Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: dUYffk8SyYCn3x0CbIXowgfxhUXH2TsnLZCnrR+ekY0=
Subject key identifier: E0:AF:7D:AF:25:28:91:E7:58:71:C8:48:9F:C1:5E:12:D0:37:61:C7
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 0197B6D7B4CD9E3783584C3A0AFADD03D084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 05EE
Signing time: Sat 28 Jun 2025 14:01:19 +0000
Manifest this update: Sat 28 Jun 2025 14:01:19 +0000
Manifest next update: Sun 29 Jun 2025 14:01:19 +0000
Files and hashes: 1: So0J85BPs3UG_C6BWLfnLZ9c_3I.roa (hash: +ubxlITiYsafbFryEurkXW802YUQIUAFsrYygMwxezQ=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: LLS2DADGOdgEtB9dMgxcHfLKVDLdZRxa8cCijY6cXkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b4:cd:9e:37:83:58:4c:3a:0a:fa:dd:03:d0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Jun 28 14:01:19 2025 GMT
Not After : Jun 29 14:01:19 2025 GMT
Subject: CN=e0af7daf252891e75871c8489fc15e12d03761c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:16:d6:62:ae:ab:02:b7:c1:c4:31:b1:32:dc:
7e:9a:af:be:dd:9a:66:11:8d:11:9e:a6:48:80:f7:
4b:c4:14:9b:e7:a6:4c:05:4c:b0:28:82:ae:90:16:
d6:68:16:51:1a:bc:2f:d9:2d:20:07:48:8d:be:75:
7c:5d:c1:41:91:67:69:b8:cc:37:03:0c:38:46:3b:
c0:9e:b6:75:de:11:ff:fa:79:04:96:0f:fe:97:b0:
50:1f:43:40:2c:ef:ba:8d:22:31:3c:5e:1f:2d:d5:
a1:44:20:ff:e8:3b:16:9f:31:b5:64:c1:ba:6e:2b:
fb:54:1d:b5:9d:d4:99:40:44:33:5e:49:ce:50:e9:
51:0b:9f:8b:d0:46:d1:1d:ab:1e:6e:e8:74:c2:c4:
62:8e:f2:fd:f5:ce:f1:fc:e3:8e:d3:12:53:2e:42:
29:91:3e:32:f5:53:6c:f1:72:35:68:7c:a3:8d:3e:
fe:47:74:22:c4:62:63:81:df:51:56:2f:35:6e:6c:
de:b6:fa:df:b9:20:a9:a0:73:6f:04:d3:af:55:14:
27:7d:a9:ad:cf:8d:bb:75:93:9a:b8:f3:56:83:68:
b4:4b:7a:c8:0a:83:d1:07:72:f4:f3:4e:8b:02:f0:
ef:9b:d2:d1:cd:c1:bf:3e:88:ec:6a:23:cf:90:de:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AF:7D:AF:25:28:91:E7:58:71:C8:48:9F:C1:5E:12:D0:37:61:C7
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:4e:05:bd:60:04:27:5e:09:3c:fd:84:63:b6:82:b0:7d:ed:
79:f6:5e:c3:b2:b5:7b:3d:89:a6:25:ab:57:9a:bb:34:ef:61:
28:22:de:9d:54:e4:ab:05:b9:ff:a1:92:d7:02:9d:20:64:91:
35:31:73:a6:f5:19:fb:4e:33:bb:48:4c:33:c0:cc:c8:aa:7e:
f0:4e:bf:5a:98:d1:a2:71:1e:eb:bf:1b:94:64:30:ee:5c:8c:
3c:cc:84:2f:96:d6:2e:b9:cd:b5:57:f9:48:25:22:ac:29:3c:
50:35:66:60:71:dd:20:c1:46:dc:2b:f1:29:7e:02:1e:f0:52:
b7:63:9e:51:2b:d3:1c:15:6e:99:14:2b:f4:5f:f8:be:ff:6b:
e7:b5:1a:cd:cc:9a:db:fe:1c:00:fb:51:3c:51:e5:c3:36:f1:
ca:63:ab:88:31:a5:21:66:de:83:da:e8:2c:d7:9b:88:93:c4:
f7:3b:45:b6:57:de:1e:37:61:f5:43:cf:fb:15:92:8e:48:79:
d0:89:ef:5e:97:44:d8:96:fd:b2:13:d0:cb:e6:6b:fa:2b:d6:
45:ad:ea:2d:da:4f:d0:99:eb:19:fc:32:d1:95:5a:dc:f7:91:
56:08:89:28:20:28:b9:83:65:0d:55:1e:4b:70:23:98:bb:04:
6b:cc:09:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:21 2025 by rpki-client