Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
File: sXQMTAefLR3uhUOfgngbm651apU.mft (raw, json)
Hash identifier: 9B/Tf38oD5Be01n71fnpJEqXsiitPb+JjjJ/9zUSn+8=
Subject key identifier: E4:02:64:40:32:A6:1E:42:69:95:7B:1A:72:1B:41:72:D5:58:18:50
Authority key identifier: B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
Certificate issuer: /CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Certificate serial: 0197786623A5655135F479CF6B30EFA0124C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
Manifest number: 11E1
Signing time: Mon 16 Jun 2025 11:00:49 +0000
Manifest this update: Mon 16 Jun 2025 11:00:49 +0000
Manifest next update: Tue 17 Jun 2025 11:00:49 +0000
Files and hashes: 1: 0kGm7IS6foM84ApNB5wMBZmcs70.roa (hash: fsNAu7RVtrbBsKEN64Ou91zqn3ieSIW0lwlDv3luCl0=)
2: QHGLz4vDf8HU0PXuv58AHJKDNwE.roa (hash: zsAsJqx3Xlx/j+LLE8QbsIeKt4A9wuocERvf2nTmf7A=)
3: Sz2kPMld2S0NhbWe3VBXUQg4E_g.roa (hash: CgZe2V9k88f5ug37ai2G7ohUxSeYSwTeyOJXFySNdfc=)
4: sXQMTAefLR3uhUOfgngbm651apU.crl (hash: X/IYhY/nMUS1HIpg8Jmrq7j0v0iaNrkAL60IYbiTUj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:23:a5:65:51:35:f4:79:cf:6b:30:ef:a0:12:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1740c4c079f2d1dee85439f82781b9bae756a95
Validity
Not Before: Jun 16 11:00:49 2025 GMT
Not After : Jun 17 11:00:49 2025 GMT
Subject: CN=e402644032a61e4269957b1a721b4172d5581850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:82:dd:5f:90:be:6b:5a:25:e3:32:4f:21:3c:
0b:fd:86:f9:f1:8c:22:ab:15:08:30:11:e4:10:3b:
42:ca:78:b3:37:b3:e4:85:66:d5:11:f5:7c:95:cd:
79:6e:71:c0:ae:13:e2:f1:98:a8:ba:de:c9:ad:57:
1f:c8:b4:64:24:25:f2:e6:81:75:a9:63:65:c2:61:
b3:b0:9c:d5:33:9b:18:18:1e:fa:ca:59:91:a9:78:
b0:d4:63:98:5d:5a:82:f2:aa:75:5c:78:c7:e8:69:
44:d8:26:22:a8:6b:12:1c:92:11:4f:46:c8:a7:e9:
47:f9:be:0b:d1:95:0b:23:f8:c2:f4:72:00:2a:9d:
75:12:4f:c3:98:37:c1:05:f2:12:ef:f6:1e:3f:4d:
15:7a:39:4a:a3:01:1a:15:ed:99:23:91:f0:0a:ec:
10:6f:6c:be:3a:02:e6:67:3b:ac:f0:ab:dd:6d:30:
58:83:f5:c9:a6:a4:0c:2d:9e:d1:f2:21:0e:5c:1b:
c0:6c:13:d5:53:36:7c:88:a8:96:65:a4:54:7d:e4:
e6:e7:0d:6d:79:c2:64:3c:54:ab:c3:8b:a4:8d:69:
8a:67:4f:73:b0:6c:95:09:5a:cc:ec:7f:a9:1b:8c:
83:5d:80:8d:0a:19:23:3d:61:b9:df:f1:06:52:2d:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:02:64:40:32:A6:1E:42:69:95:7B:1A:72:1B:41:72:D5:58:18:50
X509v3 Authority Key Identifier:
keyid:B1:74:0C:4C:07:9F:2D:1D:EE:85:43:9F:82:78:1B:9B:AE:75:6A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXQMTAefLR3uhUOfgngbm651apU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/72a495-2b5d-4a23-99c4-ef0671c7c0df/1/sXQMTAefLR3uhUOfgngbm651apU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b0:4d:6d:38:f4:57:65:24:d4:6d:59:2d:e7:1f:9b:91:8c:
82:ce:ce:4a:71:10:fb:24:a4:60:d1:7f:11:79:15:72:47:aa:
fc:dc:17:68:44:ee:e4:28:ab:05:ec:c7:d6:37:b7:3c:88:85:
08:e7:44:73:50:01:7d:e5:2a:f0:9e:7e:31:89:9e:52:ac:b0:
4f:85:11:6a:27:6a:6d:cd:31:90:8a:bc:3a:85:4e:75:40:be:
e1:bf:d2:4a:66:04:c2:d5:e7:96:36:8a:7d:90:e0:30:88:21:
94:48:8b:52:07:68:1d:5d:64:13:20:ed:5b:f2:78:67:0e:54:
93:e8:6b:17:3c:59:60:d6:14:3e:cd:b2:a0:b7:77:ca:01:82:
22:b5:2a:4e:db:e9:08:8d:5e:e2:d8:ef:fb:32:50:d9:a6:bd:
e8:ef:12:2b:ce:30:dc:e0:4b:64:50:ed:76:eb:ce:bb:72:22:
d3:9c:66:bd:fe:dc:9a:03:9c:ac:e6:e6:b4:1f:57:a7:93:75:
32:3a:14:28:b9:50:cb:c6:52:a4:66:96:e2:25:f5:f3:eb:a7:
3b:f0:c7:93:1b:71:27:24:99:60:e9:cc:db:56:da:14:ef:b4:
bc:2d:7c:e8:8b:54:d5:e4:e9:72:dc:96:9c:cb:c4:81:19:a1:
ba:f2:99:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:44:49 2025 by rpki-client