Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File: sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier: LyNmJojSHpzoXntcWYhH+TnawUQR0/tuNe33rT78GBU=
Subject key identifier: C5:F2:D5:A7:C7:2A:48:05:9F:46:E1:AA:DE:CF:14:CC:17:07:C4:0B
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial: 019769613D08245E1DF1E96053AD0EDC3120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number: 0E25
Signing time: Fri 13 Jun 2025 13:01:09 +0000
Manifest this update: Fri 13 Jun 2025 13:01:09 +0000
Manifest next update: Sat 14 Jun 2025 13:01:09 +0000
Files and hashes: 1: 2pelV4FedV45XCLKgpg6a9aqnGU.roa (hash: JAMnQ7Ljsuvl5vUTIxSzwNI1IGVq+RkAOKUEPceEiRc=)
2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: 8PIy9O4LrZW9UZdY81q2wR0nXYrmVc9pOMeKBqEevfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:3d:08:24:5e:1d:f1:e9:60:53:ad:0e:dc:31:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Validity
Not Before: Jun 13 13:01:09 2025 GMT
Not After : Jun 14 13:01:09 2025 GMT
Subject: CN=c5f2d5a7c72a48059f46e1aadecf14cc1707c40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:b1:ee:8e:ef:53:6d:16:7f:ce:23:7a:f0:
b4:17:a1:7c:b0:b6:a5:d8:30:96:a9:71:36:31:74:
51:b0:5b:8a:c2:02:72:dc:4d:1a:27:b2:96:a6:b8:
da:91:6a:c2:0e:17:9c:cd:b6:22:4e:ae:a5:bb:79:
8b:d3:72:42:ab:e6:28:e3:3d:93:70:91:8f:f7:34:
c2:ad:24:9c:a8:75:e0:48:d4:14:57:04:20:2a:89:
4b:c6:5c:5e:5f:0c:23:c5:d3:be:48:6c:ab:f0:3f:
5d:4a:38:3f:e5:30:0e:60:a1:7a:12:f5:cc:7b:c0:
8d:e3:1b:1c:cb:0b:98:10:11:9e:57:97:7c:72:f1:
c9:82:d0:aa:ad:0f:f1:04:26:83:e0:22:92:bd:03:
ff:23:a9:ca:89:d3:cd:b2:27:d7:4d:b1:da:cb:f7:
46:cb:72:02:8f:16:30:34:cd:dd:00:25:e9:90:64:
38:1c:86:20:63:4d:3f:03:36:13:d5:65:ce:29:79:
35:27:ec:17:35:85:b1:49:5c:97:e9:42:12:d8:9b:
bd:43:1c:5a:36:dc:2d:f1:61:dc:7d:9b:a2:54:03:
88:f2:9b:5a:5c:11:10:0c:57:d7:71:ad:85:43:e2:
cc:84:28:1f:d6:01:50:a3:0a:65:51:02:67:49:ef:
4f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F2:D5:A7:C7:2A:48:05:9F:46:E1:AA:DE:CF:14:CC:17:07:C4:0B
X509v3 Authority Key Identifier:
keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6c:1d:ff:ca:cc:cb:8e:e9:1f:53:ce:bd:fe:54:59:92:88:
c7:95:bd:f5:7a:46:3a:d0:c8:86:a2:7a:cf:cd:27:03:89:d5:
15:1a:dd:97:b3:aa:4c:a9:58:87:39:c4:1d:c3:28:b2:98:f9:
f5:b3:eb:7b:e2:de:72:bf:a4:79:f8:9d:08:da:14:d6:70:db:
1e:3b:1a:5a:d4:f7:3d:2e:52:9d:32:6d:91:75:32:d6:1c:dc:
20:7d:83:9c:62:b4:29:d2:30:c8:2e:45:02:69:f6:65:67:db:
18:fe:7f:b5:dc:af:c3:7c:38:3a:f1:a5:49:fb:42:7e:92:50:
81:0e:4c:7d:e6:54:8f:fe:c7:48:eb:a2:70:47:d6:3a:d4:bd:
e0:4d:7b:04:58:6c:01:9b:87:40:47:bf:0a:22:da:fe:3e:07:
4e:35:f6:8b:e5:20:b7:19:8a:14:49:b5:a0:d6:42:ae:90:6a:
5f:c9:3a:7a:0b:40:2b:72:a7:e5:db:66:89:d2:9d:87:4f:8c:
77:e0:48:7c:ab:56:43:3c:b9:10:05:ac:3f:0b:6d:f4:4e:08:
b5:50:a5:cc:d0:07:51:52:56:b6:65:36:88:f9:47:ab:d7:ad:
44:f1:1c:3c:fe:dc:d7:4b:4d:c5:7d:63:88:b4:39:39:1a:bb:
03:1d:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:47 2025 by rpki-client