Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: wEjAAJMPNQHI1djBHowTRE0NPY7OZVqFcq0/itc+cRg=
Subject key identifier: C8:57:86:5C:F5:BD:22:7E:72:B2:4C:BA:2C:66:A0:D5:5C:0D:5B:EB
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 0197B70F1C12CD224CCF7EC3337722845B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 0E1D
Signing time: Sat 28 Jun 2025 15:01:50 +0000
Manifest this update: Sat 28 Jun 2025 15:01:50 +0000
Manifest next update: Sun 29 Jun 2025 15:01:50 +0000
Files and hashes: 1: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: KQS82mIWFr57Jil7xSxmLMF4q1DUwj8ARixw1ny8zP0=)
2: VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa (hash: kArqpkPgXwbWfVfsCGeziL2LJL/J3oK8UFUA3DsKS6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1c:12:cd:22:4c:cf:7e:c3:33:77:22:84:5b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Jun 28 15:01:50 2025 GMT
Not After : Jun 29 15:01:50 2025 GMT
Subject: CN=c857865cf5bd227e72b24cba2c66a0d55c0d5beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:d9:9f:d1:65:db:f0:bc:fc:53:0a:25:de:
03:01:b2:85:89:cd:c5:ab:c5:72:69:85:a9:03:77:
ec:77:02:8f:c0:53:c3:bf:b0:86:92:38:28:56:66:
83:18:21:08:ec:5c:c5:87:97:71:14:3f:2f:03:ab:
83:8d:86:1e:31:12:e2:cb:7a:b2:a1:4e:52:7e:4e:
61:d1:5f:1a:79:f5:e9:0c:22:19:1f:ac:e3:57:da:
8a:c7:87:dd:2e:13:31:17:ba:da:78:08:da:25:4d:
04:17:dc:f8:3b:08:b3:e2:6b:15:4b:68:0c:b5:a1:
fe:5e:3c:68:13:88:21:ed:83:8b:19:f4:a0:50:4e:
1a:9e:55:4a:14:1a:c4:13:ef:9a:82:c5:17:3d:6a:
0f:fc:24:46:91:d0:06:de:db:d7:44:e6:ac:68:f4:
ec:5c:30:17:23:d9:09:42:3f:f8:8d:ee:8b:85:98:
73:f5:05:99:02:df:c1:e4:85:d7:b7:1c:79:9c:8b:
33:71:bd:df:21:2a:ca:c7:a5:0f:c7:46:26:f2:74:
51:3b:75:e2:54:f4:8d:f7:b5:be:7c:55:23:5d:c7:
5d:9d:cb:b7:bf:90:ea:95:44:8f:1d:e7:aa:cd:50:
d1:8a:2a:a6:7d:e0:0a:76:5d:76:b4:76:6a:73:c8:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:57:86:5C:F5:BD:22:7E:72:B2:4C:BA:2C:66:A0:D5:5C:0D:5B:EB
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:78:05:1a:7b:51:b2:e2:6a:91:18:ec:97:71:64:75:76:44:
f0:3c:88:83:43:a4:8f:16:97:84:cb:ae:a1:67:e0:fb:9b:9c:
5f:d6:d0:93:03:9c:57:4e:e9:b2:cb:73:00:23:24:9c:3f:c3:
59:ff:6c:dd:63:fd:ca:73:7c:a4:4b:3c:80:ae:ff:5b:8c:52:
b1:ed:54:52:8f:bc:0a:03:ab:54:b4:30:c5:e2:a6:2f:d5:ca:
8f:26:6e:e6:ee:70:06:03:60:f0:43:ab:21:8c:2b:db:d6:b4:
db:30:63:3b:3c:c6:f6:fa:36:60:4b:75:c4:b7:09:79:b3:94:
4a:4a:e3:c3:67:a0:93:d5:07:4d:36:e0:a0:a1:72:9f:17:67:
24:5b:b8:5f:bf:5c:89:e9:e2:45:b4:42:89:08:a5:4b:83:74:
86:dc:a5:58:c5:bc:43:4f:5e:ee:43:c1:c0:8a:35:ba:76:fa:
e8:85:b7:cf:ce:bf:b1:21:65:02:3d:20:c0:e2:25:bc:db:ae:
a5:99:29:a4:00:f9:3f:ed:a7:6f:1f:89:88:4a:53:e0:bb:0e:
cc:e0:3f:67:2c:c8:95:96:11:e3:19:e3:3a:bc:63:5c:bf:07:
34:db:14:04:71:19:1c:a4:47:ab:62:32:37:95:6f:9b:49:f6:
d5:5a:7c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:33 2025 by rpki-client