Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
File: sL_SyF5redRg5mDPlmTe5V3MyMw.mft (raw, json)
Hash identifier: 5a2s9wQN8+w61ZR0RPzji3m1Tg/wv73pP6h1OJrBxo8=
Subject key identifier: 74:AA:C0:31:42:F1:F2:0E:1B:EF:3E:4A:AA:A3:89:E6:66:AE:5B:1E
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Certificate issuer: /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial: 0197B6D753EDD73666CAF50AF0C0F8D94C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
Manifest number: 0E8C
Signing time: Sat 28 Jun 2025 14:00:54 +0000
Manifest this update: Sat 28 Jun 2025 14:00:54 +0000
Manifest next update: Sun 29 Jun 2025 14:00:54 +0000
Files and hashes: 1: eFmnxR7CyMxvye5-XXcMbfaAVOw.roa (hash: pZJwNCYo3S0mBXNLEIKEUXn/lY7t5TEifbuRPldd2yI=)
2: oJDEzXr7gr-7eZ1rexTjd4c8Ul8.roa (hash: xZTw5KYNf4Du9zIJjL5q6os9uQVggXiruo8qaJQJCvQ=)
3: pGZsGJVmFoYhAv5VAkXf67JcN-w.roa (hash: /j9DfbiG7O3qG1GtbIDXzJ4rJWqS+jSuNHHJIbaeKpc=)
4: sL_SyF5redRg5mDPlmTe5V3MyMw.crl (hash: wvFE18U8msSLpSlanNfW2wbJd+GTxLCQBqVL8EJgoys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:53:ed:d7:36:66:ca:f5:0a:f0:c0:f8:d9:4c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Validity
Not Before: Jun 28 14:00:54 2025 GMT
Not After : Jun 29 14:00:54 2025 GMT
Subject: CN=74aac03142f1f20e1bef3e4aaaa389e666ae5b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:bc:73:8e:73:7c:8c:f8:fd:ed:76:1b:cc:
39:9d:f7:3a:c3:e4:2e:94:a4:02:1e:11:c7:89:18:
94:67:4b:73:f8:d5:66:15:0a:bd:55:17:b0:6b:27:
8a:b4:04:1d:36:07:25:8d:c5:07:bf:ed:dc:52:8d:
ab:97:48:b4:96:fd:ce:a0:f7:64:21:50:3e:70:6a:
3a:4f:6f:f6:b7:70:43:9f:de:da:49:f2:a2:65:73:
80:92:d5:a4:7e:8d:47:58:96:da:5c:30:1c:b9:f1:
69:2d:56:4d:9e:fa:79:d6:6d:2a:44:34:94:08:0b:
75:35:ca:73:f3:29:00:80:0c:64:4a:b3:b2:3f:ea:
75:16:84:fb:ad:17:9c:50:5a:7d:96:cf:66:f3:e8:
25:b9:e2:bf:e3:f2:58:49:2c:3d:79:b5:04:88:d1:
d1:84:8f:b8:09:74:dc:43:54:e3:69:93:29:19:1d:
79:b9:c7:4f:ca:cb:61:e5:70:77:aa:6c:2f:07:1a:
fa:b2:4d:bf:0a:31:36:17:c7:a7:23:41:ab:a4:2f:
98:7d:6d:0d:9d:e2:69:5e:70:17:16:d9:c7:7c:de:
57:0c:6c:e2:df:6f:3b:15:d0:87:26:1f:4a:b9:aa:
a5:73:65:65:15:66:37:26:ea:5e:2f:10:72:30:ed:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AA:C0:31:42:F1:F2:0E:1B:EF:3E:4A:AA:A3:89:E6:66:AE:5B:1E
X509v3 Authority Key Identifier:
keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:b1:d4:46:ca:29:62:e3:2b:82:86:ba:fd:2f:5c:61:d9:2f:
49:1b:e7:0b:08:d9:e4:f7:a8:2a:f5:17:64:f7:c4:ff:44:e6:
77:9e:cb:f8:3c:77:77:73:ca:3f:73:4e:3c:38:e0:ce:65:67:
79:60:1b:41:9a:03:1f:49:d9:5d:35:78:33:bc:b5:19:c0:98:
bc:2f:26:94:6c:f8:b7:6d:2d:3c:a5:d5:3e:a2:2b:90:e1:ec:
88:f1:c7:06:52:1b:e8:d2:15:f3:e3:54:d5:bd:03:ac:21:40:
6a:df:19:65:a5:cd:22:ca:44:b5:89:d3:1a:e0:74:1b:76:42:
13:78:f3:63:35:79:97:0a:8d:bd:19:29:6e:09:ce:e3:41:2d:
80:20:32:ef:08:8b:6d:67:b0:7a:52:ad:f4:f8:32:80:e5:2c:
e3:63:e3:b2:cc:e2:25:62:77:73:c4:47:80:26:bf:57:f1:aa:
57:9c:52:fc:7f:1f:3c:a3:9e:f2:ac:17:b8:df:2b:0e:26:98:
2d:5b:ae:5d:e6:9e:d8:25:8a:68:6d:fb:6f:68:ba:62:f7:67:
38:6f:90:6f:30:32:c8:7e:fb:ee:0b:0c:ee:6b:9d:24:0e:92:
fc:2f:d4:e5:65:aa:c8:71:d0:94:98:f8:41:c0:8d:2e:0f:61:
f9:22:80:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:38 2025 by rpki-client