Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier: NWKG9RQ6GN8AulI8vMDgpVT/50y8ET5h+MlWFJ6CWtY=
Subject key identifier: 77:30:5B:8A:70:4E:59:37:23:02:45:8B:84:B0:90:B6:3C:97:2F:12
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 019773ADCF0D63CCB47EEF504D490A13823A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 13:00:59 +0000
Manifest this update: Sun 15 Jun 2025 13:00:59 +0000
Manifest next update: Mon 16 Jun 2025 13:00:59 +0000
Files and hashes: 1: NxzgzrcAsHWy0jDkGocEc3A82GY.roa (hash: 49MMg/vk9brRgJNoRcoYkHau0scqC/ahxGjMTh7J3YU=)
2: mPhBEESpSSmoxdu-n5OAjI6sC_I.roa (hash: 6Dj5yn1/ctkVobyO+cPsteiP8qKS3BhAZ1jJUQtNU9w=)
3: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: k7Y5bl8cfjA0YRNYyQVlueyOTCugUQ8b9zjL6BGtH3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:ad:cf:0d:63:cc:b4:7e:ef:50:4d:49:0a:13:82:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Jun 15 13:00:59 2025 GMT
Not After : Jun 16 13:00:59 2025 GMT
Subject: CN=77305b8a704e59372302458b84b090b63c972f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:4b:5a:ef:36:ae:db:36:36:6d:bb:76:ee:
a4:3b:e6:61:02:76:26:01:5e:d1:86:34:6d:3a:be:
a1:05:18:fd:c7:ad:c0:e3:d3:82:9c:26:13:47:a0:
1e:e1:8a:7f:c7:e2:0a:b0:e9:50:d0:85:f8:41:de:
49:30:73:70:1f:ea:d0:f5:ce:ab:37:74:f9:da:b9:
a5:97:16:52:15:a5:a9:43:83:56:da:40:c5:50:44:
c1:26:17:85:11:ca:c8:88:9d:bb:34:86:c9:90:05:
17:1b:27:ba:91:1d:18:94:78:2b:66:5f:a9:28:fc:
b3:8e:2f:84:4a:6e:b6:15:74:7c:5a:29:78:83:9e:
d2:92:a4:86:02:32:27:23:48:11:74:dd:53:ae:d9:
55:ff:fc:92:b8:73:cb:aa:5a:a6:7e:a7:78:d8:a8:
0e:19:e2:f9:71:ea:17:4a:23:c8:08:59:77:0e:d6:
f5:dc:4b:68:44:73:c4:3d:46:85:24:9c:f5:c1:5e:
6e:bd:d4:73:9f:df:41:c7:12:01:10:7d:3e:c2:b9:
30:93:b9:ea:1e:26:4a:4d:69:07:cd:76:e3:c0:de:
de:2b:28:e3:fb:4d:03:89:a8:3a:dd:21:b9:e4:55:
7c:b8:18:c6:2f:40:25:b8:82:37:3d:98:5c:c6:5b:
16:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:30:5B:8A:70:4E:59:37:23:02:45:8B:84:B0:90:B6:3C:97:2F:12
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a3:b1:5c:36:03:da:81:32:3b:14:8f:c3:6c:5b:9a:66:6d:
08:c6:24:dd:18:20:0b:79:96:c0:44:09:a1:e3:b9:03:48:62:
04:f0:a9:7e:c1:61:fc:62:d8:f5:6b:a0:d0:88:66:59:8e:62:
1f:f5:6d:2b:1c:25:7e:47:51:53:f7:82:7d:de:c0:83:29:db:
53:38:8e:fc:60:d6:6e:05:c0:ce:1b:e4:d9:bf:f1:f2:c1:01:
d1:9f:ec:1f:bf:9a:30:73:1f:aa:a7:08:88:52:65:a7:4f:8b:
7e:1e:fc:f4:bf:0e:01:99:1f:5f:b9:e4:cd:1a:70:41:8c:0f:
a0:23:6a:33:10:13:53:31:14:22:9a:9f:d7:7d:fb:83:dd:99:
ea:5b:94:51:be:5a:49:f9:cd:2b:73:97:d5:d5:1e:66:d4:1d:
41:4c:0d:1c:3b:a7:30:4a:0c:b4:81:8f:ea:d2:73:58:c5:97:
49:3f:12:51:de:db:50:82:ec:ee:5a:21:83:d8:d6:5f:06:dd:
17:07:97:cf:5e:34:9d:20:cf:d6:74:69:7a:6b:86:61:03:a9:
61:f1:fd:10:14:f6:1b:ed:e3:aa:7a:20:06:7e:e0:59:bb:cd:
b2:19:f6:33:6c:c8:14:bd:da:5c:cf:84:23:1e:fa:93:7c:8f:
04:a7:47:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:40:25 2025 by rpki-client