Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
File: SXioZBznhb40aFAwUncj5f3OVio.mft (raw, json)
Hash identifier: UIBwmzSSgP5+J2WoDxe6381F/hXnjSlO+pIvNu40Ix4=
Subject key identifier: 03:9E:18:B5:B8:07:AB:9B:61:48:02:FD:3D:8A:0A:5B:7F:42:9E:ED
Authority key identifier: 49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
Certificate issuer: /CN=4978a8641ce785be34685030527723e5fdce562a
Certificate serial: 0197B6D798CCF317E42882D49C1382F61A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
Manifest number: 05F1
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: BCD_tpHD4CbGfbV_PdrLa7vTpXk.roa (hash: 3ZjEUHk0H2GaQYj5jwvFZHg7bwJy5JXMVYVGmhkBhZA=)
2: SXioZBznhb40aFAwUncj5f3OVio.crl (hash: PcMoXM7OCRmT/sV01OZBAV86zFq8J/twFCAC+QUNLFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:98:cc:f3:17:e4:28:82:d4:9c:13:82:f6:1a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978a8641ce785be34685030527723e5fdce562a
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=039e18b5b807ab9b614802fd3d8a0a5b7f429eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:fa:55:2b:38:96:ed:df:3e:22:d1:bb:8e:
98:68:d2:99:3a:1a:51:49:02:8d:76:70:b7:ba:08:
26:40:2a:78:cd:4f:85:63:da:6a:2e:25:51:fe:f9:
ec:a0:60:32:1b:41:9f:f1:00:63:98:b2:7d:36:6c:
9b:40:14:8a:b3:43:46:ba:24:84:dd:70:fe:d4:b3:
a5:34:b0:40:7b:8e:b7:72:ab:fc:81:da:f4:76:6d:
39:e9:a8:36:d0:38:ba:ae:c9:96:69:d0:45:6b:8a:
fd:15:d2:f7:11:e7:39:8d:d6:2b:a4:f0:83:4f:e7:
23:e0:db:05:d0:ec:c2:2d:8c:5d:55:79:9f:63:2e:
50:9e:77:d4:03:11:8f:42:d0:8d:90:9a:ba:b4:0b:
cf:b9:d0:98:a0:c9:c0:9d:1c:2f:37:85:53:19:44:
d1:84:84:80:43:95:0a:60:52:cd:b3:6c:86:79:72:
c3:ac:45:e4:fc:2e:fc:f3:c2:1c:a4:01:b5:0b:ae:
fa:f9:4c:b0:e5:2f:cf:f3:17:1e:80:d1:4f:0a:7f:
5e:fc:75:a9:92:5d:ac:b0:f4:13:9e:5e:98:50:00:
9d:a4:7e:16:c8:d4:c5:82:c9:dd:dc:86:23:e4:9e:
0f:da:cc:5b:25:ce:68:bd:8c:25:09:ac:c3:35:d7:
77:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9E:18:B5:B8:07:AB:9B:61:48:02:FD:3D:8A:0A:5B:7F:42:9E:ED
X509v3 Authority Key Identifier:
keyid:49:78:A8:64:1C:E7:85:BE:34:68:50:30:52:77:23:E5:FD:CE:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXioZBznhb40aFAwUncj5f3OVio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/093fcb-fe77-449b-a1af-21bc48ef1660/1/SXioZBznhb40aFAwUncj5f3OVio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:88:ff:0e:5d:dc:b0:90:b1:11:78:98:4e:84:39:e2:62:fd:
60:12:e8:f3:a1:1b:18:97:b0:f6:a0:7f:00:e8:87:e9:43:f1:
ab:00:de:df:f3:a1:6a:0c:3a:82:2e:29:86:44:e8:3a:cc:96:
b5:50:3e:cf:16:11:f8:5f:bf:0c:97:ed:52:90:6e:19:26:9e:
16:45:e5:b2:9c:24:fb:c0:c4:6a:56:cc:8f:ba:4c:c3:0a:f2:
f7:4a:37:3e:0e:9d:8d:e2:80:92:6f:e9:07:3c:30:61:36:85:
42:b0:ac:86:06:d3:c3:4d:3c:5d:d2:70:e0:54:c0:72:3f:5a:
e0:62:54:d0:44:b2:1f:b0:ff:c3:cd:6d:53:6a:88:a8:13:98:
75:f9:f4:e1:df:d0:2f:c2:e5:a1:6b:58:aa:4a:f5:7f:a5:24:
eb:80:38:80:64:20:27:76:98:41:cc:22:c0:83:92:69:30:e9:
cb:46:76:da:31:a6:4c:4e:9b:16:42:5f:33:12:50:bb:93:88:
3b:67:49:f8:ff:eb:66:5d:cb:99:79:46:6e:d2:5d:66:b6:cb:
06:36:9c:73:13:d5:6f:f2:89:76:a6:0f:7f:95:3f:7a:ff:e1:
3c:7a:01:25:0a:35:76:2b:26:32:28:bf:75:f5:41:54:fe:87:
77:27:2f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:48 2025 by rpki-client