Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
File: SjQVWNugttuUxVzgbjBv9lGdbvE.mft (raw, json)
Hash identifier: cySGDO8XoNota472Pv9Wa9brkbyMbeanyMeOY75fUTI=
Subject key identifier: 83:36:50:B4:61:09:01:68:68:98:B1:E7:7B:63:0A:D5:38:41:AB:3E
Authority key identifier: 4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
Certificate issuer: /CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Certificate serial: 0197B7454C2307D8C23409FDD5F2CFA2B433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
Manifest number: 07ED
Signing time: Sat 28 Jun 2025 16:01:01 +0000
Manifest this update: Sat 28 Jun 2025 16:01:01 +0000
Manifest next update: Sun 29 Jun 2025 16:01:01 +0000
Files and hashes: 1: SjQVWNugttuUxVzgbjBv9lGdbvE.crl (hash: ZlXRF37NM8T4BDP814sDlgP9Q2clat+2nR6CElzmhEc=)
2: yPI4iRYmm1fwcu2gPm48e2JKRd8.roa (hash: BDXqRGsDwDyhjpTf6VKbLY0k53gndOvrvWCUreaVIQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4c:23:07:d8:c2:34:09:fd:d5:f2:cf:a2:b4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a341558dba0b6db94c55ce06e306ff6519d6ef1
Validity
Not Before: Jun 28 16:01:01 2025 GMT
Not After : Jun 29 16:01:01 2025 GMT
Subject: CN=833650b4610901686898b1e77b630ad53841ab3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:18:15:45:0c:dd:7d:05:70:61:40:e3:b5:
3b:eb:d6:63:d1:71:46:81:20:e9:92:30:83:54:7e:
1d:26:01:5e:da:ba:59:a6:77:41:31:d4:c2:01:2f:
03:02:47:dd:0e:eb:53:cd:e8:3c:eb:b4:0d:cd:2d:
c0:50:d7:c4:62:47:e0:f2:88:60:5f:df:2c:cd:4d:
5b:70:71:f6:76:0b:14:ce:c4:0c:05:95:42:04:fa:
6c:45:78:81:08:30:21:59:f3:ff:19:f6:6b:f0:99:
60:bb:2c:d4:bc:d3:ee:f0:36:bd:8f:05:cd:c9:6e:
5d:dd:88:af:d8:b5:37:d6:8e:87:b3:b4:8b:85:db:
5b:fa:03:9e:3c:e9:aa:83:36:ea:d3:ed:91:cc:89:
9e:37:bb:85:71:18:92:55:e0:ff:56:6e:65:1f:9e:
78:bf:01:13:26:f6:89:63:d3:de:04:ed:61:6f:fb:
95:92:34:01:28:95:ed:a4:e1:31:dd:84:3e:41:2b:
e4:c4:53:7c:3a:75:a8:7d:8e:42:91:89:4e:78:75:
cb:31:0d:bc:90:81:33:ec:64:e8:42:85:bc:78:82:
0f:93:6d:b9:2b:12:72:7a:39:94:cc:5c:6c:40:e0:
17:18:79:90:64:1b:90:47:ff:00:f0:62:54:8d:6f:
df:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:36:50:B4:61:09:01:68:68:98:B1:E7:7B:63:0A:D5:38:41:AB:3E
X509v3 Authority Key Identifier:
keyid:4A:34:15:58:DB:A0:B6:DB:94:C5:5C:E0:6E:30:6F:F6:51:9D:6E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjQVWNugttuUxVzgbjBv9lGdbvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5526d4-afc1-401f-a09f-0b697a3b762a/1/SjQVWNugttuUxVzgbjBv9lGdbvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ac:3a:5f:24:61:12:31:03:ad:4d:6d:15:5d:7d:a1:05:95:
cb:a9:f2:1d:28:b1:46:75:e7:d0:00:8c:d3:55:7b:6d:15:e3:
68:29:b5:75:f5:f3:28:07:4e:cf:8f:8d:a5:bd:a6:59:5c:46:
28:f2:9a:ed:be:e1:b1:3f:51:16:58:41:5b:79:59:1b:cc:af:
20:41:a1:f0:9d:cc:4d:6f:6a:44:11:60:63:e4:9c:68:01:e4:
3e:df:dc:26:0a:18:93:9d:c5:29:a3:e3:a6:5f:a4:2d:d0:36:
c5:34:6c:ba:ba:14:d9:bc:eb:43:f7:42:c4:16:d3:68:55:71:
fd:66:ce:c8:18:0f:f1:c0:e8:c7:cd:52:66:b9:03:36:a5:46:
e5:4c:0e:79:d2:80:17:e7:b8:c6:a8:1b:8d:7c:72:82:12:59:
02:80:5d:03:97:85:1c:c2:0d:3c:0a:83:97:86:6a:4b:c3:f1:
bf:87:35:e9:63:84:40:4f:44:16:ff:4f:55:d6:1e:6e:ae:55:
b5:ab:ae:f5:f5:89:01:4a:93:a6:8a:c6:0a:8a:a6:7b:6e:ac:
8e:6a:fa:a8:f5:4e:f5:dd:7c:46:c8:83:15:10:cd:52:c3:a8:
12:f4:e6:fa:e8:29:d7:d1:a6:e1:bc:06:ef:d2:13:71:69:a4:
b4:b0:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:42 2025 by rpki-client