Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File: sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier: h5IV+PYqwwDRgWAsLPxfUfGJCNj9wqftbeBiR7+sYC0=
Subject key identifier: B5:70:E3:A4:FC:1A:C3:32:E6:82:92:60:A4:1E:6F:D0:E0:52:F8:B8
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial: 0197C15AE583486CEBE44BAB0A50803FC8A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number: 02DD
Signing time: Mon 30 Jun 2025 15:00:48 +0000
Manifest this update: Mon 30 Jun 2025 15:00:48 +0000
Manifest next update: Tue 01 Jul 2025 15:00:48 +0000
Files and hashes: 1: GdWQO6-P47cktCmKKEisZrhfGfE.roa (hash: Z6nlvl00PmRVPP4gBIIOTo5OQ+SqW4m3DvYkZPEOmzk=)
2: qVO6LhE7z2bZkoKlkX0beS7hTAc.roa (hash: XTXUYf4gL001nX+kLZ++ZcjMPFy332S2u/yOlN4Emdo=)
3: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: MHQ3CJrtMtxizpgsBOurkm0MmhsLW6N+IgE4qHIG6Kk=)
4: yVlE6wtOmHPbBbPTbGfVtRfQk3I.roa (hash: kF1ch8ftfefkwMb34eMIq7SQs/1Z3Ao5ZWwxrMyDhdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:5a:e5:83:48:6c:eb:e4:4b:ab:0a:50:80:3f:c8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Validity
Not Before: Jun 30 15:00:48 2025 GMT
Not After : Jul 1 15:00:48 2025 GMT
Subject: CN=b570e3a4fc1ac332e6829260a41e6fd0e052f8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:ca:46:31:3a:c1:b2:2f:c6:1a:2a:30:46:
cd:36:f0:2c:b0:bc:b2:4f:1e:9b:52:41:66:01:fb:
09:3f:4b:5c:d3:3a:46:05:1c:88:41:60:65:c4:4d:
53:5f:19:20:d7:7c:e6:c1:2b:2a:e8:fd:b9:05:a5:
fa:62:3a:92:12:31:dc:24:38:56:f2:95:1c:7a:25:
e1:6f:a3:fb:5f:00:25:af:9e:8d:17:e5:0c:7f:a8:
6c:82:fd:28:65:08:9f:1e:a0:62:44:fd:66:d8:90:
6b:0b:98:24:00:5c:5e:49:e5:5b:e8:26:15:3e:ab:
0f:26:16:af:d4:95:70:b3:cf:46:54:cf:db:c7:06:
82:6a:df:18:4d:65:86:57:78:85:87:41:3a:49:66:
d9:2b:53:8d:7b:a8:c1:20:a3:b0:cb:f4:33:61:5e:
3d:87:b0:7f:bf:ba:2c:00:b3:7a:08:72:1e:63:e9:
95:fc:62:d8:36:49:59:f6:78:16:89:e9:a6:5d:5c:
4b:3a:b7:47:17:b9:89:3b:a7:6f:41:4f:7f:5d:9a:
7a:f1:de:c5:c8:00:c2:d9:cd:25:04:65:50:8d:35:
56:d5:be:bd:d0:9b:a1:45:ff:a9:13:77:99:79:4b:
83:95:9e:c6:ec:a2:90:56:29:b7:ba:7a:5d:f6:2b:
67:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:70:E3:A4:FC:1A:C3:32:E6:82:92:60:A4:1E:6F:D0:E0:52:F8:B8
X509v3 Authority Key Identifier:
keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:09:fc:e9:2f:22:6e:a9:2e:90:ac:dd:26:09:54:3a:6b:1d:
5d:57:a2:31:b2:66:e5:57:40:d5:be:db:3f:fb:f1:19:1f:75:
1a:b5:c0:57:b3:54:c4:67:d7:25:b6:a3:c7:52:93:fc:69:6e:
c7:71:21:20:c8:5b:94:45:c4:e1:4b:75:a0:f1:4e:80:0b:04:
e9:c0:b0:9e:a7:30:fe:55:61:a0:98:38:63:49:65:1f:62:76:
f6:e2:1f:e2:31:29:73:f8:48:10:a3:24:78:ba:ed:56:42:2b:
5b:8e:c2:09:f1:c8:6b:bb:2d:3b:8f:06:3c:77:f7:71:87:e5:
1b:97:f9:e3:a3:63:80:9f:ca:fd:71:44:63:9e:99:19:08:9e:
8f:6f:b0:b7:69:d2:fd:04:11:2c:dd:0c:b4:58:cb:e9:60:3b:
b7:10:36:3d:a7:db:f4:c3:68:66:f7:09:f1:40:9c:ee:1f:47:
d6:f2:d4:d3:51:9b:d9:09:44:f5:28:7b:e7:cb:b8:e2:a9:38:
b1:21:b8:71:75:b6:b7:e3:c1:f2:cf:24:f1:bf:4e:86:bd:d7:
65:32:7e:f8:ae:88:6c:b2:e4:95:9a:74:ac:bd:1b:92:65:1d:
6a:ba:b8:b9:09:de:f2:0b:38:83:ff:6f:fb:16:f7:3e:88:7a:
5c:cf:79:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:39:15 2025 by rpki-client