Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
File: sYfM7EmqX2aqAmSNkbSi7o_3veY.mft (raw, json)
Hash identifier: 49H8Fx5uyFiCngxuLM7pVSUIw0FyOXZLrVDpYkCjKJQ=
Subject key identifier: DC:CB:43:19:7B:3A:3C:64:AB:71:CA:56:56:E7:69:BB:F0:E6:64:97
Authority key identifier: B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
Certificate issuer: /CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Certificate serial: 0197C5A58D81397C9BE26FF63F28713DE1EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
Manifest number: 02EB
Signing time: Tue 01 Jul 2025 11:00:50 +0000
Manifest this update: Tue 01 Jul 2025 11:00:50 +0000
Manifest next update: Wed 02 Jul 2025 11:00:50 +0000
Files and hashes: 1: OfdMOcUbbc7oEojb1zo08qkIRuQ.roa (hash: IicrU+y2VcBYbd4QyyTDfZZRjrYA59p1rvePkvFgFRg=)
2: sYfM7EmqX2aqAmSNkbSi7o_3veY.crl (hash: 5ZtqO+4Z5jlI6dp8lbWGIh6RoCopTQfRFABu/PYRqGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:8d:81:39:7c:9b:e2:6f:f6:3f:28:71:3d:e1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Validity
Not Before: Jul 1 11:00:50 2025 GMT
Not After : Jul 2 11:00:50 2025 GMT
Subject: CN=dccb43197b3a3c64ab71ca5656e769bbf0e66497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:7a:9d:5e:7a:56:ea:a0:7d:70:3f:20:99:
a8:c1:15:d6:15:da:7a:ee:15:d2:2b:7c:4f:f9:ff:
31:9c:7c:d4:2d:fe:43:58:6a:b2:67:f6:d4:44:06:
e3:83:f0:1c:00:89:0a:14:f6:6b:2b:f1:f6:96:12:
ee:1a:1e:9c:93:cb:fb:57:b9:4b:d9:6a:1b:59:23:
d5:19:39:a6:df:c1:70:9e:85:89:c0:1a:01:a3:f8:
dc:e7:94:c6:3c:b8:fe:c6:4a:8e:4f:92:6f:bb:63:
5e:98:95:4b:21:cd:fd:ca:88:99:7a:05:f0:23:ae:
dd:d1:d2:37:65:0d:c9:bc:dc:93:ac:92:f9:cf:51:
27:23:21:5d:aa:89:9c:a5:9c:06:52:c3:99:d5:8f:
9f:be:a6:9d:bd:59:8e:08:aa:ef:d6:b3:1f:9c:79:
e7:cd:5f:b1:20:ce:24:58:30:89:f1:a1:14:6d:4b:
cf:65:05:04:7d:86:e6:3c:61:c1:39:a0:f0:c3:8b:
67:58:8c:14:99:b4:c4:7a:62:d5:42:e9:6b:86:ca:
cf:28:15:4b:98:2b:5a:a0:9b:75:12:12:43:ec:86:
88:71:14:3c:ad:c0:54:ff:c1:db:f5:42:0a:4d:98:
8b:bb:07:7f:b8:ca:cb:3e:d6:a3:11:e6:5f:38:10:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CB:43:19:7B:3A:3C:64:AB:71:CA:56:56:E7:69:BB:F0:E6:64:97
X509v3 Authority Key Identifier:
keyid:B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:87:68:dc:ee:dc:cc:81:1a:86:ec:12:e0:05:69:e0:41:a0:
70:cc:2a:f3:6a:24:cb:ba:f9:6a:1e:6a:7a:42:0e:67:27:b0:
90:cd:86:c5:d5:f4:83:92:fb:10:6e:f2:1f:06:15:14:c6:76:
c9:fe:f0:9c:5c:79:56:1d:5c:1a:77:59:71:45:09:72:3c:c4:
28:df:61:32:91:37:12:51:5b:00:7e:29:35:15:51:f8:f9:d2:
ee:d2:f8:87:53:c9:35:a5:7e:b7:da:46:4a:e2:ca:8d:9e:1a:
48:06:e8:db:df:e0:7a:07:13:d8:dc:80:bd:13:1c:b4:e2:fe:
8c:48:63:0b:ff:74:49:22:27:30:ce:96:7e:97:ea:f6:79:d1:
b5:4a:de:af:06:2d:31:96:bc:b3:6c:60:8a:c0:ce:b0:ca:f4:
49:78:5e:0d:d9:7e:47:a1:ca:36:b3:21:7b:44:89:98:90:7e:
4c:05:be:57:bf:be:72:52:3b:b4:d0:dd:89:fd:7d:5f:9a:74:
0a:99:85:d8:c9:14:be:50:35:ed:98:45:5b:e1:1d:8a:01:70:
1d:59:48:a3:ab:9e:d8:2e:3e:c9:9f:90:87:49:f7:99:78:11:
83:17:89:7d:b8:7e:e0:c6:76:73:24:8b:c2:a9:bc:d5:17:25:
54:16:b9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:11:14 2025 by rpki-client