Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
File: SGfTe3Yct6BfxzPj20M2b6NiU2w.mft (raw, json)
Hash identifier: SiJu01zU8YuS7DvzLuF931WP+21BjkMXPY+PCjMoqtA=
Subject key identifier: 0C:76:79:93:00:D1:3F:19:4C:4D:EA:06:77:53:F2:46:9A:39:A6:C5
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial: 0197B6A2346A2499D0A6CACA4B10B258BE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
Manifest number: 0E8A
Signing time: Sat 28 Jun 2025 13:02:52 +0000
Manifest this update: Sat 28 Jun 2025 13:02:52 +0000
Manifest next update: Sun 29 Jun 2025 13:02:52 +0000
Files and hashes: 1: Nx8KeWYh1HnL5iAJ_PCU7YJun4c.roa (hash: MQQ4lqV14DgsP9PSgDv3Sm3nFuHvBvMEPlVur5pwdsw=)
2: SGfTe3Yct6BfxzPj20M2b6NiU2w.crl (hash: iCnfIxMQ3qKRtvcd0pjcGwmWeYfablxk91rDUSiMeO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:34:6a:24:99:d0:a6:ca:ca:4b:10:b2:58:be:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
Validity
Not Before: Jun 28 13:02:52 2025 GMT
Not After : Jun 29 13:02:52 2025 GMT
Subject: CN=0c76799300d13f194c4dea067753f2469a39a6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:de:89:0c:a7:54:54:d5:2f:36:8f:e0:b0:
fc:4f:c2:5b:4d:24:98:71:99:f7:b6:70:56:62:47:
06:18:9b:c8:7b:93:80:c7:25:fa:a6:db:b4:9d:d5:
0c:32:6b:57:19:68:4b:68:03:37:b4:c7:0a:96:e2:
20:30:f5:e4:a2:ea:3e:ff:8c:d4:71:7a:34:65:7b:
01:73:f8:ab:24:56:e4:df:f6:31:4e:f8:df:49:6f:
86:eb:b1:a7:ed:04:69:42:bb:be:a5:ec:8d:30:1a:
05:0a:51:bb:9f:54:e0:e4:8b:fd:0f:5b:f2:f9:9b:
4d:61:7f:11:1f:0c:45:31:72:ea:c5:fe:04:a0:3b:
80:07:b2:1a:11:67:05:80:85:2f:40:b7:5f:bf:b7:
2d:54:7d:09:2a:20:fb:be:32:28:51:db:bd:34:17:
46:cc:c0:e3:7e:51:c1:9d:af:71:5b:1d:a9:ac:8f:
a4:60:bc:f0:81:3c:62:c4:45:6f:4f:b9:f0:bf:c9:
38:4e:71:eb:dc:ed:0a:89:99:6b:32:68:61:8f:40:
41:d3:2d:cc:74:89:a9:72:d6:72:41:62:a4:43:49:
e4:04:4b:9d:3e:be:3e:83:62:f5:c9:98:0e:d1:aa:
49:81:fe:73:ba:d3:60:70:f6:22:db:72:23:aa:ab:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:76:79:93:00:D1:3F:19:4C:4D:EA:06:77:53:F2:46:9A:39:A6:C5
X509v3 Authority Key Identifier:
keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1e:3a:a5:93:42:bf:93:a5:43:09:f8:66:d2:18:d0:09:2e:
34:e0:af:33:9b:fe:cc:29:c8:c4:1c:32:d1:c4:a0:27:71:08:
96:2c:ac:f0:17:0c:5d:09:4a:be:3b:d8:75:ce:71:69:d1:0a:
15:63:a5:af:31:f4:5d:6d:2f:6f:47:f5:28:bd:32:9b:c6:e3:
d3:45:73:ee:13:ee:ef:d2:35:d9:06:32:f7:0a:09:24:7e:c8:
b8:9e:5a:a3:c8:92:71:81:14:00:d0:a1:16:a5:78:59:fc:81:
37:75:af:78:f2:73:e9:6d:11:93:9f:55:db:a1:be:09:8c:69:
c5:d8:29:de:fe:07:5d:46:07:f6:03:13:55:14:57:a2:f9:17:
cc:8e:00:a6:4e:61:95:92:ab:bf:37:7a:98:0e:e8:c9:3a:be:
cb:aa:f6:99:e3:06:a9:62:8e:64:24:a8:9b:ad:1d:a6:ae:8a:
a3:43:5c:d1:a9:69:c8:46:2a:cf:f6:2f:2f:80:8c:f1:43:b9:
b5:b8:5f:4c:30:18:a4:90:a2:2b:b8:99:c1:22:17:d4:6f:7d:
ae:98:f4:2d:24:e7:ea:ec:ee:37:3e:27:52:f9:1d:1a:d7:15:
ea:cc:77:32:0e:ba:be:9c:55:4d:47:a0:76:ea:11:37:ea:4b:
a7:f5:f2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:17:01 2025 by rpki-client