Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json)
Hash identifier: lsh9cdBFayXBIuAVUAUTWtInyId1Z/iID3lSx0m4UMo=
Subject key identifier: 57:FD:DD:BF:06:65:FC:BF:B6:B1:F6:86:72:B6:75:F1:14:93:72:5A
Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611
Certificate serial: 0197B7456B4112C63DC5488A1EB844F62C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
Manifest number: 1078
Signing time: Sat 28 Jun 2025 16:01:09 +0000
Manifest this update: Sat 28 Jun 2025 16:01:09 +0000
Manifest next update: Sun 29 Jun 2025 16:01:09 +0000
Files and hashes: 1: MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa (hash: 15XIx+4E6jpmVYTgDMId5DLCY/biXmoyIZeEQt1OExE=)
2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: LkqWMiNlQ1UjIjSUIyM3j6asDA/9p9wFLIt3bLPVU8I=)
3: V7TwuQchFJyj3FzgSo-quNHM3vk.roa (hash: hjNtsrFF5n1yKl43GjiftBGk4/SSn0HVl0kFwJ8ePwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6b:41:12:c6:3d:c5:48:8a:1e:b8:44:f6:2c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611
Validity
Not Before: Jun 28 16:01:09 2025 GMT
Not After : Jun 29 16:01:09 2025 GMT
Subject: CN=57fdddbf0665fcbfb6b1f68672b675f11493725a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:dc:b6:e3:2b:52:d5:81:fd:89:8c:32:50:
36:0b:e6:d8:8e:b5:4b:1f:3c:67:13:79:30:9b:93:
45:16:3a:1c:07:74:18:79:42:f4:86:fb:8c:4e:1d:
e4:23:6c:dc:2f:6a:b1:cb:1a:e3:bf:ab:8b:87:cb:
9c:85:10:38:11:0d:6e:61:ef:1d:fa:74:b1:46:b0:
52:3d:b6:bd:94:7c:47:1f:0f:b6:49:fe:dc:7d:a9:
7c:6d:84:c0:f1:fe:c3:d3:07:d0:cf:69:07:d0:d2:
62:ff:5c:31:c4:88:28:fc:46:ce:1c:a3:15:cc:f2:
94:3b:b1:16:ef:db:f3:c9:11:a2:77:e1:c3:8b:f9:
95:24:fe:a5:f0:f5:a2:a0:ef:d9:be:73:80:11:76:
69:04:3e:49:b0:47:80:44:3b:db:e8:7f:fc:f6:52:
95:b7:1b:db:f7:5f:1e:38:60:55:9f:24:11:1d:67:
18:05:0c:bf:24:07:8b:17:a3:e5:7b:90:e8:03:1b:
9e:8a:f9:2a:fa:cb:f7:ae:d0:26:f3:80:85:9a:97:
b8:75:46:20:bf:6f:45:58:4f:0b:ff:8c:7d:ff:06:
02:ef:c9:b7:b4:fe:71:23:cb:60:19:59:e4:24:c9:
bf:40:95:fe:28:22:57:de:6e:e2:f8:e3:09:55:6b:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FD:DD:BF:06:65:FC:BF:B6:B1:F6:86:72:B6:75:F1:14:93:72:5A
X509v3 Authority Key Identifier:
keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ea:3f:f6:63:a9:a3:3c:af:db:9b:2e:39:ab:88:87:1c:e5:
c8:6e:e2:ae:28:46:ac:fd:59:f3:bb:de:50:5e:31:dc:2b:f4:
91:d8:90:4c:3e:e8:d2:0f:66:af:77:ce:1e:2c:2d:be:b0:5d:
18:11:d9:c8:3a:72:d8:eb:eb:1c:a7:0e:e1:d0:12:26:b9:7c:
7c:7c:43:36:f6:74:2f:b0:fe:36:c8:d4:bb:df:7f:7b:27:72:
e7:9d:de:ce:8d:78:bd:ec:82:ef:25:d6:76:ca:3f:6e:9c:91:
93:39:db:48:fc:6f:56:95:e3:5f:6c:23:4a:a1:37:e8:f4:2d:
cb:4f:ad:91:9c:45:2b:15:6e:d6:a5:54:26:ed:a3:49:ec:9a:
f3:99:b5:64:8d:19:fc:2b:5b:52:8b:37:02:da:3e:1f:b7:a0:
97:ee:7d:1d:c4:44:dd:6e:b0:1d:32:bf:bc:a1:fc:16:33:9c:
e6:ac:9b:14:2a:4f:8b:5f:7c:99:96:49:a8:e6:02:4e:5a:d3:
6a:85:82:01:68:28:78:0e:59:48:1e:ef:b6:ae:6a:6f:a8:00:
3b:99:47:a6:d3:25:f0:0b:bd:2f:60:46:a4:06:de:fc:3f:a1:
81:ef:8f:68:82:a3:24:af:f2:ff:ba:e3:35:a8:e0:2f:18:63:
01:22:72:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:12:41 2025 by rpki-client