrkSiScVOv68s.roa (hash: RhWWbbeT6YQP2eTW6sSumZ2mUd9atkadmzcbsktp9d0=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: zeIgY7WxVEsJeoEcTQdJywj5ezbqbVX5TyLOsEYv2ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:02:1f:a0:df:89:5d:fb:68:37:c9:3e:26:2f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Jun 28 15:01:43 2025 GMT
Not After : Jun 29 15:01:43 2025 GMT
Subject: CN=edeada2295e0c615e9cb7abf9d014fc48a31f998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:e7:aa:a6:44:1f:bd:cb:0c:79:07:4d:30:
a5:0f:ba:94:b6:69:9e:5a:53:5c:04:54:b4:5c:4f:
72:5b:81:24:1c:76:43:58:dc:2a:25:04:7b:2f:70:
d7:c6:3d:c6:0b:d2:a4:48:db:58:98:22:23:85:b3:
32:ce:aa:78:a6:67:eb:81:9c:e0:23:70:28:b6:ef:
79:49:fb:d5:79:a5:9f:df:4d:c7:41:89:bd:c9:94:
64:a6:d3:2d:d6:61:75:bc:b1:11:c5:21:3b:73:54:
c1:22:e0:00:ad:da:2b:cc:70:6b:78:87:97:b2:31:
86:40:cf:95:8c:23:c8:4f:12:21:b8:3b:53:70:de:
b9:93:a1:4d:b7:9a:01:86:9b:aa:1f:bb:db:3c:e5:
5d:3c:88:10:2f:af:3a:31:c8:f6:3f:27:ba:99:aa:
eb:f4:63:06:2d:87:94:6e:ca:96:45:5b:db:b1:66:
05:cd:7b:72:1d:3e:ef:f1:26:24:a0:8b:c7:80:f9:
c2:d6:e6:21:f8:f4:e3:76:ce:e4:c7:2b:7d:d9:2d:
7d:2e:01:cd:3f:0a:b1:2f:55:de:ec:ef:42:55:4e:
47:ce:c2:6d:3e:b0:7e:68:6c:75:1b:e2:a7:ae:2c:
8f:cf:c6:8f:e0:4b:88:fe:f3:d4:d5:50:2d:e4:f1:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EA:DA:22:95:E0:C6:15:E9:CB:7A:BF:9D:01:4F:C4:8A:31:F9:98
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:76:66:8c:bd:75:87:01:87:16:69:6f:81:5b:f4:e3:61:7a:
8e:c4:f7:f7:4f:4d:c5:1c:c4:0a:d6:bc:88:55:68:4f:d3:f2:
7d:bc:98:21:5b:f8:9d:7c:52:2b:97:bd:ad:96:1d:26:a0:68:
18:7b:26:b4:8c:7d:dc:1d:22:54:26:4a:04:66:ef:09:77:4e:
b6:22:91:f0:af:3b:fe:2e:f1:da:6c:fa:22:82:d0:cf:bd:61:
de:20:45:f5:85:fa:79:29:64:63:c7:63:da:dd:b9:d4:fd:9b:
ec:9b:25:55:84:bb:83:8c:5a:95:37:01:58:85:f7:fe:b9:9a:
ae:49:43:a7:78:c1:9f:fe:7b:57:d0:2d:89:ff:b5:03:95:35:
9e:d9:b5:f2:70:df:de:b7:e9:2a:b1:db:ca:d2:3c:66:7b:fb:
62:56:02:c1:54:08:f0:d2:22:21:37:18:97:5c:e2:1e:65:41:
7a:d4:52:54:95:ea:0d:73:7c:1a:27:bd:2b:6a:32:6f:51:c8:
3c:46:46:c3:f5:d4:59:22:c5:57:0d:34:87:d2:26:fe:81:ae:
15:ed:eb:bd:d2:93:fc:f5:6c:c9:77:a2:96:2e:0f:6a:c0:b6:
9c:20:ce:84:a3:4e:aa:8f:73:46:fc:cd:75:12:fd:87:6c:74:
35:b1:ef:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:07 2025 by rpki-client