Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
File: sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft (raw, json)
Hash identifier: weP7PDxv7CwprgrtqHxbQ9/IYjZp3fnSnn5J8YeK6Qg=
Subject key identifier: 03:8A:C2:5E:EE:9C:09:7A:3A:B1:D3:15:A1:DA:76:AD:28:83:48:C1
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 0197CC4D5805886BAC9772061D60F7DE220B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 18:01:50 +0000
Manifest this update: Wed 02 Jul 2025 18:01:50 +0000
Manifest next update: Thu 03 Jul 2025 18:01:50 +0000
Files and hashes: 1: QXyQtT8qy7cZkdePrzNkoMkFsLI.roa (hash: p4NnT1oNWa0lNXGn9ql046BScEcNjINqPaeSDpvSus0=)
2: sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl (hash: YS2mBbUouA4UBbzU8pYejs3Ld6aSOD+7CNKLgQTgv48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 18:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4d:58:05:88:6b:ac:97:72:06:1d:60:f7:de:22:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: Jul 2 18:01:50 2025 GMT
Not After : Jul 3 18:01:50 2025 GMT
Subject: CN=038ac25eee9c097a3ab1d315a1da76ad288348c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:ec:0b:95:55:24:db:7c:c3:0f:2d:1b:6d:
39:ef:72:9e:96:51:11:1b:a1:59:20:fd:15:fa:4a:
2f:9e:4b:78:3d:99:16:67:6d:31:77:a6:8c:af:d5:
48:93:33:b9:81:a3:ed:5e:ca:02:1b:6b:dc:9a:5b:
fa:2e:1f:76:7f:11:8b:45:92:d6:bf:e1:48:9e:fd:
d4:87:1b:33:90:3e:b3:6f:f6:a5:4b:c1:1c:a1:f8:
df:9c:e5:0d:5c:2a:af:16:e7:9b:d7:a8:86:63:47:
42:05:01:7e:12:93:c8:29:d7:3d:73:c3:0e:75:43:
2b:f6:33:5b:92:6a:47:43:44:53:97:f3:93:a9:85:
9e:38:80:ac:83:52:12:a0:ad:ae:de:8c:e6:23:90:
69:2f:a2:bf:43:a2:eb:ac:11:0f:82:24:fa:31:90:
6e:0e:05:42:85:4a:4c:30:f6:91:1f:51:c2:8e:83:
1d:2c:d4:6c:04:ad:57:7a:3d:6f:be:d4:6f:63:a9:
6b:eb:03:f2:96:8b:b6:fe:25:41:a2:e9:ed:da:63:
9c:cd:d1:e8:ee:c4:ad:11:f4:9e:1c:c1:22:e2:77:
e4:22:ec:1e:83:d6:91:3e:19:b0:50:3e:d2:b8:9a:
65:fb:22:fb:16:6f:2f:1b:4a:aa:af:f0:c2:3c:ca:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8A:C2:5E:EE:9C:09:7A:3A:B1:D3:15:A1:DA:76:AD:28:83:48:C1
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bf:20:c3:9b:46:85:f5:c4:c0:a0:42:88:0f:49:a3:07:39:
be:94:39:d6:e9:31:fd:cc:e2:61:83:16:40:52:a0:5e:38:78:
46:04:fe:d0:3a:76:82:17:c6:ea:cc:4d:d4:14:58:2c:d9:c0:
21:ec:f7:eb:b3:e6:75:73:f6:be:ae:78:b9:b0:b9:9b:06:ca:
01:49:97:25:b4:6c:40:56:d0:cf:e0:7e:c4:d5:ae:22:21:4e:
d5:0c:dc:6e:33:bf:be:5a:b0:ec:87:67:b5:75:70:09:54:5e:
72:c9:be:4d:34:43:4f:6a:d5:c2:65:63:14:5b:30:73:07:62:
1d:49:ea:d0:31:30:70:35:e7:da:95:b8:e8:6a:c2:62:47:9f:
65:d7:64:5c:28:0b:cd:90:90:5d:e9:1e:c3:f4:b7:03:cd:4a:
b0:3d:04:27:2d:c2:99:5e:c5:3a:d3:87:e7:5a:1d:5b:28:47:
48:d6:8e:8f:75:91:37:87:c7:c3:be:00:d2:14:9e:f7:3f:56:
73:cb:06:04:5c:7c:1b:f2:db:a4:50:c4:a0:2b:f4:19:b5:03:
b0:68:ab:ff:11:40:b5:3b:aa:37:e2:f6:0a:d8:31:9c:c9:99:
23:9f:d4:94:d1:b0:a9:5c:0d:5d:28:d9:fd:cf:a8:ec:90:30:
3f:33:eb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:58:16 2025 by rpki-client