Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
File: sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft (raw, json)
Hash identifier: UjYbbG9gOHxkJpUS88tvL712d5+dG+zitE/8pgEsmD8=
Subject key identifier: 4E:D4:24:DF:59:C3:32:EF:55:72:54:DA:D8:7A:41:B0:4F:8F:98:BB
Authority key identifier: B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
Certificate issuer: /CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Certificate serial: 0197B7EA7DA27E2C5A9077764CBC600E4FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 19:01:27 +0000
Manifest this update: Sat 28 Jun 2025 19:01:27 +0000
Manifest next update: Sun 29 Jun 2025 19:01:27 +0000
Files and hashes: 1: IZAxEHA5n8YPukULkPEQv7owY4Y.roa (hash: vkfnMd+CZAW7CnrGWVozJx3AoLaV453dmGIo6rw9ME8=)
2: mA3rys3eEYCw0R5GwYAKoJlEh2w.roa (hash: Y+HfCJ1pTuTaQ4aj+4iQZxk3GQcy6uxEiMl5g7TwtZg=)
3: sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl (hash: KkZQEmM4970KAbYRcxugZR4kkc3uILNyOishHhSZ06o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:7d:a2:7e:2c:5a:90:77:76:4c:bc:60:0e:4f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b090d40bfcd5a4a30875160ecc6f9fe53c05a6e6
Validity
Not Before: Jun 28 19:01:27 2025 GMT
Not After : Jun 29 19:01:27 2025 GMT
Subject: CN=4ed424df59c332ef557254dad87a41b04f8f98bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:e6:0b:80:4c:1f:0d:54:e9:71:b7:b8:54:
3c:28:0e:c8:10:1c:4f:4c:a5:fd:dc:9c:12:46:62:
64:e5:0c:1c:7b:d6:2f:c8:cf:51:10:e6:dc:87:aa:
7f:c3:61:38:10:1c:c0:84:9e:7e:c8:d2:4c:e4:fc:
6f:9e:95:1f:43:24:2e:30:d3:68:e1:41:f6:d2:68:
80:7e:3a:70:34:00:b4:57:0b:08:17:63:c9:52:cc:
ad:5b:37:c2:2d:7b:7a:23:a0:d2:8f:0e:8e:80:70:
4a:b7:51:7b:b5:a6:6d:28:ed:62:74:5f:9f:53:ed:
80:f4:fe:b0:56:7e:50:3f:f6:22:6f:30:a9:61:75:
2b:ed:9b:78:5e:25:93:6f:49:ef:6f:53:4a:0a:ff:
1f:72:91:b6:eb:6d:20:30:2c:3f:f9:78:93:79:26:
24:32:17:50:2b:57:8c:f6:ab:ba:61:36:31:19:cf:
03:66:57:61:8c:af:e9:ca:dd:7b:92:99:4b:70:ec:
02:cb:8d:1c:fd:72:08:a5:d5:4a:3d:52:42:45:4f:
a2:49:5d:ff:81:ca:a4:ba:d5:a0:ff:5c:cd:d3:df:
75:60:9b:88:54:b9:d9:0b:75:af:fd:6d:2a:84:d1:
ed:6a:7c:f8:69:f1:46:13:82:93:42:1a:88:87:3e:
86:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D4:24:DF:59:C3:32:EF:55:72:54:DA:D8:7A:41:B0:4F:8F:98:BB
X509v3 Authority Key Identifier:
keyid:B0:90:D4:0B:FC:D5:A4:A3:08:75:16:0E:CC:6F:9F:E5:3C:05:A6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJDUC_zVpKMIdRYOzG-f5TwFpuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/71a400-4ede-45f1-b55b-8109d4089828/1/sJDUC_zVpKMIdRYOzG-f5TwFpuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b3:df:df:15:87:50:dd:26:56:96:5f:2b:b1:79:25:bd:59:
e6:94:76:43:42:e0:b2:9e:c1:da:3e:54:45:85:b5:40:fe:ad:
ce:26:21:6c:1d:a1:d8:db:42:5b:d7:b6:9e:dc:82:5d:96:b5:
b9:01:22:d5:6b:80:b2:df:71:2b:5f:21:f7:62:c3:cd:69:cb:
c4:2f:f6:b9:42:05:88:9b:2c:db:50:9e:8a:3b:3f:a0:a9:1e:
4c:50:a8:3c:36:4a:3c:7d:32:80:06:1c:dc:8a:0a:ee:4d:e6:
b7:7d:a9:88:bc:29:25:2c:80:a3:8d:c9:94:29:c8:f5:63:39:
95:42:0d:14:68:d8:b0:d7:78:53:69:13:a5:59:5b:fa:03:5a:
38:55:2d:db:d7:37:40:a4:53:f0:4f:e2:d8:64:47:16:d2:7e:
bc:4e:f5:59:0c:72:07:78:72:ac:9e:73:13:76:42:3f:19:c9:
04:f3:74:ff:5b:38:dd:7c:7c:c6:a5:72:4c:25:fe:55:04:ba:
73:bd:4c:bb:7c:1d:16:15:f9:c5:9e:16:b2:c9:38:9c:16:1f:
03:cd:cb:9c:3b:7f:3e:ba:48:6f:b6:7e:ae:b3:fc:09:63:35:
09:56:1d:52:2e:b7:81:b8:60:ef:82:71:ad:9e:d9:f8:58:ea:
0e:a9:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:32 2025 by rpki-client