
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: Ff6fdsdrJAi8yDjA5SEJgFfhA6z+maRaceIT9uBMQwQ=
Subject key identifier: C6:0E:D9:A0:6F:7A:08:9E:C4:1C:22:DC:7E:BC:FB:91:95:83:66:9A
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 0197B77C256070924C24CAB0F5EF014E1EC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 156D
Signing time: Sat 28 Jun 2025 17:00:55 +0000
Manifest this update: Sat 28 Jun 2025 17:00:55 +0000
Manifest next update: Sun 29 Jun 2025 17:00:55 +0000
Files and hashes: 1: 2_e31xA0ke3Styc34JcGbffddwc.roa (hash: SiZtRmCeZumulAZS0QR6GtmaGOYbZYgtQLDnc2RPi2w=)
2: N3VmvFOmqCre_Lx0IfYjn2v2b6w.roa (hash: bp1wfw2pyxZJdYCZm2jvav72UAXwLNhJfCLzE6u3iuo=)
3: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: XMv/8fvKp+IVeZ72fF9uhQJ9J66Rz+QwPxfTOMlxXWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:25:60:70:92:4c:24:ca:b0:f5:ef:01:4e:1e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Jun 28 17:00:55 2025 GMT
Not After : Jun 29 17:00:55 2025 GMT
Subject: CN=c60ed9a06f7a089ec41c22dc7ebcfb919583669a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:67:da:13:4c:8f:e9:66:d3:5b:bd:8e:9e:bd:
d2:d1:15:66:f4:75:8f:78:a0:ee:c0:31:44:07:7c:
f9:78:1d:55:64:6b:be:cc:74:ec:bb:9d:fb:66:db:
47:e8:48:d1:19:f1:42:94:77:3e:37:44:44:36:82:
04:23:12:33:d7:0d:f8:c1:b2:9d:ee:44:e0:66:0f:
ba:71:51:38:b1:f1:16:a6:30:21:99:93:e0:64:01:
99:c4:28:18:64:f6:5e:a3:9f:78:f3:b2:36:35:46:
63:48:4a:6a:8c:2a:ea:fb:16:fe:14:27:19:1e:0f:
7d:48:b8:f3:44:a8:ae:78:95:70:c6:13:11:20:6b:
d5:e3:88:ca:1b:dd:b6:82:15:61:1c:32:ad:3d:bb:
17:54:96:3a:ad:b8:5c:5d:e5:8e:a4:d6:93:bf:c9:
73:80:7d:6b:e1:8a:ea:ef:f4:26:6f:a6:e7:7e:cb:
cb:c0:6d:16:90:59:b9:37:4d:55:ea:5c:c3:8b:ae:
6d:f4:de:f1:e4:2e:56:53:3d:08:bb:35:8d:6c:0e:
b7:95:77:bb:11:f2:11:3c:8c:8c:24:9e:17:0a:5d:
3b:29:03:9d:62:fb:47:9e:87:a7:77:ab:bc:9d:87:
a5:19:40:97:b6:7b:dc:46:77:45:08:2a:c1:50:1e:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0E:D9:A0:6F:7A:08:9E:C4:1C:22:DC:7E:BC:FB:91:95:83:66:9A
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b9:4a:40:d1:66:03:86:3d:dc:c3:1f:03:2d:f2:7e:b7:fb:
cf:26:20:b2:10:8e:0e:27:25:db:f0:78:f8:dc:ea:c3:3c:18:
18:4f:08:c2:9f:0c:08:20:de:5e:ee:b6:5d:cb:a4:dd:89:f9:
e2:8a:98:53:c3:7a:9d:f8:61:da:98:7f:9c:ce:d8:03:13:f0:
a5:5c:ce:33:79:2e:28:7b:b4:dc:c7:fd:54:31:43:3b:ce:ee:
c2:fb:69:78:89:70:85:df:a4:3b:31:08:8e:a3:ea:48:8c:e6:
64:87:dd:21:21:f4:7a:cf:1a:60:db:cc:69:22:0f:8a:c3:fa:
ed:f1:af:7f:bf:c6:5a:a3:67:2f:ea:ce:8d:5e:59:17:ee:ce:
17:b8:f7:81:f5:78:3b:2a:1e:e2:48:d9:de:25:8a:5c:60:74:
69:bd:3f:e0:7d:a2:a6:75:36:5f:ae:8f:ba:3b:45:45:eb:75:
72:33:d0:e6:90:0d:9f:b7:27:fe:cd:ef:fb:46:82:46:18:2f:
e5:ae:15:39:b1:86:fd:2d:fd:65:4c:7c:6d:f0:c0:e4:35:55:
a2:d2:16:4a:e9:33:8c:25:18:e3:b0:4f:ef:28:d7:cc:85:fc:
f4:bc:77:d5:49:20:db:3d:ea:d5:c2:c7:e8:7b:47:71:a9:77:
20:da:99:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:26 2025 by rpki-client