Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
File: seWdsb2vITytIQJfd4-slhj9TpE.mft (raw, json)
Hash identifier: hhQ3qkKO2qSt0DI8PK+nPGl5tT+vNMRDw4gNtRrZk9U=
Subject key identifier: E1:69:60:73:89:DA:66:E3:0A:C4:7F:CA:68:27:E2:1E:BA:D4:82:F3
Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
Certificate issuer: /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Certificate serial: 0197C2A464AEA0330459BADB6A38FEE4FB9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
Manifest number: 0570
Signing time: Mon 30 Jun 2025 21:00:42 +0000
Manifest this update: Mon 30 Jun 2025 21:00:42 +0000
Manifest next update: Tue 01 Jul 2025 21:00:42 +0000
Files and hashes: 1: Y6XguoASkuj117zapWikDdhsOwE.roa (hash: cYRIxVqFr0BZZuT1yz+/1pm1CRjn1QkJKZ6Frd8lRoI=)
2: rJqP0FlZEZ4nTdC9T0nsIw-r0R4.roa (hash: 0/AMhBxslSHnkSz/7atutBB8j75xjJ93LSUDUChOOQk=)
3: seWdsb2vITytIQJfd4-slhj9TpE.crl (hash: a6KoOjLwdkN9nSpmSyMI/ILmJHjS+1e4S3HXGHB4iKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:a4:64:ae:a0:33:04:59:ba:db:6a:38:fe:e4:fb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Validity
Not Before: Jun 30 21:00:42 2025 GMT
Not After : Jul 1 21:00:42 2025 GMT
Subject: CN=e169607389da66e30ac47fca6827e21ebad482f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ed:cb:ba:b5:ec:e1:a0:ef:c8:19:0d:7a:6e:
b2:a7:98:60:e6:0c:3b:50:47:17:67:06:16:1c:46:
81:39:e4:7c:7d:c7:1b:87:35:e0:bc:0b:0d:a0:25:
fe:74:cd:f9:58:a4:f3:cd:58:93:91:b7:cd:68:fd:
a1:c0:57:a6:6b:09:80:0e:6f:d0:0b:ad:f7:5a:52:
ce:3a:a8:2b:32:24:55:ac:6f:12:e4:71:c1:12:0c:
2d:f5:aa:62:62:79:04:bd:01:64:5d:93:e0:3a:f6:
de:ce:b6:e2:a1:82:de:27:6f:be:b8:64:23:fc:f5:
08:7d:cc:b1:a7:ea:a0:93:6b:6c:50:7a:86:7b:97:
e1:72:51:be:0f:08:a7:48:8a:8c:d5:15:59:1f:af:
fe:c8:b7:f1:59:ca:3c:77:1f:8d:56:66:c4:8d:7c:
57:66:e7:58:50:f5:0b:07:a4:aa:d4:32:ae:15:44:
02:22:75:37:20:db:55:22:09:eb:d3:26:90:85:1c:
21:eb:87:d4:d3:68:c4:83:cf:a2:1b:cc:ac:3f:8f:
6a:55:3c:46:84:6f:81:48:2b:f8:5d:ad:22:63:1f:
71:d2:ad:1c:f7:ed:92:b0:7f:24:08:ea:7b:f0:62:
46:86:04:18:c4:ce:37:ea:51:86:1c:6c:10:f7:f0:
6e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:69:60:73:89:DA:66:E3:0A:C4:7F:CA:68:27:E2:1E:BA:D4:82:F3
X509v3 Authority Key Identifier:
keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:86:ca:9a:14:03:61:b4:07:f8:c4:da:2d:59:8d:c8:88:33:
1f:1f:f1:3a:1b:b4:c4:91:4a:11:d6:75:41:e8:1f:9c:48:fa:
3e:8d:78:e7:9f:40:d2:a7:41:8c:31:bb:08:c0:67:fa:46:ba:
3b:05:2c:2a:bc:70:f2:9c:40:0b:6b:d6:e6:9a:ef:e3:e6:b9:
10:20:06:3d:e2:2c:58:0d:34:2c:8d:a5:12:f6:3a:41:75:63:
0d:c6:ad:37:8a:3a:0d:45:1d:e4:8d:db:73:6c:17:46:18:88:
66:98:5e:58:e5:57:e4:bc:c3:68:0f:b3:28:dc:a7:f1:b2:a7:
31:0a:ab:c3:e1:3a:58:13:ed:51:77:44:f1:25:e0:e3:4d:be:
ee:c6:21:9d:1d:b7:4c:bf:82:65:fb:f1:27:4a:3f:4e:ef:21:
09:c6:5f:f1:26:7d:0c:7c:9f:30:09:39:a6:5e:10:f1:f2:ca:
12:ec:ff:30:19:c3:ea:fc:8f:7d:58:e4:bc:93:20:8c:ba:5d:
41:74:91:69:3a:49:82:8f:5a:bd:09:b4:e8:b3:f8:82:62:bf:
d5:28:7a:75:40:44:2e:9a:11:18:8d:e9:b8:10:e8:18:be:81:
43:28:f5:84:40:aa:02:65:dd:27:75:68:a6:c3:5d:d5:ca:19:
4b:88:e6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:46:41 2025 by rpki-client