Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier: 2H+nepafSi7maX2fEp78nD6KnVWQEoEPOALOWPpCcsQ=
Subject key identifier: 5D:F7:5B:F8:5C:32:8D:C0:59:70:F9:9B:FD:5C:DC:8D:75:D3:4F:08
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 0197B6A2193D1DDDCD62B67FBC2411C56C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:02:45 +0000
Manifest this update: Sat 28 Jun 2025 13:02:45 +0000
Manifest next update: Sun 29 Jun 2025 13:02:45 +0000
Files and hashes: 1: RlSX_O9nuK4visZrcXhuUrMTobY.roa (hash: rJSur0He4KlKRGvS+jaXIpRrSe2/3CDqYP07r9YT8i0=)
2: _FEDHOA1DaPuw5szVg_jX1NChtc.roa (hash: NTy69zIQkKyjkxDfKJ+X67SWRMXHN0I5/tJxmftqgVU=)
3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: EI3zN+Tnn9Ozybs3Tx5lFMoHZwwrZ66G/mV4K5Wn3qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:19:3d:1d:dd:cd:62:b6:7f:bc:24:11:c5:6c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Jun 28 13:02:45 2025 GMT
Not After : Jun 29 13:02:45 2025 GMT
Subject: CN=5df75bf85c328dc05970f99bfd5cdc8d75d34f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:9e:26:63:c6:ca:1c:35:f2:8c:df:5f:d9:
a0:de:58:25:5e:2a:12:24:62:16:cf:18:de:f6:aa:
a4:0f:c5:c0:80:ed:58:9a:3c:1f:46:16:76:17:c5:
02:fc:43:92:53:7a:4d:92:65:dc:02:00:77:5f:85:
76:18:fd:47:bf:4f:60:f9:78:79:76:c9:6d:8c:31:
fa:f1:b3:8b:cb:2e:23:ec:61:48:c9:5a:ac:53:38:
93:c6:41:f9:0f:ae:dc:df:18:e6:29:2d:ca:64:e7:
e1:29:6f:e1:49:9a:df:c8:44:2d:0f:f2:d8:47:86:
bb:d3:c4:ec:2f:c1:d9:d5:75:d4:9c:45:0d:67:5c:
05:34:55:23:f9:1f:ee:d6:fc:bc:77:14:a6:92:3d:
8d:ea:a4:45:b8:1e:b0:84:f0:7a:b7:ac:8a:78:55:
63:bd:37:d0:eb:41:d0:2f:17:42:e0:18:d3:3d:3c:
bf:5f:8f:96:d7:62:cf:cd:48:db:be:2e:6c:78:96:
79:1e:d8:fb:a8:c9:da:8b:9d:1a:4f:67:73:00:76:
35:9f:0a:79:97:e2:9f:86:a0:79:b2:c0:7e:49:71:
aa:46:36:b2:05:37:ba:8d:02:e3:fb:c1:79:38:05:
ed:68:fc:7a:aa:80:f7:b8:11:dc:8d:a4:a7:d2:9e:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F7:5B:F8:5C:32:8D:C0:59:70:F9:9B:FD:5C:DC:8D:75:D3:4F:08
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6c:f8:09:03:d4:aa:89:82:9f:cc:52:a2:44:63:eb:bb:11:
30:9b:67:b0:67:5c:a0:b6:d4:fd:a6:c5:09:58:9d:53:c9:7b:
66:60:83:39:42:8e:af:ba:f1:a2:48:c8:e4:64:ae:25:45:9f:
d6:48:68:84:0c:52:55:49:ba:e8:50:a3:37:bf:38:50:33:74:
68:2d:39:26:42:a5:49:3f:5b:c6:f0:a0:52:e3:a1:ee:c8:2d:
40:8e:3e:41:8c:f2:5e:96:9f:46:6b:20:20:a1:27:6c:1a:f1:
de:09:5a:96:ed:f7:6e:47:37:4e:ba:40:59:66:e6:df:73:6c:
c5:fc:dc:74:9b:c3:54:5f:bc:4b:42:91:e8:71:78:f2:75:cc:
1e:f4:da:2a:3d:8d:c7:3d:5f:73:86:e2:8a:78:4b:f9:aa:13:
de:d9:65:cb:b5:ce:39:d2:b1:28:5a:0e:4f:78:61:97:c5:3e:
4a:9b:af:e5:de:6b:01:bc:58:dd:33:95:d7:93:b1:0c:c5:de:
2f:18:28:fd:f9:72:69:be:08:0c:3d:37:5b:a3:d4:47:47:cc:
0d:4e:64:39:59:c4:c6:39:fc:d4:b8:c2:1f:ae:2c:7f:5e:72:
47:67:58:3b:4d:17:1c:67:06:f1:54:ba:07:de:da:54:df:dc:
8b:69:b2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:48 2025 by rpki-client