Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
File: svJ5U61GkMBo-0D581YAM3m7Y_g.mft (raw, json)
Hash identifier: oXx+2XGazsjIxTQ+4mNj5qLZMOxJrYwXzNvv5UeRC2Y=
Subject key identifier: AF:C1:41:67:64:A8:00:95:79:52:46:EE:C8:8D:87:59:A6:E1:45:70
Authority key identifier: B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
Certificate issuer: /CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Certificate serial: 0197B7452E5F49398DC5DEFC8FC959D58EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
Manifest number: 0F45
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: bkaEgwUfFQuvU4deHKYEq645oxo.roa (hash: a6t899hSFrNnCxDeJsEHX7KWBkAwoAJJxMP3KbPkcsM=)
2: gM8Vs4rZduYc-FMusqbqCtswvSM.roa (hash: PdGvc2+s2b+cxeznU9E/uPp7OuLxD8n8FSf7bdTA3Io=)
3: svJ5U61GkMBo-0D581YAM3m7Y_g.crl (hash: AVsGBYqKwEL85HBv8oCcPuP3Su+A1cxF4/9uu/0YK1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2e:5f:49:39:8d:c5:de:fc:8f:c9:59:d5:8e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f27953ad4690c068fb40f9f356003379bb63f8
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=afc1416764a80095795246eec88d8759a6e14570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:57:0d:ec:26:68:55:94:d1:59:54:b7:b6:73:
14:24:14:da:8f:df:2f:dc:4d:14:37:fe:ba:a4:5f:
94:40:8b:61:7c:d1:c8:dd:35:ca:65:77:65:f3:b2:
b9:11:5e:e6:6a:08:f4:d1:68:ea:2c:8b:5c:c5:cf:
fe:ca:cc:df:17:01:1f:0d:33:37:20:f7:6f:0d:61:
a8:1c:55:a7:b2:30:f1:e8:1b:5a:26:ad:6c:24:53:
43:2e:70:f8:6f:77:5f:a7:d0:e8:51:98:64:03:c7:
8c:7e:d4:44:e7:3e:25:18:88:fc:f9:e7:87:1e:7f:
ea:d5:e1:4d:c0:d8:55:1c:67:e7:80:04:ac:00:7b:
8b:cc:f2:3e:7e:e9:d1:a0:1c:89:e6:e7:6f:3f:5a:
b0:e3:b2:fe:aa:17:0f:b4:e0:7c:39:2a:36:a0:2f:
7f:0d:f3:29:32:c6:f9:b9:59:fa:4d:3c:cb:36:c6:
a6:8f:66:56:e9:78:da:d7:fc:de:f8:bd:eb:bc:b7:
12:ba:e0:1a:5b:6a:7c:cb:30:3d:4d:c0:5d:73:1d:
27:6b:84:78:26:2d:8a:24:de:ab:19:e7:6e:b6:41:
bd:71:64:84:57:62:a8:49:0f:df:43:22:79:2e:0d:
1c:f2:b4:16:b3:d9:87:2c:de:8d:50:39:9f:e7:75:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C1:41:67:64:A8:00:95:79:52:46:EE:C8:8D:87:59:A6:E1:45:70
X509v3 Authority Key Identifier:
keyid:B2:F2:79:53:AD:46:90:C0:68:FB:40:F9:F3:56:00:33:79:BB:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/svJ5U61GkMBo-0D581YAM3m7Y_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/08973f-fb6a-41e5-8720-fb4cf137c1e9/1/svJ5U61GkMBo-0D581YAM3m7Y_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:75:9a:de:dd:d2:b5:d6:cf:db:d2:5d:27:93:4c:fa:8e:8a:
07:6e:9f:8f:01:ca:59:37:dd:9d:f0:75:09:65:30:55:00:3c:
5f:26:a2:ba:56:8e:40:06:22:02:8a:d3:af:08:17:75:bb:77:
9b:f9:fb:69:f0:30:f0:07:ce:6a:8c:ca:af:e1:5f:97:41:08:
37:3c:3b:73:76:4a:65:8b:cf:bc:44:32:32:82:0a:bf:c5:a5:
ff:74:4b:7a:ed:30:12:ed:53:ab:3e:cb:4b:84:2e:8e:a8:68:
32:18:2e:63:79:eb:dc:51:53:3e:86:e5:c2:2b:60:d8:4c:da:
f8:00:4c:95:ba:ef:07:81:ce:88:d0:a8:8e:e2:86:2d:e8:58:
b9:a4:73:ae:82:0e:81:4f:11:a9:a1:5c:aa:99:43:bd:b5:85:
71:5b:cd:5a:e0:df:6e:3d:61:06:71:b6:ad:6a:14:ab:70:6c:
ca:7d:62:ab:4e:55:f7:03:ec:00:73:35:b1:65:a1:31:e6:ca:
ea:76:7a:f3:a9:a5:28:b1:7a:22:fb:9e:18:d0:02:a0:02:45:
2b:39:21:71:a1:63:99:21:66:ee:63:b1:7b:5b:ff:65:8f:a0:
88:4f:ae:2c:b0:3a:08:39:01:f5:d1:8d:b4:9f:3d:c9:51:15:
9b:b0:52:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:12 2025 by rpki-client