Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
File: Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft (raw, json)
Hash identifier: m52Zl6fh2bChaFs+zpdrO62qicM9T1cZrP9WhbNsW0Q=
Subject key identifier: 77:22:13:72:4F:3B:CC:55:32:E9:44:C5:D4:F5:24:6E:74:D4:DE:DF
Authority key identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
Certificate issuer: /CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Certificate serial: 0197B5FBCF49CBA26F778453E0519AA24253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
Manifest number: 104A
Signing time: Sat 28 Jun 2025 10:01:08 +0000
Manifest this update: Sat 28 Jun 2025 10:01:08 +0000
Manifest next update: Sun 29 Jun 2025 10:01:08 +0000
Files and hashes: 1: Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl (hash: 1OHn97rLI+57yj9b5NYFBkyNtYzvm/w5rfiuX45o4bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:cf:49:cb:a2:6f:77:84:53:e0:51:9a:a2:42:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Validity
Not Before: Jun 28 10:01:08 2025 GMT
Not After : Jun 29 10:01:08 2025 GMT
Subject: CN=772213724f3bcc5532e944c5d4f5246e74d4dedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:82:32:29:d1:ed:5e:39:20:0c:c6:d1:bd:
5b:02:f5:d6:fc:17:c0:29:e9:69:92:d9:05:d9:96:
90:d0:ae:d9:7f:14:65:1f:9b:d4:41:e0:d8:35:d1:
d5:37:f5:cd:18:ae:61:58:80:10:7d:e2:ff:15:4b:
62:6d:6a:65:86:bf:21:e3:14:da:1e:46:4e:99:07:
98:51:47:a3:a1:fc:42:f7:a3:c0:e5:e7:a0:0c:41:
04:d4:7b:6e:bd:3f:c0:d9:16:de:47:9c:e0:55:bc:
51:36:65:a8:9a:60:12:60:7f:9a:e2:cf:29:f2:28:
ce:1a:31:81:ca:b8:ab:5c:f0:48:86:11:fc:f1:0b:
96:9d:4a:30:45:e4:01:c7:b8:c6:91:63:83:3b:b5:
fc:6e:2f:c7:83:87:5e:50:25:7d:cd:51:d5:5f:24:
09:c3:02:ad:9f:50:a1:d5:2e:c5:14:21:aa:75:e7:
ac:99:e3:c2:20:ee:bf:ad:87:c6:c1:ba:73:a0:e2:
91:83:54:b4:4f:53:58:26:7e:4b:df:6f:17:89:c7:
57:f0:b8:70:04:92:c0:d5:27:a2:72:8d:d5:20:7d:
38:64:b5:f7:27:2f:ef:43:f3:0d:34:21:1b:c8:7b:
ed:ef:76:9f:27:4e:54:98:1a:a8:ff:32:66:86:3b:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:22:13:72:4F:3B:CC:55:32:E9:44:C5:D4:F5:24:6E:74:D4:DE:DF
X509v3 Authority Key Identifier:
keyid:49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cb:5b:92:11:22:21:9d:19:fd:fb:1b:a3:1e:6e:eb:aa:d9:
c1:cb:5e:c9:bb:e7:c0:89:58:26:2c:38:ac:cd:f6:18:9b:c4:
28:08:58:09:44:a4:65:76:ec:4d:bb:dd:6f:88:fe:4a:ff:c9:
59:2f:e2:86:21:29:80:48:bf:a4:29:bc:47:4e:5d:17:5e:5e:
0b:9b:45:8e:3e:2a:a6:f6:f4:76:1c:d5:5f:0a:5e:4c:ac:66:
41:8b:89:ad:10:7a:e4:ba:02:91:2b:66:5f:40:fd:c2:21:5d:
45:43:ff:d2:3e:5c:05:ba:ac:7f:35:60:df:ec:1e:78:e4:79:
71:a3:a8:4c:0d:f8:dc:e3:1b:5f:e6:35:97:ed:be:e6:6f:42:
f2:20:3e:16:86:de:2d:01:08:76:5d:56:8c:d3:98:29:a1:85:
e0:93:3c:70:41:0b:99:c7:90:09:4b:bb:3b:f8:3a:7a:7e:aa:
ff:de:6b:13:18:f7:1f:2b:f4:5b:4c:e7:ac:39:88:d5:ff:da:
80:4e:97:bb:56:20:ad:73:ed:8c:fe:c3:cf:18:22:5f:87:a4:
46:82:b1:b4:5c:a0:33:72:06:94:c7:60:8f:c3:1f:43:9d:0f:
39:43:9e:10:40:46:07:1b:82:c7:a7:23:07:2e:09:24:99:6d:
2d:0a:8e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:50 2025 by rpki-client