Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
File: sVS0YRuM6ChydbxHppr6N4tBQL8.mft (raw, json)
Hash identifier: hB4/4XhvGAId0RRC7a0+Tp3m8NyTeHTKSLjfpNB26Q8=
Subject key identifier: 63:A9:87:3F:14:9B:7A:49:BA:F7:0C:6A:DF:B6:18:D5:59:9F:A4:42
Authority key identifier: B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
Certificate issuer: /CN=b154b4611b8ce8287275bc47a69afa378b4140bf
Certificate serial: 0197B6D7283D2A6263CA9583E74F71E57D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
Manifest number: 0237
Signing time: Sat 28 Jun 2025 14:00:43 +0000
Manifest this update: Sat 28 Jun 2025 14:00:43 +0000
Manifest next update: Sun 29 Jun 2025 14:00:43 +0000
Files and hashes: 1: _cD4yVpG6lnwIeREBiUBwAEeAKA.roa (hash: jnUyAI5YI7WapRKSFkmTN6SUzj6iHT0vp3PMP0QrWlQ=)
2: sVS0YRuM6ChydbxHppr6N4tBQL8.crl (hash: K3Rgfr4uotz3HCGmLQANxWauFRmtcCAFcpes8sIdHco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:28:3d:2a:62:63:ca:95:83:e7:4f:71:e5:7d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b154b4611b8ce8287275bc47a69afa378b4140bf
Validity
Not Before: Jun 28 14:00:43 2025 GMT
Not After : Jun 29 14:00:43 2025 GMT
Subject: CN=63a9873f149b7a49baf70c6adfb618d5599fa442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3d:f8:56:7c:37:c9:59:fd:2e:04:6f:d8:5e:
40:7c:ca:31:bf:cd:3b:b4:fe:f8:54:71:1c:b6:c8:
0b:22:28:96:dc:9a:d9:6a:d1:ac:4d:cc:f9:ad:c5:
29:43:39:8e:93:39:cf:1e:c1:03:1f:4b:bf:52:71:
50:28:fc:88:61:ea:b8:59:92:54:d7:8e:ec:97:39:
41:0e:a8:60:44:15:21:df:18:81:08:ca:12:d8:ad:
59:c6:22:2b:5d:ad:44:1e:e0:38:62:af:0d:3e:f9:
8e:a2:8d:f2:f1:1c:7e:23:bb:bf:a9:70:be:50:e0:
ca:60:d3:7e:b9:14:65:bb:47:c3:69:f3:9f:03:34:
5b:d4:9c:8c:42:2c:1f:fd:62:11:85:f2:14:d1:ab:
d6:eb:32:55:13:70:3e:78:98:52:e2:28:fb:cc:10:
2b:09:71:b3:9f:35:35:26:d7:65:bc:82:f6:f9:3a:
96:c6:cd:19:86:4e:71:5e:29:c7:0a:5e:c1:aa:13:
2e:0d:0a:df:32:17:75:fe:e6:4c:41:6c:1e:ad:bc:
cd:e3:52:8c:f6:33:81:b7:1a:6f:14:51:bb:d5:e7:
d9:a3:19:1d:9a:0f:e6:80:fc:26:0a:61:28:92:0c:
4b:ba:ed:bf:4b:fd:fa:17:de:e0:d4:cb:d3:ca:9e:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A9:87:3F:14:9B:7A:49:BA:F7:0C:6A:DF:B6:18:D5:59:9F:A4:42
X509v3 Authority Key Identifier:
keyid:B1:54:B4:61:1B:8C:E8:28:72:75:BC:47:A6:9A:FA:37:8B:41:40:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVS0YRuM6ChydbxHppr6N4tBQL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bf2c25-6928-4bcb-84fb-4b12475851b8/1/sVS0YRuM6ChydbxHppr6N4tBQL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ae:3b:53:68:c2:1a:a5:84:6c:d6:d4:0c:63:04:36:fb:d5:
a9:18:78:51:4b:be:58:f6:3f:01:fe:38:5f:84:01:7f:01:40:
d2:57:ea:d7:b5:37:65:97:90:fd:ba:ee:91:66:d5:f9:8b:4f:
e0:d4:aa:60:28:19:ce:09:cf:25:ac:d5:cd:07:84:46:45:af:
c4:6b:f2:73:9d:47:8c:48:f7:f8:68:5c:f5:60:ce:56:07:65:
ec:26:17:74:e5:30:64:4a:85:b8:c0:ee:d3:cb:f2:76:7f:f4:
b6:be:e9:84:a4:7a:4a:24:6d:65:cb:7c:e1:2e:ad:1a:4f:9d:
e7:41:b0:08:39:5e:d4:3f:a0:0d:b4:c1:09:87:3d:20:35:7d:
77:dd:4a:20:a3:d1:b6:46:f1:13:2c:fc:c5:02:cc:8b:66:f0:
d7:1b:f5:19:36:f1:6b:9e:01:a9:39:0f:8c:15:9c:5b:a8:21:
75:a8:8c:b3:d4:76:77:7c:ab:c4:93:13:d1:8a:9d:bd:40:c4:
a8:4b:a4:cb:f0:a9:64:49:10:e6:0f:2a:cd:34:0f:82:98:f7:
33:13:17:12:af:aa:3c:44:ee:88:54:fb:83:54:36:92:a7:d9:
fd:f6:19:01:31:c7:d3:93:2f:54:5f:49:9f:d3:c7:7a:b8:e6:
10:74:31:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:28 2025 by rpki-client