Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
File: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft (raw, json)
Hash identifier: ot1A2uChfwrc3VWwAkhDTtREwkivwbyaMfD3AKSe4bs=
Subject key identifier: EB:14:0B:F8:B7:13:C2:5E:C3:74:21:35:31:FC:B5:C4:F0:A8:11:85
Authority key identifier: B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
Certificate issuer: /CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Certificate serial: 0197B77C68DB36796547C2A667239952752A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
Manifest number: 04CB
Signing time: Sat 28 Jun 2025 17:01:13 +0000
Manifest this update: Sat 28 Jun 2025 17:01:13 +0000
Manifest next update: Sun 29 Jun 2025 17:01:13 +0000
Files and hashes: 1: N2y6-GMHKdnhwHw2qI2S6D9db-A.roa (hash: 3FLdtIoRp74dNi1D23oUnkHCD3n8shdafvj6sD2pzxY=)
2: sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl (hash: 8jEURDD+n+G8nhxWb406H+3uZLd8ghSHTp33BWNt/qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:68:db:36:79:65:47:c2:a6:67:23:99:52:75:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b004f5869f5675f65f9b10cff4b65f74f76bed17
Validity
Not Before: Jun 28 17:01:13 2025 GMT
Not After : Jun 29 17:01:13 2025 GMT
Subject: CN=eb140bf8b713c25ec374213531fcb5c4f0a81185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7e:0b:d5:73:e0:69:1a:54:a0:4b:5c:9d:01:
a5:12:4a:d0:ed:a1:bb:51:80:50:a7:c1:30:a4:f2:
be:e7:36:d4:b1:53:fe:17:7c:d1:c1:d2:ac:0c:c7:
be:23:45:74:25:81:f7:cf:6e:ae:3e:e6:7f:cf:cf:
e4:59:25:2a:1b:00:12:27:a3:e6:e6:55:b1:2a:a2:
df:6b:30:da:72:f6:18:bb:6d:f0:98:0b:86:41:7b:
4e:a6:d3:12:f0:d1:cd:88:2f:2a:06:20:62:ff:06:
ba:69:b9:6a:da:d8:6c:6f:29:67:da:a9:11:45:3d:
9b:43:bc:77:51:f8:05:fc:c9:d2:f4:87:52:01:8f:
d3:8a:8e:c0:93:73:4a:11:06:2f:0b:62:6f:b3:eb:
38:51:6d:d1:d3:0b:81:60:c6:de:59:f8:04:61:5f:
14:f4:f0:04:bb:e8:f1:0c:b3:9b:3f:4e:1d:ed:b2:
4f:b9:26:6f:cf:9d:e5:4d:ce:f7:62:e8:79:7c:48:
a6:9e:b7:30:3e:e9:c7:e7:b4:6b:63:df:14:8b:bf:
d0:b5:04:b5:15:b4:65:be:a7:92:e6:58:50:f5:84:
f8:3f:42:bb:dc:66:84:21:27:40:a6:03:83:ea:2d:
6a:ac:8c:2d:84:89:39:a1:77:ab:4a:f6:71:48:4e:
f7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:14:0B:F8:B7:13:C2:5E:C3:74:21:35:31:FC:B5:C4:F0:A8:11:85
X509v3 Authority Key Identifier:
keyid:B0:04:F5:86:9F:56:75:F6:5F:9B:10:CF:F4:B6:5F:74:F7:6B:ED:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/31a2df-dcde-49f2-8f1e-2fecdd88e575/1/sAT1hp9WdfZfmxDP9LZfdPdr7Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:08:26:56:da:a7:8c:17:b6:02:55:f6:be:bd:01:17:dc:42:
8c:9e:cd:a6:9c:dd:67:de:b0:af:e1:3c:c2:e3:6d:80:ed:82:
2b:02:d5:22:8f:67:0d:fd:f7:69:64:15:de:86:e4:68:65:f9:
a1:0a:ee:79:5c:71:4e:c6:f4:7d:3c:df:37:37:bb:8d:34:3a:
68:2d:05:1e:78:e3:e4:84:db:a9:dd:36:1f:36:6f:f6:49:11:
01:8e:4e:e4:10:ce:01:a5:03:ab:9d:a9:f8:b7:a5:74:4f:e2:
3a:d1:ac:20:93:eb:b1:ab:e7:55:95:4d:e9:11:a5:c3:c3:db:
ad:6e:a7:0e:a7:b3:f9:51:99:3b:6d:40:36:38:fd:e4:ff:c7:
b6:4f:09:d7:e6:61:1e:b0:af:62:12:10:64:dc:9e:32:c2:8b:
dc:e9:83:bd:67:a8:8c:b1:07:1d:4b:0a:3a:83:61:04:f4:4e:
ab:ad:47:73:9a:e9:90:84:bb:80:b0:cb:7e:29:8e:92:dd:80:
0a:1a:26:0b:b2:03:42:4c:bc:87:35:b1:2f:34:79:60:92:3f:
42:ef:82:3e:4c:85:e0:6c:9d:35:e9:69:30:03:50:80:2d:08:
92:1c:87:ee:5c:da:22:48:dd:da:ed:94:f8:de:3b:0c:72:ba:
09:05:b1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:40 2025 by rpki-client