Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: ImZQ6C6BBodYFiqti8hbD8+JQL3gpPlF8pXSuDo56ow=
Subject key identifier: 1B:57:1D:13:68:72:E9:0D:02:79:09:1D:DF:AB:56:3F:DE:F7:FA:7D
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 0197B88EE1EBCC6FDA4AD11FE8F9EDA70A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 114F
Signing time: Sat 28 Jun 2025 22:01:00 +0000
Manifest this update: Sat 28 Jun 2025 22:01:00 +0000
Manifest next update: Sun 29 Jun 2025 22:01:00 +0000
Files and hashes: 1: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: zOVnkxhz6Fb9CAc69/A4Va3iAbyUNdGJ041iW2VgRbQ=)
2: rKZbB3iW2mhQrV3B7dzkdgnj7Hg.roa (hash: bzWIX1UDDDSaemHwck5e4pimDCRd9S56ZPwPBB+GA2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:e1:eb:cc:6f:da:4a:d1:1f:e8:f9:ed:a7:0a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: Jun 28 22:01:00 2025 GMT
Not After : Jun 29 22:01:00 2025 GMT
Subject: CN=1b571d136872e90d0279091ddfab563fdef7fa7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:de:02:84:38:fb:ff:b5:a8:f2:f2:8a:63:85:
ba:89:36:a1:09:3f:aa:69:4f:91:c9:a3:bf:3c:fc:
25:9f:b1:9c:6a:5d:9a:2d:6b:fb:33:da:d0:8d:fe:
5c:86:31:3a:1a:d6:78:3d:cd:5d:08:aa:13:e3:37:
dd:8d:6f:79:df:52:a7:3d:b0:2c:4b:18:ac:a6:e5:
7d:c5:e1:c1:b7:37:ac:f7:38:71:cc:a4:ba:22:f2:
10:eb:c8:89:14:d2:85:f5:8e:4b:5e:b0:65:b8:c7:
83:36:7f:9d:5a:d7:a2:63:bf:e2:c7:08:34:4a:af:
6c:60:a5:63:ad:d5:00:d4:be:39:22:12:10:6d:10:
0c:41:df:a3:a8:e8:6a:c0:29:66:13:bd:00:35:49:
40:20:f5:d4:e6:be:5b:f7:9b:a0:f3:7c:44:27:22:
bf:00:bb:95:ba:e1:96:ab:c5:da:80:1e:23:16:eb:
13:0a:81:79:8d:ac:27:9a:cf:40:4b:2a:f6:3b:30:
90:2e:07:2e:cb:a4:80:9e:dc:08:b3:38:30:8a:fc:
a0:11:b9:d7:d5:2f:05:5a:40:1f:a1:50:c9:f8:a0:
32:8d:49:3c:71:62:3e:5c:b9:a5:3b:22:96:65:39:
da:71:6c:24:73:5a:85:50:5d:33:79:ea:43:f8:b9:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:57:1D:13:68:72:E9:0D:02:79:09:1D:DF:AB:56:3F:DE:F7:FA:7D
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:96:2a:13:84:42:27:ac:1d:1b:fa:82:23:99:d4:b6:26:68:
9b:bb:9d:96:6f:b1:27:29:59:e2:51:3f:f4:b8:fd:7d:ad:2c:
70:91:00:e2:b9:5d:fa:d9:84:b2:8d:9e:78:b7:37:29:55:09:
85:c8:d4:32:72:92:4e:39:45:fd:cc:0c:5d:3c:29:b6:9f:2b:
6b:3f:64:81:6f:ba:a6:c2:7e:83:e3:05:72:a5:a0:bd:80:dd:
12:29:ab:cf:05:c1:4f:cd:9b:eb:59:94:74:f5:8a:14:d5:86:
39:61:b5:55:e5:c5:f9:96:46:99:ef:e0:24:90:da:22:56:ec:
e4:14:4c:b6:f1:fc:de:30:9f:69:f5:fc:d8:7e:d3:37:d0:8d:
64:9b:62:f4:30:c1:33:1a:a5:c1:3e:dc:a9:d5:97:b7:5a:8f:
36:2a:0c:23:a6:a8:f7:9c:e0:5d:c3:ce:fd:8e:51:85:bc:b3:
06:07:f9:c2:50:d0:6e:43:76:2b:47:5a:f1:f0:7d:04:f1:44:
ac:84:8c:26:22:6b:4e:28:7b:68:76:8d:3c:94:c4:2b:67:e6:
72:f9:51:36:73:23:88:cc:0a:3d:60:ca:cc:ba:50:23:e6:d4:
35:b7:18:8e:a4:06:b8:07:fc:17:f0:6c:94:1f:09:ae:07:bc:
db:d5:8e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:34:58 2025 by rpki-client