Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
File: SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft (raw, json)
Hash identifier: Rw1fkzcivVDDfHEM9c1cxKr33WkAhtPDY+61139KDwA=
Subject key identifier: 4B:BF:07:A4:5F:12:E3:E7:21:97:37:6E:B3:6D:F4:BA:C3:21:93:EE
Authority key identifier: 4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11
Certificate issuer: /CN=4b20d5c78c107bcf9c715453d21444f696e44b11
Certificate serial: 0197B77CA03BD7FA4D73DDA2049581ABF2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
Manifest number: 14D2
Signing time: Sat 28 Jun 2025 17:01:27 +0000
Manifest this update: Sat 28 Jun 2025 17:01:27 +0000
Manifest next update: Sun 29 Jun 2025 17:01:27 +0000
Files and hashes: 1: SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl (hash: rFB0Xv2ILB5LB0cHgxHQZPioiS/719y6TiDUDHMmuew=)
2: tZ9Z4ML8zhMNBVa9E96Yi9Jnntg.roa (hash: XsJXQI0tWIE+GAb6s9yORtZWbA379GfbGqFGrJ0uG8Q=)
3: vLGEnXeHKe1JvyRbs81GFKJa9lI.roa (hash: y85TW0QR8RD5vWjjj7XBtsfhuTrNhwWb7DCnCsRHfMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a0:3b:d7:fa:4d:73:dd:a2:04:95:81:ab:f2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b20d5c78c107bcf9c715453d21444f696e44b11
Validity
Not Before: Jun 28 17:01:27 2025 GMT
Not After : Jun 29 17:01:27 2025 GMT
Subject: CN=4bbf07a45f12e3e72197376eb36df4bac32193ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8a:ea:23:ec:3b:c0:66:58:a1:6f:4f:ea:4c:
e4:a4:92:3e:17:e0:e0:65:78:23:85:a2:bb:c9:c0:
ab:c2:d4:37:52:20:e0:71:0f:60:af:55:e5:90:c6:
05:7a:e3:7e:8e:4c:52:38:6b:f2:27:98:bc:40:8c:
3a:0a:ec:f8:2c:e4:56:48:bf:0d:45:59:ac:f1:75:
07:2c:c5:22:28:7a:f7:63:bf:2e:e7:da:f0:15:e1:
25:1a:a7:9e:e2:8b:81:b7:0a:71:ab:e9:35:a6:24:
83:60:b1:e3:cb:8d:44:09:90:b7:81:6c:26:9f:69:
8e:ac:a4:85:42:66:d9:7f:a1:8e:c6:be:c1:5b:8c:
39:b7:2e:4e:f2:53:a0:07:a9:69:ef:25:59:b6:9e:
b0:c3:ec:52:83:eb:65:d3:54:62:e7:dd:eb:2b:4b:
48:d9:f8:ea:d9:d8:d5:85:08:8d:24:64:d6:ae:66:
91:7f:24:b6:45:51:90:2d:0b:9b:04:5d:55:89:03:
a5:8c:fb:fd:a6:2f:9a:91:71:af:cf:c9:fd:b0:58:
c5:24:01:c4:d6:c9:5f:66:b2:96:b4:49:e7:f4:cb:
19:b8:db:a6:20:ab:f0:48:3b:9d:8e:0e:9e:d1:49:
51:8f:73:a4:ef:37:96:6f:7e:1c:de:50:fd:34:d4:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BF:07:A4:5F:12:E3:E7:21:97:37:6E:B3:6D:F4:BA:C3:21:93:EE
X509v3 Authority Key Identifier:
keyid:4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:47:f8:57:f4:45:6f:7b:dd:fb:0e:c4:6d:96:46:65:e4:7c:
ac:12:5f:12:6d:1d:09:0d:96:48:d7:24:0c:15:3b:fe:e2:6b:
a1:c7:a0:74:8f:e6:ba:35:a8:a6:38:8f:1e:f0:97:5c:98:d5:
af:45:72:ae:27:71:3c:ef:09:27:f7:1e:f7:fd:53:b2:3d:c8:
1f:89:b6:21:29:c6:bb:b1:e4:55:b9:cb:63:4c:12:cf:3e:39:
06:0c:24:03:62:9d:b9:ce:da:ba:95:8e:24:18:28:a7:64:c9:
08:3c:2d:24:f5:7c:73:88:59:59:b8:93:ce:49:40:1c:ed:04:
bd:da:dd:83:13:8c:d5:02:cc:fa:bd:29:b4:41:0b:53:bd:90:
22:03:74:b6:1e:18:e0:a3:b9:d1:b4:2e:5a:ee:29:26:79:2d:
83:a9:72:22:c9:2c:f4:0d:7f:74:3b:9f:90:10:43:7c:a8:a0:
1e:0f:4c:e2:e9:76:45:88:42:d3:a6:c5:84:0c:c1:dc:51:a0:
d1:9e:76:61:2b:c9:ff:d6:a9:50:ec:37:d8:3d:0d:85:d4:d0:
d9:3f:bf:0a:b1:21:97:ec:bb:9a:3d:4b:cf:36:16:4f:50:07:
0b:eb:3d:50:46:f2:d1:5a:b3:0b:0a:ff:f7:f4:7c:7a:18:1b:
9b:85:e9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:27 2025 by rpki-client