Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
File: sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft (raw, json)
Hash identifier: rQfROgjUjHenZ4a1+w0sddRQEbW+3bLFHWLFU9WGFXA=
Subject key identifier: 36:58:2C:A7:02:92:51:9B:62:C4:1B:82:6F:EE:8E:BB:37:24:9E:A3
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial: 0197C61361A3950D72A5DEBFE9515F55D59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
Manifest number: 0F4D
Signing time: Tue 01 Jul 2025 13:00:48 +0000
Manifest this update: Tue 01 Jul 2025 13:00:48 +0000
Manifest next update: Wed 02 Jul 2025 13:00:48 +0000
Files and hashes: 1: MLxgcAFNN-a_n0hgMIOfT5C141o.roa (hash: ewiYdgPU3ZjjkZdT9FRRd/GKYeBkT/vZjdgs+F+3aZo=)
2: sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl (hash: Bmyq0VG76dEte0Kg76a0RoTXchqRFI6fRxm5vci+o1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:13:61:a3:95:0d:72:a5:de:bf:e9:51:5f:55:d5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Validity
Not Before: Jul 1 13:00:48 2025 GMT
Not After : Jul 2 13:00:48 2025 GMT
Subject: CN=36582ca70292519b62c41b826fee8ebb37249ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:ca:fa:04:57:a1:0b:23:bc:cc:bf:24:ec:
1e:b4:ac:32:c1:52:61:dd:68:34:5f:41:fb:5e:a0:
63:0c:8a:2c:50:02:9a:b6:be:b2:a9:2b:20:90:92:
43:37:d3:4f:c8:28:17:60:e3:e8:c6:f4:a2:9a:e5:
c7:36:4e:b0:76:0d:da:a9:7d:2f:c9:9f:d8:3c:36:
8f:37:6f:c4:fe:a6:64:a4:4f:35:cd:8b:0b:77:be:
b1:9f:bb:83:fd:9a:40:c3:e9:04:10:d5:41:96:a9:
35:06:04:2d:be:86:69:06:ff:e9:72:64:e7:91:4e:
ae:fc:18:70:7b:71:e7:f4:de:ad:61:a9:b6:35:96:
55:3a:5d:b3:55:5f:c6:dd:76:bf:9c:b3:10:e2:bf:
c4:dc:43:13:a5:7f:a9:f1:1c:96:1e:ec:ce:e8:2b:
e8:1c:1c:35:66:24:f1:e3:12:3a:44:de:e4:9f:5f:
4c:7f:4b:af:73:c8:4d:d9:b5:cc:10:be:4b:24:85:
04:1a:d9:a4:fd:74:7b:15:60:cd:53:f6:14:9a:35:
3c:d9:68:31:e3:95:4c:e5:50:04:b1:8b:78:a2:45:
ca:27:27:b9:d2:5f:d6:88:76:26:6b:51:29:f8:86:
5a:95:ff:ac:b1:d0:5b:ff:00:ad:9c:e2:ba:7b:b3:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:58:2C:A7:02:92:51:9B:62:C4:1B:82:6F:EE:8E:BB:37:24:9E:A3
X509v3 Authority Key Identifier:
keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:03:f0:1c:9d:31:ec:b6:a1:8c:fe:9a:8c:ee:f7:34:04:0a:
07:9b:2c:73:39:91:ff:ee:58:f0:da:9d:b7:95:32:d4:4b:b7:
83:0e:26:86:ad:a8:b4:67:43:84:f8:db:3f:2f:63:f1:a1:0c:
96:3b:52:05:79:85:f4:0a:e3:87:76:f1:2a:67:7e:50:5a:08:
51:3b:df:98:2c:95:75:7c:d5:76:a0:cf:f3:bd:46:c1:c3:21:
2a:fa:4f:62:e6:a3:b2:3c:37:15:2d:34:a5:4f:7e:c6:fc:ef:
46:3b:03:ad:32:21:11:52:5c:38:27:fe:11:c9:48:81:cd:64:
60:64:e7:d3:f7:d1:fc:18:27:b9:56:d1:9f:b7:69:2f:b0:95:
b0:2c:2d:97:f8:76:b3:e4:4d:1b:5c:9b:68:4e:e5:3d:e5:3c:
6c:59:9f:7e:cf:db:f3:0d:52:1a:58:9d:a8:41:82:08:55:7c:
4e:c5:7c:60:f6:ca:6b:3c:51:70:ca:c9:fb:e9:65:d1:af:51:
c2:d3:2e:27:5b:63:16:f6:61:68:d0:12:86:d3:1e:63:95:63:
eb:3a:45:f8:9c:d2:9b:c9:0f:13:e6:91:ee:23:74:0b:e4:10:
07:c7:33:2d:f6:65:17:b3:7a:85:6c:ff:11:1b:da:66:0a:9b:
4b:26:b2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:40:05 2025 by rpki-client