Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
File: SA4-gK7rhMMmEvT60RbiaQpUbHo.mft (raw, json)
Hash identifier: WJFOrQyQSAouhNVFxiqdje4teMCxLcHisPzk4+C/XWo=
Subject key identifier: BC:12:2D:F8:87:06:21:D1:79:7A:E6:9F:77:49:47:B0:DA:C8:09:0A
Authority key identifier: 48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
Certificate issuer: /CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Certificate serial: 0197B7B347FE5146BB766A40B3BAEFEDDFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
Manifest number: 056E
Signing time: Sat 28 Jun 2025 18:01:09 +0000
Manifest this update: Sat 28 Jun 2025 18:01:09 +0000
Manifest next update: Sun 29 Jun 2025 18:01:09 +0000
Files and hashes: 1: SA4-gK7rhMMmEvT60RbiaQpUbHo.crl (hash: QDxWVRBt+puM3InygLVVWS4NGqPnk6rpo61EjCXK4eo=)
2: UgsM9IySNlxMAMu3nxLBQeRmBwM.roa (hash: iWc/Vehzon/VP/j65KvlMpaDrurTE8lXeWv7jdRc8u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:47:fe:51:46:bb:76:6a:40:b3:ba:ef:ed:df:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Validity
Not Before: Jun 28 18:01:09 2025 GMT
Not After : Jun 29 18:01:09 2025 GMT
Subject: CN=bc122df8870621d1797ae69f774947b0dac8090a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:67:29:c3:9f:78:6c:2d:e6:07:8c:48:be:
f2:12:9f:96:4b:96:ff:f4:3b:08:1c:e8:a4:58:02:
bf:c2:24:8d:2b:04:b0:39:79:e3:8c:93:1f:6c:2e:
3e:ee:94:fe:8b:43:f0:6e:ca:ba:e6:f9:2b:f6:bd:
b2:7c:67:01:2e:56:85:8b:5d:c6:ae:0b:16:71:b9:
66:e9:30:01:13:1f:98:17:4b:2c:2d:f6:61:d9:5a:
11:6c:5a:91:15:f4:cd:28:45:8f:c3:72:3c:c1:62:
71:df:3c:22:dd:a8:e5:ec:2b:bb:53:a1:b7:15:0f:
7e:8a:e7:38:97:f0:81:1e:e6:78:15:d8:91:50:d8:
a5:3d:ee:7b:47:a4:57:09:fa:e2:73:cf:89:ac:0e:
d7:7e:83:9b:e1:a5:70:4a:26:1b:7e:98:86:0d:e8:
d2:41:7d:c7:07:e8:d7:7b:77:c4:a0:e8:6b:1c:e1:
55:37:70:17:66:65:76:8d:63:ec:31:7a:79:0a:93:
b9:5e:84:6b:38:3b:bb:62:bd:6c:6b:fc:ba:b7:3e:
f6:fc:32:2e:a8:85:2a:87:3c:43:a3:0b:af:b1:31:
8d:ab:cf:9a:7a:12:77:47:5e:df:61:d4:4b:d2:2b:
b8:6e:9a:06:d6:d5:ce:3e:4d:c7:ac:07:fe:36:09:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:12:2D:F8:87:06:21:D1:79:7A:E6:9F:77:49:47:B0:DA:C8:09:0A
X509v3 Authority Key Identifier:
keyid:48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:30:50:3f:b0:b6:88:0f:24:bb:5b:e2:90:b0:17:11:e7:8b:
f4:93:83:71:96:53:8b:cc:a9:df:54:e1:36:97:1d:10:0e:d7:
0a:e5:f9:68:a7:ef:ea:53:2f:5a:12:4b:f3:6d:32:29:a9:6f:
98:bb:84:f2:69:e9:03:b5:80:5b:5e:8c:ad:34:a0:56:a1:ed:
b7:4f:fe:a0:b5:a4:9b:10:d4:c9:89:d9:a7:56:ea:43:30:00:
84:6b:9f:6c:04:5e:3d:42:a9:d2:ec:cd:27:2d:95:aa:47:ad:
3e:89:91:85:b4:03:00:f8:a6:d5:7a:e8:18:0b:08:83:4a:c0:
45:6f:80:06:50:3c:4d:22:40:71:f4:6c:2a:e6:4e:fe:b0:cb:
36:7f:23:55:d3:d1:be:76:0f:41:53:82:db:e7:ce:4f:a7:9c:
32:b0:6c:97:bc:4e:d2:82:98:2f:0c:97:87:5b:ac:1a:b5:db:
88:81:77:55:9e:c5:80:50:c4:f3:a4:96:57:10:c7:56:d1:90:
53:91:32:7a:3e:27:c2:69:37:31:f7:80:8f:08:df:85:25:61:
80:e4:fb:af:10:84:96:a2:ba:4a:ae:bf:ad:60:99:90:56:aa:
8a:46:d9:eb:08:c2:c6:e7:2f:b4:ec:b5:9b:69:30:67:7d:9c:
a3:c2:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:53 2025 by rpki-client