Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
File: SfA190v2NQvDef8uJTiC0kaO9Yg.mft (raw, json)
Hash identifier: MHBqNiwkGFbE1slrjYQVIhKNBWn7cs7f8NfGnMkFx6g=
Subject key identifier: C6:AE:E1:06:8E:BE:DC:47:7C:4E:22:36:4D:F2:3C:13:D6:05:97:AB
Authority key identifier: 49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
Certificate issuer: /CN=49f035f74bf6350bc379ff2e253882d2468ef588
Certificate serial: 0197B5C4C80F7B5D062CA4871D17795D1D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
Manifest number: 02CA
Signing time: Sat 28 Jun 2025 09:01:01 +0000
Manifest this update: Sat 28 Jun 2025 09:01:01 +0000
Manifest next update: Sun 29 Jun 2025 09:01:01 +0000
Files and hashes: 1: SfA190v2NQvDef8uJTiC0kaO9Yg.crl (hash: J3D+TDxs0nsLg2irVrZ0ELTQsUYTdtUEsT5XcZTNpF4=)
2: wbmZO-HC2oZGGdDiSLm7Xy-yCzU.roa (hash: G5A8w6EKnJ7KNviXJvfO4lYZfTcipjXbs1g3Za2z4wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:c8:0f:7b:5d:06:2c:a4:87:1d:17:79:5d:1d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f035f74bf6350bc379ff2e253882d2468ef588
Validity
Not Before: Jun 28 09:01:01 2025 GMT
Not After : Jun 29 09:01:01 2025 GMT
Subject: CN=c6aee1068ebedc477c4e22364df23c13d60597ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5e:d8:e4:30:9b:cb:2c:0b:e4:19:25:3d:69:
20:93:23:84:72:e2:0f:51:c1:3a:65:ad:33:84:77:
8f:eb:9b:1e:bc:ac:12:2c:e8:08:60:4b:5e:60:4b:
23:75:cd:01:ca:6b:90:64:d1:9c:f6:68:38:7b:5e:
c9:50:77:ad:02:17:cc:df:a2:fe:95:e4:d1:1b:58:
3e:2f:5e:39:ab:36:46:d9:d9:9e:ac:25:02:16:a6:
27:5e:74:a9:5e:80:07:a5:d6:24:59:82:73:93:0d:
1a:c3:2a:19:68:b4:ae:43:9a:97:60:61:2b:35:08:
97:fa:b6:a4:53:32:7d:ee:24:e0:d2:50:a6:de:df:
85:cb:bd:54:f0:1c:2c:77:6d:f7:63:ef:39:30:0e:
87:2a:12:fc:d5:f6:6a:c1:34:44:99:1f:59:17:41:
0d:1c:09:2f:70:fa:2b:af:9c:69:ac:18:28:d2:8a:
c3:a2:23:39:13:e6:b6:43:36:9d:ec:01:91:95:b8:
4f:59:a5:08:c2:ca:d4:78:f6:72:a5:2d:7b:e9:9d:
89:2f:44:a8:49:ef:9d:61:cb:4d:16:d1:1c:f7:4c:
96:92:4e:2f:ab:73:cc:78:07:65:a4:aa:63:32:a7:
ff:43:08:67:9a:7e:bd:60:b1:5a:67:67:76:23:91:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AE:E1:06:8E:BE:DC:47:7C:4E:22:36:4D:F2:3C:13:D6:05:97:AB
X509v3 Authority Key Identifier:
keyid:49:F0:35:F7:4B:F6:35:0B:C3:79:FF:2E:25:38:82:D2:46:8E:F5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfA190v2NQvDef8uJTiC0kaO9Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/02fd8e-2d38-4ab1-84b5-9ef129eade78/1/SfA190v2NQvDef8uJTiC0kaO9Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:79:65:1a:3f:e1:c4:8a:8c:c8:a3:d5:49:42:50:06:fe:70:
ee:2e:19:86:c5:4a:52:cc:fa:35:4a:40:f8:4e:12:6b:d6:38:
9f:a8:26:ed:91:89:8e:4d:87:d5:ce:b1:8b:ed:91:70:6c:12:
82:90:b6:c7:73:42:0c:01:eb:10:fb:56:89:2e:fe:83:33:5d:
7b:2d:42:d7:20:19:01:2b:20:8a:ff:e1:4d:fe:54:28:c3:57:
02:ad:08:72:de:31:e7:b7:37:43:41:17:b6:ce:4f:04:9a:e9:
ad:5f:00:19:09:5e:3b:96:96:6c:cf:02:1d:e9:fe:4c:b5:49:
dc:5e:72:2d:f3:a0:a9:d8:e9:7d:22:c7:d1:7b:88:62:2b:2f:
92:42:c0:c6:41:00:28:d9:20:c8:c6:85:2b:ce:c8:1f:df:9c:
e2:94:cb:c9:20:ae:b4:68:c4:49:19:e0:fb:db:5b:b8:0a:33:
f6:5b:84:f4:52:92:80:59:83:bd:81:9f:39:ef:36:17:b1:f2:
c3:d6:92:8d:bf:72:5d:d3:ea:d5:1a:0a:8a:b5:e2:22:85:df:
b1:21:56:58:17:0d:eb:5a:1b:16:dd:f8:38:23:29:09:e9:35:
22:06:31:79:03:07:21:09:b8:43:ce:99:1b:b7:63:64:ca:62:
86:e8:50:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:06 2025 by rpki-client