Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
File: sSQfEp2_xKFlH-zboDEI_NLMHfI.mft (raw, json)
Hash identifier: 7euK+0r0WbWF7V4fJwXB+1LK5/ZrBNmbJSIgS9qb2f4=
Subject key identifier: 36:EC:F4:93:F8:E7:FF:94:30:4C:99:28:1B:C3:63:1E:4C:0F:6F:75
Authority key identifier: B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
Certificate issuer: /CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Certificate serial: 0197B745213C49443EFF1309A87DAAEABA16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
Manifest number: 095D
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: sSQfEp2_xKFlH-zboDEI_NLMHfI.crl (hash: ikhPw1dn0rSxZPfI7WZl4o/Z2ambqCNxLlwtdRhIb58=)
2: trnbESznlOsXSmOq-zTLOlE0nzc.roa (hash: fOmXOdcOD5V/jRJlsSdgNbz1rZ873FVRanr34sBtxks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:21:3c:49:44:3e:ff:13:09:a8:7d:aa:ea:ba:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1241f129dbfc4a1651fecdba03108fcd2cc1df2
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=36ecf493f8e7ff94304c99281bc3631e4c0f6f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:39:31:ca:e3:7e:89:94:74:05:e3:9b:8e:
df:0b:11:c8:88:38:1f:2c:d2:93:48:4c:85:b6:73:
a5:d6:8a:8f:83:b4:f7:ba:d8:12:bc:cf:03:11:29:
50:fe:7a:92:45:54:c9:e5:ee:0e:3e:a6:c2:a2:f6:
c2:f4:b1:2a:33:27:74:21:52:b5:7c:77:ba:0c:7e:
09:68:02:d7:62:c5:73:51:15:97:8b:4f:02:45:a0:
c3:05:8a:2a:d0:6d:9d:11:aa:98:0a:23:e2:e0:e5:
9f:50:b4:1e:cb:8b:42:b6:d9:9f:37:6f:d7:40:81:
e4:90:e5:3f:1b:9b:d7:36:12:db:6e:18:5b:03:06:
64:d8:fb:2b:58:e4:dd:39:95:0c:b2:b2:dc:fe:1a:
80:69:ea:a4:f0:aa:5a:7c:08:44:ac:63:fc:73:62:
1a:b1:9d:44:97:4f:a2:4d:0f:93:44:1c:74:25:47:
c7:f2:23:ee:3a:14:34:0f:14:68:7f:92:46:80:40:
41:e8:23:4b:89:e8:b5:63:58:68:3e:43:65:7f:fe:
43:d9:ed:7b:d2:45:e0:e1:c3:90:42:97:b9:12:12:
33:83:b1:56:7a:7b:59:02:09:26:12:ad:83:e5:b6:
f3:40:3c:7b:04:ae:c8:56:0a:5d:d8:e0:ae:4e:6f:
6c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EC:F4:93:F8:E7:FF:94:30:4C:99:28:1B:C3:63:1E:4C:0F:6F:75
X509v3 Authority Key Identifier:
keyid:B1:24:1F:12:9D:BF:C4:A1:65:1F:EC:DB:A0:31:08:FC:D2:CC:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSQfEp2_xKFlH-zboDEI_NLMHfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b1a75d-b791-40b4-bda7-e9ddbe3efbe3/1/sSQfEp2_xKFlH-zboDEI_NLMHfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:48:85:4f:bb:eb:fc:01:02:2d:64:af:b3:82:f3:68:b0:85:
2b:33:d7:df:16:f3:3d:68:55:22:dd:01:94:58:4d:f4:6a:1a:
5b:95:4a:b8:b1:c1:c9:62:c3:6b:66:fe:9b:62:53:b1:db:9b:
31:24:be:be:21:80:d5:87:02:d6:1e:92:d7:22:1a:d9:26:67:
7a:35:f8:99:b0:56:87:56:01:2d:44:2a:54:4f:a3:96:e8:3b:
67:df:65:3f:74:81:4f:44:81:86:45:1d:1e:d1:ee:f8:d1:9e:
fe:97:d2:e5:05:5d:18:d6:a2:1b:1f:90:15:73:b6:79:c3:83:
73:3c:9c:d6:6a:04:54:0f:ec:04:e3:dd:3c:76:3f:46:3f:90:
8b:86:65:05:35:ac:0b:8d:88:23:0f:41:b7:19:e3:4e:fa:c2:
27:91:2d:f1:f8:43:98:0c:a6:f6:e5:82:18:87:53:ef:34:39:
fa:78:30:26:7f:fe:c5:d9:92:24:ad:e7:69:7c:4e:bb:f4:9d:
8e:22:53:36:81:a4:25:ee:39:44:29:fe:53:9a:52:f9:c4:1f:
c3:af:9f:28:05:0e:a1:74:3b:f1:fd:f0:a3:2e:83:b0:49:cd:
85:c1:9e:d5:6e:1c:ba:0d:a5:9a:a3:8e:26:b1:c9:be:24:b2:
af:c2:5f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:19:27 2025 by rpki-client