Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
File: SVbzCE2TEO-hvAfvMfk0spQfED4.mft (raw, json)
Hash identifier: F2e3VQ4xtji3jgpatPESw8jIg4JLg2/LBwCQtHjyIko=
Subject key identifier: B4:C1:D9:85:7A:AC:DC:CA:AA:6F:25:43:85:97:1B:96:6D:FB:C8:74
Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
Certificate issuer: /CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Certificate serial: 0197B6A092679943B79A8AFE341F5C6B3663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:01:05 +0000
Manifest this update: Sat 28 Jun 2025 13:01:05 +0000
Manifest next update: Sun 29 Jun 2025 13:01:05 +0000
Files and hashes: 1: QocjuYoGfozpr0QiTXkGPfsUrcg.roa (hash: Y8oC4kwoV9mXXZSXGd1lAHQDlPdz5kxQi4KnTi7EYOM=)
2: SVbzCE2TEO-hvAfvMfk0spQfED4.crl (hash: OuJzyFoDXg6SNsfopzYcI8Svyir9UXrcd+AnuQg14qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:92:67:99:43:b7:9a:8a:fe:34:1f:5c:6b:36:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Validity
Not Before: Jun 28 13:01:05 2025 GMT
Not After : Jun 29 13:01:05 2025 GMT
Subject: CN=b4c1d9857aacdccaaa6f254385971b966dfbc874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:9a:33:be:c5:d3:b2:64:e7:66:64:59:11:
79:40:31:58:54:45:38:6e:cd:ea:81:92:18:e9:ed:
77:bc:11:cf:d2:b7:ba:5e:69:b8:c5:35:be:29:dd:
10:ea:cc:46:31:bf:61:d4:38:24:97:05:29:5a:d0:
2e:7c:f7:16:95:cd:41:fc:62:52:56:9b:b1:63:da:
fc:66:6c:35:9e:0d:27:1e:ea:df:36:35:be:af:07:
4c:e2:9b:a5:c6:7a:fc:a7:aa:86:14:b9:7c:24:30:
3a:8f:31:17:77:1f:ef:91:1e:3a:4d:52:7d:76:53:
6f:00:41:a3:5f:15:27:9c:04:01:ae:42:68:3e:88:
f0:76:0a:1f:ab:8a:dc:b6:67:03:b6:43:d7:5f:f5:
a7:79:e3:c5:61:87:47:50:5a:33:ca:3d:de:b3:85:
15:f0:14:88:d8:9e:1f:82:68:33:a6:eb:d5:ba:ef:
a2:3b:2e:7f:6e:32:c4:0c:6a:e0:d1:f2:3e:10:0e:
b1:a5:84:b8:d8:f4:e8:b4:57:4e:f2:8a:fb:55:2a:
a3:1b:e9:86:a7:8a:6a:23:98:10:9a:9a:8c:e8:4b:
c1:d8:50:32:06:62:62:ea:af:77:6a:2a:86:b5:ab:
ba:c6:34:31:cd:05:fa:5e:ee:08:8c:51:5d:10:20:
8d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C1:D9:85:7A:AC:DC:CA:AA:6F:25:43:85:97:1B:96:6D:FB:C8:74
X509v3 Authority Key Identifier:
keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:86:97:58:ef:07:3b:9d:f9:05:d2:7f:29:d4:71:ef:04:0a:
3f:ee:3e:4e:aa:9e:5f:d2:db:d5:ee:b7:80:33:88:5f:55:7a:
38:fb:ad:88:61:3c:34:d7:12:88:d2:80:5c:69:a2:3b:de:d4:
fc:07:6e:06:42:3b:9e:79:5b:f7:37:1a:92:e8:6f:b8:47:7f:
23:f3:f8:7a:b8:5d:35:d5:6d:e8:13:a8:55:6d:37:a4:83:ed:
0d:74:60:5e:1c:18:a8:88:a8:9b:92:01:af:ec:2d:6e:03:19:
e3:6e:02:ec:0e:96:c1:d3:7e:fb:b4:14:8e:17:0c:75:da:b2:
89:a2:63:12:c3:28:a6:14:3f:e3:28:83:14:e8:1e:8e:2c:54:
28:7e:33:b9:d5:33:85:6b:f3:79:ab:0d:8d:86:26:47:d1:05:
81:42:58:df:f4:a4:16:08:1a:cd:c9:0c:0d:83:c8:06:ce:a0:
f7:d4:97:a3:61:87:5f:25:38:32:5e:9a:2a:1c:b4:36:75:7a:
1b:66:2c:28:0e:ed:db:56:5f:0d:eb:ef:ef:d4:c1:0e:31:04:
7c:f0:a2:f1:2b:1b:57:09:5a:1f:10:be:30:00:da:9a:6d:11:
7e:c6:ba:5f:66:21:61:cb:3b:34:a1:c7:a1:4f:4a:f3:60:8d:
cf:e6:87:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:47 2025 by rpki-client