Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
File: Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft (raw, json)
Hash identifier: 4aHRZjB1hPTzSo6FmrB972HJnxzxSM6GjRazFTaFiwY=
Subject key identifier: 62:3B:C0:1D:C6:BA:F4:A8:A0:16:BC:3E:71:A7:DF:FC:90:65:59:BB
Authority key identifier: 4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
Certificate issuer: /CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Certificate serial: 0197B7B31A77B31D0A4BE7DC25DF71F98194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
Manifest number: DE
Signing time: Sat 28 Jun 2025 18:00:57 +0000
Manifest this update: Sat 28 Jun 2025 18:00:57 +0000
Manifest next update: Sun 29 Jun 2025 18:00:57 +0000
Files and hashes: 1: AD-andXzbsJQ6-EJVFm7YfqJqyA.roa (hash: EQKBZSFz17cerT07f9V2gKbXedpsxOfFN/33BYuE0nE=)
2: Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl (hash: IN1kBwIrbwQ2QNdpCPMRMjBt6Zv/Pr5EqXls2QVvf+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:1a:77:b3:1d:0a:4b:e7:dc:25:df:71:f9:81:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Validity
Not Before: Jun 28 18:00:57 2025 GMT
Not After : Jun 29 18:00:57 2025 GMT
Subject: CN=623bc01dc6baf4a8a016bc3e71a7dffc906559bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:36:61:88:7a:e8:86:e5:20:5e:b8:ae:20:36:
b2:94:4e:7b:8f:78:46:b8:fa:c9:bd:79:c7:18:51:
ce:be:92:24:0e:9b:94:0a:8f:e9:9e:18:6d:c9:e5:
00:17:38:9b:08:58:7d:ef:82:3a:80:a0:b7:ee:8c:
8c:07:b4:c6:70:5d:d6:ad:9d:d9:f8:35:71:13:16:
de:5a:6c:54:be:ec:24:91:14:e6:27:17:db:8d:0f:
57:f8:52:95:e6:23:6d:19:07:4a:28:97:b4:05:6b:
e7:7c:fb:a4:23:87:51:a4:1a:cb:26:af:ef:22:1b:
26:05:88:b6:32:3a:48:d2:8f:65:62:5c:09:8b:02:
4b:37:e1:52:68:e3:d9:15:2f:35:8d:cc:01:64:0b:
4f:87:74:99:cf:d9:0d:e5:1b:04:95:8b:58:3f:c4:
48:02:14:f6:12:49:d2:1f:a4:5a:91:19:c7:71:2e:
9f:f8:98:ef:2d:ee:ff:06:db:1e:6d:65:d9:c1:26:
fa:84:55:4d:39:e1:01:fa:04:1c:42:7c:ed:5a:75:
82:5c:9f:dd:75:7b:24:a8:c0:91:ef:1e:bf:a3:d3:
3d:c2:9d:b5:b7:33:0c:70:be:b0:8a:63:2f:63:1e:
03:64:3c:bf:9e:42:16:eb:77:21:89:41:46:c0:0f:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3B:C0:1D:C6:BA:F4:A8:A0:16:BC:3E:71:A7:DF:FC:90:65:59:BB
X509v3 Authority Key Identifier:
keyid:4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:fa:1e:17:f0:19:06:69:d5:91:4e:5f:1c:2e:e3:21:f2:26:
4c:a2:53:8c:33:83:e1:5c:3f:2d:75:b3:15:95:2e:3a:7e:54:
0d:d6:c7:a7:76:e2:51:99:c2:ae:e3:ba:01:31:b8:cd:c6:65:
e8:7e:38:a3:a7:d4:17:46:5f:47:4d:1f:0c:1e:f7:03:22:8c:
16:3c:ec:68:ba:20:13:4e:5d:eb:7b:cc:78:67:d5:1e:e2:e1:
86:9f:9c:03:aa:29:44:2c:37:31:8d:dd:ed:3b:37:9c:8e:9e:
83:ac:03:ed:ef:a3:bc:16:83:b0:da:fe:62:24:6b:29:b3:9b:
ca:dd:92:96:72:14:e2:89:cf:eb:1d:b8:85:70:eb:a1:22:cc:
46:0f:02:5f:e0:09:0b:76:85:40:fe:98:d2:92:cf:56:62:cc:
02:3e:3e:41:46:a7:7a:62:78:0d:e0:7e:78:5d:20:45:a4:9e:
36:5c:44:d6:0a:ac:d5:58:ee:0f:27:48:29:9e:9d:e7:01:59:
59:1e:24:b1:af:e3:48:e0:68:57:a7:0d:79:c2:09:45:67:06:
20:3e:3d:45:9a:f2:d9:60:58:80:32:36:31:f8:76:3e:c3:a6:
2f:a1:97:97:d0:f3:d5:e0:7e:da:c2:be:0f:82:1e:85:6a:36:
eb:99:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:07 2025 by rpki-client