Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
File: sKVpmgjHv9cHz7BtMhP1ysvyglc.mft (raw, json)
Hash identifier: YKgcaX1n/ES2ZIxJIzESudXC4ATG8ZzpWzIwbAMdOSk=
Subject key identifier: E1:E2:A0:D4:AE:BA:BC:13:8F:42:CB:66:08:30:3F:67:5F:E3:6D:2B
Authority key identifier: B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
Certificate issuer: /CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Certificate serial: 0197D850CDDF5C107ADA8529579298C7431C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
Manifest number: 05F5
Signing time: Sat 05 Jul 2025 02:01:03 +0000
Manifest this update: Sat 05 Jul 2025 02:01:03 +0000
Manifest next update: Sun 06 Jul 2025 02:01:03 +0000
Files and hashes: 1: 0Z-sHAnSl4bp7AfPwuyFGmDsZbs.roa (hash: Qd7UsFgJxINuR8Lxz3kq3vgAmJnbsTZmvzg3tBE1gSg=)
2: PLGff91PpnIaKhW2uDOuQAHfxZI.roa (hash: tVtdUbnR9K0LDd3rO9R8lG1IenCOkCUAxrqcCPMKhz8=)
3: sKVpmgjHv9cHz7BtMhP1ysvyglc.crl (hash: Xoqt9VWzGPk0Kw5uPM1X/8vMnKJ5BsPHlvAxAHxqU0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:50:cd:df:5c:10:7a:da:85:29:57:92:98:c7:43:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0a5699a08c7bfd707cfb06d3213f5cacbf28257
Validity
Not Before: Jul 5 02:01:03 2025 GMT
Not After : Jul 6 02:01:03 2025 GMT
Subject: CN=e1e2a0d4aebabc138f42cb6608303f675fe36d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:a9:2f:40:20:a8:b8:ba:b2:35:59:b6:16:
39:0d:10:f6:4c:82:04:5c:96:19:89:46:1b:5c:21:
ac:94:e4:63:d0:4c:eb:ff:a0:0e:18:10:06:22:a0:
a4:7c:72:49:e2:19:c9:d9:f1:e3:35:c0:3a:f6:0a:
b0:a2:28:eb:ef:12:80:4c:25:66:7a:6b:d9:90:66:
0f:6a:a7:84:90:ef:14:90:c2:8a:73:07:d0:ef:20:
dc:c9:f0:1e:5a:e2:32:c4:c6:b6:b8:58:4f:5e:26:
5c:3b:ff:30:d1:f1:ec:4e:24:75:b9:1c:7f:b2:0b:
83:65:84:eb:88:e3:eb:c3:f3:05:89:81:53:c5:9d:
94:b5:35:52:25:fa:db:f5:5e:c5:64:a0:79:2c:71:
cc:fd:8f:ce:a8:1b:e4:38:d3:c0:63:d2:a3:4f:d0:
64:ab:58:47:99:a1:c4:7f:35:2f:99:3a:1d:1e:36:
fe:0c:03:fd:41:43:63:fd:a3:a1:47:92:a0:27:aa:
f0:cf:54:e2:9a:e9:4c:15:5a:6c:c1:31:ba:88:5d:
9d:4d:54:b0:b4:3c:ac:00:6b:2c:76:10:4a:cf:51:
91:8d:c4:4e:aa:c7:64:a8:51:ff:d0:5b:26:f3:fe:
41:a4:e5:51:7e:41:b1:43:3e:22:9f:82:ba:21:9d:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E2:A0:D4:AE:BA:BC:13:8F:42:CB:66:08:30:3F:67:5F:E3:6D:2B
X509v3 Authority Key Identifier:
keyid:B0:A5:69:9A:08:C7:BF:D7:07:CF:B0:6D:32:13:F5:CA:CB:F2:82:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sKVpmgjHv9cHz7BtMhP1ysvyglc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3fd6e9-17d3-4019-8669-9666d976285d/1/sKVpmgjHv9cHz7BtMhP1ysvyglc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1b:1b:70:da:80:cf:c7:80:13:ef:91:f7:c4:2c:57:0c:14:
60:3f:c2:b6:fb:31:ba:9e:64:6c:0a:c1:fc:ac:80:a1:0f:b6:
90:4e:f2:ee:f3:93:13:b3:7f:a9:81:74:a0:cb:a5:05:75:5c:
b0:04:a7:40:55:dc:61:c2:6f:32:fd:d1:cc:3a:0a:b7:6c:c4:
22:ca:52:39:c5:3a:1e:c5:21:4f:f6:13:b4:22:4f:c0:3e:06:
c5:b6:f4:d4:b1:75:24:5f:36:10:00:c2:5d:d0:93:7d:1d:be:
03:b7:7b:77:0b:1d:19:8d:5b:01:92:4f:29:e7:7a:49:12:aa:
33:91:97:29:44:8b:5d:2f:dc:ba:00:7a:a5:61:04:21:f0:de:
73:ea:82:f5:50:75:51:0f:8e:c4:27:3f:a9:56:c4:d4:af:14:
ca:df:b6:9a:7e:bb:25:06:1b:c1:13:87:c2:9d:a3:52:3a:eb:
02:de:14:3a:97:56:f8:b2:f9:83:72:13:2e:46:98:f4:69:6d:
03:1e:c4:ab:93:2a:76:df:6a:ef:7f:5a:0e:13:36:af:33:76:
07:c7:bf:18:1a:a3:9f:0c:07:57:68:a5:b9:73:d7:d7:a4:8f:
56:d8:c3:6f:b6:af:8a:cf:d8:97:bd:b8:de:9a:d3:6c:ce:42:
39:d5:74:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:02:03 2025 by rpki-client