Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
File: SFk-QNpaUvMi21oEwg-0htThVQI.mft (raw, json)
Hash identifier: d/QM8OzqunIVPHUMEsThS2xPqCAs9SAX8/VXNbJ1cs0=
Subject key identifier: 3A:D3:C1:E5:41:7B:66:1D:F2:72:BF:DB:74:E0:13:E5:6B:43:1A:5D
Authority key identifier: 48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
Certificate issuer: /CN=48593e40da5a52f322db5a04c20fb486d4e15502
Certificate serial: 0197B6A0C2C61E1BDB99A05EE48A5546564D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
Manifest number: 1270
Signing time: Sat 28 Jun 2025 13:01:18 +0000
Manifest this update: Sat 28 Jun 2025 13:01:18 +0000
Manifest next update: Sun 29 Jun 2025 13:01:18 +0000
Files and hashes: 1: SFk-QNpaUvMi21oEwg-0htThVQI.crl (hash: 2zYuyMJ7eGGLP/Chyn2upCekgCeRR8uhrZEx5tmQgQA=)
2: Xe1gxuRIIOL95lwNFDlJJ4LeD98.roa (hash: E3ThdKoNF/zSVQO/0Rh8O4e1tJqwTsPdKIVV0WmD0l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c2:c6:1e:1b:db:99:a0:5e:e4:8a:55:46:56:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48593e40da5a52f322db5a04c20fb486d4e15502
Validity
Not Before: Jun 28 13:01:18 2025 GMT
Not After : Jun 29 13:01:18 2025 GMT
Subject: CN=3ad3c1e5417b661df272bfdb74e013e56b431a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:e6:5d:ef:e7:34:68:e6:43:dc:7d:a7:7e:
4c:1b:f8:e9:65:94:88:04:14:a7:99:0d:59:33:90:
7c:29:68:38:c6:45:5b:59:d6:53:db:2f:d6:26:05:
46:5a:88:98:59:64:60:0d:41:c2:70:b7:87:cf:0c:
1a:4f:af:21:cb:ba:0b:92:c0:57:62:90:b3:32:51:
6c:85:a6:eb:58:3c:32:45:fa:51:91:c7:1c:43:eb:
88:ac:e8:4d:f0:0c:c0:f5:52:0c:b2:1a:f4:f7:13:
ca:5f:ea:82:de:7e:2c:2c:59:f2:7b:fe:c5:9e:d5:
ae:12:ac:f2:e6:32:fd:2d:55:c6:92:fb:ec:78:e8:
f8:f2:59:e2:c2:de:1a:5b:e2:5f:55:ac:88:2a:47:
a0:8c:fb:65:a4:03:28:09:89:1d:8f:6b:22:27:90:
5b:95:c2:dd:d1:21:99:93:54:ed:8b:e9:e1:63:36:
32:78:dc:26:16:eb:bf:b5:1d:48:c5:34:5b:45:2a:
87:d8:79:80:90:8b:f0:70:62:c6:7c:94:7c:45:bc:
b8:2c:c9:6f:0c:d7:3f:d0:1b:b0:48:4e:2f:7e:c1:
35:e7:80:75:6c:f5:51:23:f4:50:81:b5:49:25:6d:
75:09:b0:55:9e:0f:48:e6:16:55:e1:10:01:c9:99:
ea:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D3:C1:E5:41:7B:66:1D:F2:72:BF:DB:74:E0:13:E5:6B:43:1A:5D
X509v3 Authority Key Identifier:
keyid:48:59:3E:40:DA:5A:52:F3:22:DB:5A:04:C2:0F:B4:86:D4:E1:55:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFk-QNpaUvMi21oEwg-0htThVQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9700c8-f9ab-42a7-b1fa-e68a08d9e54f/1/SFk-QNpaUvMi21oEwg-0htThVQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:98:97:e6:a8:60:3a:73:be:57:9e:bf:d6:6e:c2:c1:c4:6f:
29:f3:ea:42:ff:28:96:c2:2d:f2:b4:0a:dc:65:2a:28:c6:ff:
93:c4:dd:8b:9b:f1:15:29:3e:5c:b5:e5:a1:24:84:df:64:16:
b1:78:38:84:cd:90:6e:8e:1b:26:e9:b1:0b:43:ff:4b:c2:8c:
21:52:54:a7:a2:ac:7f:56:57:29:28:03:63:02:03:5d:68:ce:
d8:78:c4:6b:73:fe:1c:1d:6f:85:f1:ac:44:b5:9f:90:75:66:
ee:da:9c:ef:34:8f:14:01:74:d6:89:bb:5e:b8:b6:0a:0c:6d:
dc:4d:cd:c0:c3:a7:b8:d1:60:98:7e:39:48:13:4d:43:d8:0b:
f1:65:66:f2:fd:d1:d4:9f:bd:08:1f:0b:28:dc:8b:48:4f:8a:
2c:49:26:28:75:39:b2:13:c3:a9:6d:34:0f:a5:70:7f:00:ee:
d8:50:2e:df:b7:44:f3:42:53:ae:b7:a1:3b:81:2a:74:6c:55:
98:f8:49:5d:60:aa:3a:5a:2f:16:2a:95:a7:b5:cb:c5:1e:95:
c5:14:63:7f:0f:df:8d:64:ae:d1:21:75:da:9f:d9:d5:7e:a9:
0b:23:99:a0:d4:4c:43:0d:17:e1:5e:ff:0a:1b:50:5b:6e:4b:
ae:4a:7c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:39 2025 by rpki-client