Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
File: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft (raw, json)
Hash identifier: OPLfL9czV9hB0VisgOTKwXLGFVHCKl9C8/44RPotGt8=
Subject key identifier: 08:6C:7A:B5:AC:BB:4B:4B:CC:4A:F8:83:33:92:7A:7E:3C:28:CF:BB
Authority key identifier: B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
Certificate issuer: /CN=b0095ed011c94358245c32757d46bed860df4c19
Certificate serial: 01976BF3F28FD7AF102690A960984EAD8FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
Manifest number: 0537
Signing time: Sat 14 Jun 2025 01:00:38 +0000
Manifest this update: Sat 14 Jun 2025 01:00:38 +0000
Manifest next update: Sun 15 Jun 2025 01:00:38 +0000
Files and hashes: 1: sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl (hash: K03vKTqhjEi4PrXU+aBJVs9BkQFTVHzvimSxP3yPW+E=)
2: t0wNgCpzIiHd0fZLik8oKup2IRU.roa (hash: eDGvGeZXSnNxXFSxZa5NU4er/BuDVU9oTOPF3gyQwp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:f2:8f:d7:af:10:26:90:a9:60:98:4e:ad:8f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0095ed011c94358245c32757d46bed860df4c19
Validity
Not Before: Jun 14 01:00:38 2025 GMT
Not After : Jun 15 01:00:38 2025 GMT
Subject: CN=086c7ab5acbb4b4bcc4af88333927a7e3c28cfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:4d:4e:85:00:e8:05:4b:99:11:d2:6b:36:
17:75:4b:b0:4d:95:7b:42:80:7c:3f:c2:da:6d:03:
44:9d:e6:67:b7:10:23:e2:7a:bc:6c:21:8e:c4:d5:
01:20:5b:94:b2:fb:37:21:07:f7:db:25:a4:a0:e3:
c7:49:9f:95:27:a0:5a:6e:94:29:c2:a6:c4:2c:1f:
d1:85:63:13:c8:e1:5c:91:ab:9b:25:de:df:39:1f:
db:44:7e:e8:74:d1:8f:a9:03:b0:ed:2d:c5:d2:7a:
f6:88:cd:1d:47:85:85:fd:ac:17:e0:ae:80:eb:df:
a0:c4:a2:ec:29:7c:27:8c:9e:06:6a:58:43:d4:85:
2f:39:c7:ed:38:16:95:13:e2:19:07:f2:c7:7e:20:
2e:5a:d2:b8:ab:ea:f5:7a:2b:bb:3e:6a:a0:f1:92:
29:ee:b9:ef:2d:c4:c1:a8:6c:a4:96:45:b3:d8:28:
b5:a2:97:d1:54:6d:39:06:21:fc:03:35:e9:7b:43:
d6:b2:06:49:88:5f:da:c3:23:9a:e9:e1:1f:09:48:
ea:61:05:72:c5:f6:f1:ff:7e:5c:cf:e1:cf:13:9a:
40:30:a9:b7:2c:60:2b:a0:09:9d:1e:1c:aa:00:9b:
c0:c0:82:fe:54:33:bf:3e:4c:75:e6:c1:f9:f5:5a:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6C:7A:B5:AC:BB:4B:4B:CC:4A:F8:83:33:92:7A:7E:3C:28:CF:BB
X509v3 Authority Key Identifier:
keyid:B0:09:5E:D0:11:C9:43:58:24:5C:32:75:7D:46:BE:D8:60:DF:4C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/49cdec-69f0-4540-89ba-ea45969950cc/1/sAle0BHJQ1gkXDJ1fUa-2GDfTBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:35:7a:03:5b:08:66:70:28:f9:a1:13:12:f7:14:e0:36:fd:
d9:6d:1e:3a:cc:9f:fd:07:72:10:d2:b3:38:d1:b2:fc:be:4d:
8b:d4:9f:ea:57:8c:26:74:09:a6:2b:e2:2c:bc:7b:04:25:73:
58:3a:41:ec:de:66:d5:73:b4:0e:5a:bf:ca:25:db:d9:3b:b6:
b3:8c:44:49:3e:a4:7f:0a:fe:58:60:ae:99:a6:aa:23:c5:d4:
07:78:17:1f:ef:b8:ce:05:8d:1a:0f:b1:81:84:b9:d2:46:0b:
59:f1:59:f3:69:06:56:3e:7c:c3:93:f1:3c:86:4c:2c:bb:91:
85:7a:66:ca:81:89:57:37:97:7a:1b:95:3a:c7:43:c8:26:f2:
c5:e9:dd:cd:04:40:27:79:90:de:b3:d9:f8:23:fe:b8:d3:3c:
e5:f9:77:4a:2d:3d:54:fd:7e:12:13:bc:50:8f:82:c9:69:da:
29:e2:63:3f:e4:65:63:9f:d7:54:30:77:9d:74:42:8f:e2:1b:
4b:4c:bd:e3:27:4b:d9:e2:c8:52:41:b2:79:73:79:a5:b5:64:
05:85:24:a3:f7:41:f0:72:c9:8c:01:58:88:2a:9c:03:36:c4:
d2:45:a8:7a:18:d2:af:ed:9a:f3:39:e8:99:f1:0a:8c:40:dd:
4d:18:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:47 2025 by rpki-client