Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
File: Sv7PZkKkULU7B21EZILZwaid7XQ.mft (raw, json)
Hash identifier: KSGpvi9NWnInRTz2r8CdpsDjENxubNiXqkMxEDeRzpM=
Subject key identifier: 13:2A:3E:99:CE:88:3D:F2:6D:97:61:37:5F:8B:1F:B6:0F:32:1C:6C
Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
Certificate issuer: /CN=4afecf6642a450b53b076d446482d9c1a89ded74
Certificate serial: 0197B7EAB8EEAB0508BB02B24B9AC363609D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 19:01:42 +0000
Manifest this update: Sat 28 Jun 2025 19:01:42 +0000
Manifest next update: Sun 29 Jun 2025 19:01:42 +0000
Files and hashes: 1: Sv7PZkKkULU7B21EZILZwaid7XQ.crl (hash: ZoR87Ln3lgmlo8ymorFvXozhZAAb6cwoxscy3UDJOrk=)
2: p61VML8uLf1Dr4htLC12P2Sv8GU.roa (hash: RPd5GMtMlOZE/03iU2ovXiDZPGo3A/MLaIBoa6BmxD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b8:ee:ab:05:08:bb:02:b2:4b:9a:c3:63:60:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74
Validity
Not Before: Jun 28 19:01:42 2025 GMT
Not After : Jun 29 19:01:42 2025 GMT
Subject: CN=132a3e99ce883df26d9761375f8b1fb60f321c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f6:9c:80:61:f1:b9:e6:cc:ce:b3:0e:9b:f9:
af:23:02:ff:fb:a0:00:db:3b:38:77:98:28:10:cf:
2c:26:45:77:c0:7d:b1:36:bc:55:7f:9c:2a:47:d1:
f6:60:8c:89:d7:41:a4:64:7a:e5:89:06:24:7a:6d:
b5:01:62:ce:20:5b:f3:37:34:43:6b:53:97:70:6d:
39:dc:83:5c:0f:cf:a9:ad:07:62:ce:ef:2d:05:3f:
13:e1:c1:82:d5:87:16:ae:41:84:da:dd:96:d8:67:
91:4a:b7:6a:15:d5:a7:ab:b2:ac:d6:cf:33:b7:1d:
83:49:55:91:f4:05:15:cb:84:bd:87:72:ac:4b:7b:
e5:af:cb:46:02:9e:5f:88:bc:54:02:9d:2e:93:22:
48:c5:3d:6f:b2:0b:40:11:5a:63:3e:7a:02:a3:6e:
3a:20:00:b9:cb:73:c5:31:e1:0a:71:02:4b:48:a2:
fd:83:d5:c9:4e:f1:d1:b4:74:43:5f:7d:60:4c:8f:
2b:bf:4d:7b:ca:55:f2:48:b4:1a:d7:7c:bd:c8:f8:
36:f3:9e:01:56:c2:21:9d:fa:fb:a1:3e:7e:0e:90:
69:19:4b:42:f6:91:b4:3d:cb:97:ed:06:07:78:62:
9c:d3:95:a5:a9:b6:3e:3b:f7:7c:9e:67:be:27:c6:
80:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2A:3E:99:CE:88:3D:F2:6D:97:61:37:5F:8B:1F:B6:0F:32:1C:6C
X509v3 Authority Key Identifier:
keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f2:7f:ee:2f:71:26:98:64:e6:9c:e7:c5:ab:2a:25:07:97:
cf:fe:e4:7c:6a:4c:d3:8f:20:dd:67:f4:0d:f6:f5:55:57:49:
1e:f2:42:4a:97:5a:0a:b9:ff:ce:73:f1:42:8f:d9:80:61:c2:
70:76:d5:2e:3f:1f:c5:44:ac:43:31:ab:3f:c3:16:70:d4:89:
e1:d8:61:4b:7d:9c:c0:34:59:e3:9f:44:fa:08:c7:98:9e:0b:
2c:03:bf:d8:1a:4a:d7:a6:d7:3b:4a:55:87:10:78:30:d8:5c:
49:79:89:e8:72:b1:27:00:8d:1d:f3:6e:ff:ea:f9:e4:a4:16:
e9:fd:b4:05:8d:e3:66:a1:a4:40:6a:89:a7:ff:82:7f:9c:7c:
11:6b:ac:35:89:9e:a5:52:52:af:f1:7e:9f:e6:84:d2:ec:42:
ac:a6:be:fe:9e:c3:cf:69:a0:d2:88:44:4e:2a:c3:be:38:fe:
f6:d4:0e:24:42:b7:4d:43:a8:c6:82:af:9c:99:cb:5b:84:d3:
30:48:1f:53:39:22:97:c4:ce:0d:6e:3e:1b:b0:66:b4:25:db:
f0:c6:de:b4:7f:75:cd:7f:84:2a:2a:9a:15:f3:41:dd:eb:76:
11:e5:eb:7d:60:e5:a0:8a:16:bd:c6:57:dd:bb:3f:29:f7:01:
75:01:16:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:06 2025 by rpki-client