Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
File: sQeA3za1uUL2YOQDov5ginXk5X0.mft (raw, json)
Hash identifier: OavICR90yjVgOwQ+YNHLg0bibVEfMTqi3hGPbBTNk5g=
Subject key identifier: CE:22:F6:5C:B4:14:03:5E:15:93:80:E6:DD:84:00:65:4E:38:CC:8D
Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
Certificate issuer: /CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Certificate serial: 0197B77C0C88CC2129AC79A9C83F6F4EEBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 17:00:49 +0000
Manifest this update: Sat 28 Jun 2025 17:00:49 +0000
Manifest next update: Sun 29 Jun 2025 17:00:49 +0000
Files and hashes: 1: dc2u-8bkbufd4cw_d9F3xDaopuc.roa (hash: Umyl5IxYyTMcYEGSrVHWEMRSVhNtzrLiUEYgvIObXig=)
2: sQeA3za1uUL2YOQDov5ginXk5X0.crl (hash: Tcu/w2oYlrw2zDUAY+8EN1BFCpPSY7P40BnNC+pLpOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0c:88:cc:21:29:ac:79:a9:c8:3f:6f:4e:eb:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Validity
Not Before: Jun 28 17:00:49 2025 GMT
Not After : Jun 29 17:00:49 2025 GMT
Subject: CN=ce22f65cb414035e159380e6dd8400654e38cc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f8:fb:cb:4c:a5:1b:34:97:7d:ad:11:4d:4d:
91:a6:a6:ed:b8:ef:04:90:4e:a2:99:79:9d:2d:84:
ce:f5:8d:36:a2:c9:5b:0d:11:7a:43:a2:20:02:b2:
c7:99:7e:79:6d:18:14:43:ac:e6:b7:9c:28:1f:19:
8b:36:7d:48:dc:c0:6f:68:09:41:f2:69:f7:f4:0c:
1c:6d:27:46:14:2f:ce:47:92:8c:df:98:9e:bf:95:
bb:d9:19:94:e6:34:cd:29:38:1a:99:08:22:5f:9b:
2f:e2:e8:c6:8f:5a:8c:a7:2e:92:ef:8d:9b:48:5e:
cd:04:01:d2:3f:0c:b3:16:39:8f:2e:48:77:16:13:
34:73:12:1c:a0:4a:bd:7f:6f:a0:11:c6:74:b9:58:
f5:93:a8:81:70:d3:21:2d:a8:0e:80:00:ab:45:23:
9c:a5:b4:ee:47:1c:c7:bb:e1:86:15:d2:22:e3:d4:
d4:8c:e6:be:82:31:c4:86:e3:47:01:60:e7:55:c9:
b2:f2:91:10:3a:7a:e7:6b:42:9e:ed:6a:5b:d7:e4:
e0:ff:16:67:0b:cd:24:67:56:f0:48:bb:60:41:dc:
3f:ce:f2:f0:c9:09:29:27:1e:46:3b:63:b6:7e:e3:
39:92:79:0f:12:c6:a0:3e:6b:bd:5d:fc:c7:82:be:
a7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:22:F6:5C:B4:14:03:5E:15:93:80:E6:DD:84:00:65:4E:38:CC:8D
X509v3 Authority Key Identifier:
keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:1a:70:e8:d4:60:1d:ae:35:53:16:65:82:d3:d1:b4:d0:00:
45:e8:40:a9:88:95:00:7d:dc:2f:40:00:6a:00:83:b8:16:bb:
20:6c:ba:20:4d:1c:fc:a8:3a:55:e7:b9:ea:47:1a:4b:19:56:
29:ad:17:14:15:6b:ed:6d:c5:27:66:6b:3d:73:f8:47:27:82:
7c:42:6f:f3:67:e2:a7:0c:ed:c9:f4:80:b9:09:e1:a9:74:c6:
ed:0e:75:34:75:a7:5c:8f:a8:be:02:b6:19:a5:5a:9d:15:db:
06:38:68:8c:65:23:c8:8b:a6:b3:1a:2e:f9:30:5f:45:31:20:
74:6d:62:3f:3d:4d:bb:ec:4b:ec:1d:7d:08:15:1a:f3:c2:9d:
f6:e8:a5:eb:ce:d8:ba:3c:43:e7:fe:38:60:15:de:b7:d4:28:
cd:c9:ed:b2:5c:d1:1d:d1:aa:19:31:d3:bb:54:f3:e5:03:d8:
2a:00:44:44:d1:82:b9:2c:36:88:23:d2:22:91:40:85:78:90:
bf:21:fc:bd:52:1b:a0:46:4b:a7:32:5e:80:ff:cd:7e:04:a0:
fc:9d:32:59:f2:a4:d1:7f:e5:b4:78:ec:ae:63:c8:46:cb:ac:
e6:71:76:14:f5:3f:6c:e1:29:d5:d8:f7:82:31:63:a8:df:21:
57:d6:c0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:59 2025 by rpki-client