Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: hohlI4e8RJ5mqjBIVVbf+DuYaCTh+bK3Ibz8Hrsa23s=
Subject key identifier: 20:1A:87:E0:AE:5E:54:77:E2:48:C0:B5:C3:BA:46:68:37:AF:D2:36
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 0197B8C61114DDA4BD58B3BC5B4E7BA5048C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 23:01:17 +0000
Manifest this update: Sat 28 Jun 2025 23:01:17 +0000
Manifest next update: Sun 29 Jun 2025 23:01:17 +0000
Files and hashes: 1: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (hash: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=)
2: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (hash: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: kqcqVTghDR94hG3Z0T+UDxvRJmkHJ3abZjdvbbYWx4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:11:14:dd:a4:bd:58:b3:bc:5b:4e:7b:a5:04:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Jun 28 23:01:17 2025 GMT
Not After : Jun 29 23:01:17 2025 GMT
Subject: CN=201a87e0ae5e5477e248c0b5c3ba466837afd236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:f0:07:e7:5c:21:c6:a5:d8:ce:c4:dd:b2:
1d:aa:b8:6c:4f:92:50:a9:d5:a1:b8:88:50:09:8f:
f8:92:e3:aa:1a:7d:a6:0e:dc:4b:22:1c:43:2b:60:
72:fc:17:d2:9c:20:fd:99:5c:26:c2:27:c8:b4:1c:
61:a7:16:da:de:1a:75:1e:d4:58:c6:88:ed:16:28:
e8:b6:18:1e:75:89:bb:5e:2c:2d:66:fe:8d:70:4c:
b7:d1:17:24:e1:02:4e:d2:07:24:e9:a1:bd:45:8e:
fe:79:52:ed:45:8c:8d:4e:b5:a9:8c:91:86:ba:ac:
5d:c2:d8:15:ea:e3:e4:76:d0:cc:a1:0b:40:07:10:
60:27:25:28:e3:87:66:9f:91:3d:76:bc:51:6d:38:
21:09:21:2d:16:c5:4b:5d:94:e5:e1:1b:e0:bc:9f:
a5:64:03:b5:0c:4e:96:97:66:79:bc:19:62:58:bd:
d5:d9:d1:ad:3c:9a:32:c7:7e:4e:53:42:71:71:58:
85:c4:66:f8:2a:0f:a7:a7:1c:1d:6f:56:6a:ef:c1:
e2:b2:2b:1c:d8:7a:da:98:5c:23:16:51:0c:ff:a1:
97:63:36:a1:25:3e:eb:1b:ed:4c:b6:00:bc:d9:e9:
f8:44:10:a5:f7:2d:75:9d:03:22:3d:be:11:6f:8e:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1A:87:E0:AE:5E:54:77:E2:48:C0:B5:C3:BA:46:68:37:AF:D2:36
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:cc:3e:1f:93:8f:38:b1:a4:b4:4b:41:e4:9a:e3:a8:7d:6f:
ae:7f:a0:d3:c8:49:8a:4d:d8:e2:e6:4d:16:04:f1:86:b0:af:
22:d1:4a:7e:f0:ee:2d:db:8a:27:6a:42:64:ea:81:62:5a:b0:
9f:be:fd:38:6d:b1:bf:4f:49:42:b2:ee:74:51:9a:20:78:51:
d8:d8:a2:10:8a:9c:c2:8a:2b:5a:a3:68:e8:4a:4a:e8:0e:89:
ab:5e:5c:60:74:5e:77:5a:56:6a:aa:6c:6e:e0:66:9f:48:5c:
62:47:b4:e1:02:8d:9c:5b:22:07:7f:0b:05:c5:2e:57:5f:4b:
cd:1e:1a:af:9e:53:c1:7b:54:f9:22:ac:1b:54:49:be:cc:da:
ea:30:63:cb:65:78:7c:83:b5:50:f9:03:d7:b3:2e:d6:28:9b:
32:5d:3e:b9:07:91:8b:11:67:8a:be:8b:2e:8d:fb:8a:2f:2f:
b5:de:03:9f:25:b9:a6:e2:bd:2e:8f:a6:90:47:db:0f:c3:24:
3d:b9:04:12:23:5d:c9:35:b3:89:24:3a:6f:e5:99:3c:83:d2:
c1:0d:9e:f0:eb:25:a9:af:12:96:8e:cf:e9:5a:2a:f8:6d:dd:
ab:1e:56:1b:3a:1a:87:d4:6a:f1:45:07:7d:6f:34:2b:dd:da:
31:57:f1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:45:10 2025 by rpki-client