Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: CLGgTTE3i4FR0vTbST3UB8BZ43Hcfb5cJ74jeNeZQFg=
Subject key identifier: 01:5D:31:4C:63:1C:9B:15:23:DE:C0:D7:D7:F1:B8:1F:A2:4E:6E:07
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 0197B8211D561C6950E0DD8242608C41D261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 20:01:07 +0000
Manifest this update: Sat 28 Jun 2025 20:01:07 +0000
Manifest next update: Sun 29 Jun 2025 20:01:07 +0000
Files and hashes: 1: CwqvWSmBdm9lt3PehiaP0H6J-oY.roa (hash: gTSav2fMjMmokQJGJr0YwjWXX9H3AhJSgjsJ2wpM5SA=)
2: QdvbepQukFmfMSQYf6HBBLcHcMk.roa (hash: F/Id75RSk4+xz0N0tNwJ7jB7AAssoyiwdWIUCFeT7Qg=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: x6DeGwIerMrzrTptx9H0wbZS+yK+Gjp8kiwKNFxZbTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:1d:56:1c:69:50:e0:dd:82:42:60:8c:41:d2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Jun 28 20:01:07 2025 GMT
Not After : Jun 29 20:01:07 2025 GMT
Subject: CN=015d314c631c9b1523dec0d7d7f1b81fa24e6e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:3b:da:b5:7c:12:fc:c2:71:ee:86:6f:95:
65:c1:b4:0e:7a:2e:1d:5b:a1:91:d3:c7:e2:1f:17:
02:4a:d1:cc:9e:50:01:3c:69:be:e1:07:0d:e5:66:
52:62:00:f4:68:fa:09:3d:f3:96:eb:54:3a:81:23:
8e:26:43:96:18:04:46:a3:22:e9:cb:0d:ba:34:0c:
df:64:87:5a:3a:05:54:37:dc:ea:29:28:ed:68:3f:
cf:30:69:7e:12:4a:24:ea:58:ff:65:fc:09:d6:6b:
6a:8e:23:90:e1:86:be:f9:ac:f1:b4:16:6e:0b:96:
52:57:0a:e3:39:8c:40:dc:f0:6e:dd:bb:57:37:f7:
2b:37:b2:30:2a:3f:2b:97:30:2c:81:1c:2a:ae:68:
38:03:d2:6c:e8:fc:be:a4:50:d3:90:3b:60:26:ca:
67:3f:2d:cd:bb:87:d3:35:3a:a6:ac:59:26:03:9e:
3e:fc:f9:9c:98:ae:ec:20:33:3f:4d:7d:76:6b:6c:
84:5d:cb:fa:5e:c0:fb:79:68:fa:cf:05:5a:48:9c:
53:74:ce:40:49:31:84:c3:e9:56:37:f2:21:17:4d:
23:96:e2:29:2d:b2:f3:b8:8c:02:90:ee:49:25:58:
ca:39:8a:76:3e:d5:f2:dc:6f:bb:ec:1d:f7:bc:17:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5D:31:4C:63:1C:9B:15:23:DE:C0:D7:D7:F1:B8:1F:A2:4E:6E:07
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:97:73:47:cf:98:09:ba:39:05:9b:6a:31:6d:d4:77:0f:d3:
8e:cb:bf:a2:75:0d:e4:a4:b9:8f:44:06:1d:68:07:41:a8:5e:
32:d7:dd:3d:15:31:4c:1d:ab:e5:94:62:3a:3b:87:1e:60:8e:
45:b2:9f:bb:a4:c3:08:29:b2:d8:b2:a1:13:be:66:7b:65:db:
00:a2:3b:6c:a0:68:50:ad:91:c4:49:27:59:b8:3a:f2:f2:0c:
71:dd:fb:76:18:d2:11:ba:3d:70:6e:af:a0:85:dd:eb:eb:de:
22:2c:bf:5b:9c:19:5b:c1:fe:a4:0a:7c:d3:16:fe:e9:30:83:
5c:95:6b:78:1d:fc:48:cb:5a:7b:b9:21:97:ae:64:62:49:61:
ea:6b:c4:12:ac:7c:0b:e8:26:c7:5f:c7:9f:31:1e:27:80:e7:
82:f7:76:28:bc:e5:60:37:9d:42:77:a0:73:c8:f1:a8:d8:16:
5e:d7:37:cc:b6:5e:a7:c5:c6:cb:d9:5e:0b:76:16:41:f5:d5:
df:66:e0:99:55:a2:4e:6d:6e:73:c6:cc:6e:3e:e1:c3:b5:62:
06:ee:75:7b:6c:75:9b:6c:d3:70:f2:62:cb:b5:77:dc:23:bd:
8a:00:50:ea:ad:6f:b7:18:6e:ea:51:a3:47:ad:d9:a6:24:0a:
33:bc:e3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:00 2025 by rpki-client