Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
File: Srn5ALphi-jnySCWPN91e5BQ5Qk.mft (raw, json)
Hash identifier: KLvLH+IIaDZHLUEZolCeAlYETLJwqfvtDub2ANwMNe4=
Subject key identifier: B0:60:72:68:16:A6:91:EE:79:D8:5B:F5:1D:3B:6A:13:04:AD:57:93
Authority key identifier: 4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
Certificate issuer: /CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Certificate serial: 0197B6A051D7EF4AFF3C624FA5E11D6D39FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:00:49 +0000
Manifest this update: Sat 28 Jun 2025 13:00:49 +0000
Manifest next update: Sun 29 Jun 2025 13:00:49 +0000
Files and hashes: 1: M8uu5Q0gYtyHXgy-_HaJ3qJtLL8.roa (hash: 8T9tUH90Mj8IcimHEzzVqe1K5DRM0kq6VzTiqUA3vRs=)
2: Srn5ALphi-jnySCWPN91e5BQ5Qk.crl (hash: +ryG55YcAG2xVhMs0xNHNoU++R5G+JribcnwLvl7nZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:51:d7:ef:4a:ff:3c:62:4f:a5:e1:1d:6d:39:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Validity
Not Before: Jun 28 13:00:49 2025 GMT
Not After : Jun 29 13:00:49 2025 GMT
Subject: CN=b060726816a691ee79d85bf51d3b6a1304ad5793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:e5:4a:c5:be:6f:aa:35:af:2b:68:84:ef:
8a:46:bc:67:d6:df:04:5a:6a:ce:e7:85:c2:4b:e6:
d3:dc:4f:c0:8e:2e:df:49:3a:48:2c:7d:ce:67:59:
a2:fd:a8:9c:4c:eb:e7:a9:d5:5d:b7:1d:37:13:bf:
07:e9:1f:1e:69:db:50:75:8d:4b:70:df:f4:d7:e7:
db:bf:42:a8:35:79:84:65:37:ba:58:22:32:f2:e2:
6c:a7:41:7d:5c:d1:94:a8:35:c9:35:ac:a9:91:59:
96:19:7b:17:cd:47:51:6d:5b:28:6b:b4:7c:b5:5a:
aa:64:b2:f7:41:fd:e5:64:da:bb:4a:92:e4:fb:1b:
a6:df:15:4b:ce:0f:29:bf:02:53:64:b0:4d:e6:22:
f3:8a:7a:db:7a:34:f9:67:b6:72:47:f6:42:aa:3d:
02:59:9c:1f:06:d0:23:a7:15:71:12:f6:4f:25:c1:
7f:78:f2:cf:75:5e:7e:5f:66:b3:80:d3:13:37:a9:
84:db:b9:7e:23:ba:43:30:88:2f:b8:bd:ac:b6:90:
ff:b1:05:3f:1e:f4:be:02:92:53:bb:58:7b:c5:1b:
44:bd:80:1f:fc:31:4e:79:48:bd:c5:e3:35:52:eb:
a7:67:33:b3:28:cb:b5:86:fb:f4:af:4b:e3:53:13:
5f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:60:72:68:16:A6:91:EE:79:D8:5B:F5:1D:3B:6A:13:04:AD:57:93
X509v3 Authority Key Identifier:
keyid:4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b5:a7:8e:6e:72:80:df:59:91:75:3f:da:05:46:ed:fa:af:
d9:7d:cf:5d:b0:ac:81:5f:dd:2d:35:13:bf:0b:94:67:0d:c7:
b8:d5:c4:c8:28:cb:83:0a:c4:15:2b:fb:65:6e:0c:3e:62:aa:
f0:c9:87:e6:f9:7e:25:96:3f:1c:65:a1:e1:87:2c:86:b1:ea:
10:14:b2:46:df:b0:b1:8a:2a:df:50:b6:59:2a:9a:7b:37:5e:
52:e4:6d:ab:9f:78:a3:05:d8:5f:a5:a0:f4:c5:00:ea:aa:5f:
7d:c1:d8:f0:ce:c4:b1:e0:0f:a3:c0:1c:86:51:83:7e:80:0c:
f1:9c:b7:79:5c:5a:e5:c0:a2:ec:5f:98:37:73:f5:14:d3:43:
61:00:b2:f1:e4:6f:0b:fe:dc:9a:e3:40:ad:91:b6:d4:af:25:
48:e3:da:cc:6a:63:81:64:f7:f7:76:b4:89:71:86:c9:e3:0d:
cc:60:2a:c3:60:a7:59:8a:ea:b4:5e:c9:f1:6b:f3:35:06:63:
06:8f:36:e2:54:fd:28:d5:67:d2:4b:a0:9b:53:b4:82:0f:e6:
67:e7:ce:df:da:4c:24:df:c2:b0:a7:fb:b3:f0:24:93:e2:fb:
8f:b6:d6:c5:a1:b5:af:e3:6b:03:36:cd:f9:d4:91:38:e2:fd:
51:fc:6f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:04:26 2025 by rpki-client