Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
File: SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft (raw, json)
Hash identifier: KLSqmuHk58YoGM2Pgr1++OhAUK35V+uA7p0iWHGW8Z4=
Subject key identifier: 8B:D4:66:A5:3D:D6:76:23:5A:81:3E:80:FD:95:AF:68:EF:5F:72:D3
Authority key identifier: 49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
Certificate issuer: /CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Certificate serial: 0197B77CDDC8FC468C69B788DDED5511C786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
Manifest number: 01D8
Signing time: Sat 28 Jun 2025 17:01:43 +0000
Manifest this update: Sat 28 Jun 2025 17:01:43 +0000
Manifest next update: Sun 29 Jun 2025 17:01:43 +0000
Files and hashes: 1: SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl (hash: hLpoYYxxP4Dm3T0W42G/Oq1YoG/KMmZ6Fpd1+hFELh0=)
2: WxZz3Xq4Dubhk-2v4KkyD3DjymY.roa (hash: TcPVaB9byF2mn4BjYUtIE/4fQoQybO53Dwd3vhK7Z5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:dd:c8:fc:46:8c:69:b7:88:dd:ed:55:11:c7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d01f70cf5f4deed93a8c15e494029e93abed55
Validity
Not Before: Jun 28 17:01:43 2025 GMT
Not After : Jun 29 17:01:43 2025 GMT
Subject: CN=8bd466a53dd676235a813e80fd95af68ef5f72d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:9b:fb:54:5a:0a:c6:02:9b:44:e8:99:ee:
75:66:04:d3:52:c5:dd:04:4f:d4:66:5e:94:a5:47:
c1:fe:8d:64:fc:df:cb:54:a5:35:f8:d2:db:16:ab:
97:b6:09:bc:e1:62:77:89:b7:f9:24:3a:5a:5e:49:
21:dc:14:13:09:2c:60:a7:35:49:38:99:af:4e:7c:
bd:ad:c8:46:da:2a:9b:a7:f0:7a:a4:5f:86:45:f3:
98:f4:4a:be:3e:b4:98:60:5c:3f:c2:b8:a6:d5:08:
a1:ef:ef:5d:8a:d1:72:2f:52:a5:be:ba:e2:37:cf:
0f:b1:ed:13:8e:c7:47:d9:5b:31:7c:59:49:8e:0c:
75:37:a9:99:68:2f:24:19:df:d9:a7:59:02:5e:96:
cc:b5:a7:79:27:89:29:67:fa:d5:1b:1d:31:b0:f6:
7d:ea:e4:74:c4:37:67:3c:6b:76:96:3d:81:f9:6d:
c3:ac:0a:39:cd:50:0b:af:24:b3:9c:04:64:87:8c:
80:90:11:eb:8b:1f:8a:c9:c7:99:ce:23:c4:b3:8f:
df:f4:b0:ee:5f:7d:e2:f1:7b:25:eb:df:4f:fc:6d:
cd:86:a0:dd:b5:44:e4:a9:71:8e:bb:a8:79:fc:7a:
e0:f4:1b:fb:f5:0c:98:b6:a8:8c:b1:84:9f:4a:85:
66:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:66:A5:3D:D6:76:23:5A:81:3E:80:FD:95:AF:68:EF:5F:72:D3
X509v3 Authority Key Identifier:
keyid:49:D0:1F:70:CF:5F:4D:EE:D9:3A:8C:15:E4:94:02:9E:93:AB:ED:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdAfcM9fTe7ZOowV5JQCnpOr7VU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/821572-3445-4910-a15c-f4c166c83f88/1/SdAfcM9fTe7ZOowV5JQCnpOr7VU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a9:fa:24:f6:91:c2:be:9c:7c:94:db:bd:5a:7d:38:70:8e:
e5:0c:49:f6:09:96:2e:65:bc:92:c7:91:b9:0f:c7:c8:c4:3c:
14:b3:32:87:86:2c:e8:02:0a:35:f7:23:7f:8c:e4:d6:1a:ea:
e5:d1:4e:41:c7:42:04:67:80:b0:81:3a:ee:71:ef:dc:da:78:
d9:b5:ae:cb:25:e6:f7:7a:97:1c:8d:b7:3f:3d:89:37:d9:db:
5b:a7:11:78:3f:c9:f2:fd:6a:39:49:74:5b:bd:c3:5c:04:3e:
97:3f:ae:68:b6:cb:fb:fa:bf:b8:f1:73:9d:bc:df:31:71:f8:
69:7e:cc:18:ac:58:77:df:a0:1e:84:f5:40:dd:cd:49:4f:a5:
ed:f7:c3:0e:bf:8d:cf:53:05:ed:3d:97:26:8d:18:93:82:07:
3d:30:92:80:47:e0:be:b5:f8:b8:81:dc:12:f4:48:a7:36:58:
66:4c:92:fb:a1:6a:b7:91:87:fa:7a:63:68:34:3e:11:f8:73:
54:33:b9:89:62:14:1a:4d:27:43:ca:02:ca:d8:e0:76:ce:f1:
8f:90:c2:77:63:9a:24:7e:f1:0d:1e:e9:37:8e:2b:4f:53:6e:
33:e9:46:c6:f8:42:4e:9d:61:54:c7:d5:4f:48:e1:21:64:1a:
7e:7a:32:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:23 2025 by rpki-client