Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
File: sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft (raw, json)
Hash identifier: Ov6+gpbcGNx5JmsfhN1OV1ez+zWXPEj8gSGrI7hGf68=
Subject key identifier: 95:4C:51:34:F9:78:B7:B2:5E:3F:D2:A8:91:E5:04:18:64:92:C4:0E
Authority key identifier: B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7
Certificate issuer: /CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
Certificate serial: 019777F80892EA61AF215DB13BDC62FA7A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
Manifest number: 02D6
Signing time: Mon 16 Jun 2025 09:00:33 +0000
Manifest this update: Mon 16 Jun 2025 09:00:33 +0000
Manifest next update: Tue 17 Jun 2025 09:00:33 +0000
Files and hashes: 1: sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl (hash: IUr4SrK6e9lz4vIHcL5bqXkTNZ9PdG/7EnKLG1wTXzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:08:92:ea:61:af:21:5d:b1:3b:dc:62:fa:7a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0524f655ba3c9ca5d98b057c24c0f08b719d4a7
Validity
Not Before: Jun 16 09:00:33 2025 GMT
Not After : Jun 17 09:00:33 2025 GMT
Subject: CN=954c5134f978b7b25e3fd2a891e504186492c40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3b:d3:59:26:a5:91:06:2d:36:76:16:0b:32:
81:5f:29:08:95:99:14:85:5e:7a:14:92:de:db:17:
68:0c:63:47:82:d0:24:b6:f1:f7:e2:18:fa:db:ec:
d4:05:66:ad:ab:7e:32:3a:12:9b:01:33:bf:73:9b:
33:48:3c:34:34:6f:db:eb:09:d0:42:ae:65:71:8c:
2b:3d:2f:7d:5c:85:fd:5f:46:77:98:69:bc:01:f9:
ca:34:0c:8e:96:5a:9c:aa:0a:9a:40:3f:c3:f1:e1:
e2:23:7a:02:c6:93:66:a6:b4:7a:fc:8f:91:1c:54:
ed:d4:cd:c8:1e:60:7a:f6:5e:56:c5:2f:0e:5c:4c:
6d:e5:af:48:d9:8a:aa:4c:e6:77:51:7f:7c:4e:f2:
1d:f8:f8:75:21:a2:7e:78:69:e3:a8:fd:1b:a1:fb:
ec:e9:ca:c0:e0:d2:2b:5b:d6:96:11:e9:7f:e8:0f:
9d:f2:00:ae:19:39:4f:b2:8b:0d:bc:a3:b3:5a:81:
8a:83:07:ce:f4:b1:be:80:e7:19:be:98:6f:80:d1:
4c:56:56:82:14:f8:31:6f:6d:6f:9e:6a:e6:2d:a7:
9c:13:c1:33:1f:af:b7:cf:32:ca:7d:e7:21:f4:3c:
3c:5b:c4:06:3f:0d:a1:57:4e:e7:49:2c:7d:86:d1:
17:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4C:51:34:F9:78:B7:B2:5E:3F:D2:A8:91:E5:04:18:64:92:C4:0E
X509v3 Authority Key Identifier:
keyid:B0:52:4F:65:5B:A3:C9:CA:5D:98:B0:57:C2:4C:0F:08:B7:19:D4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFJPZVujycpdmLBXwkwPCLcZ1Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4869b6-9c67-492c-b15e-3744b48af1a8/1/sFJPZVujycpdmLBXwkwPCLcZ1Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5e:01:9f:40:3d:af:a5:d4:35:da:2a:f5:92:0d:b2:a9:89:
60:0c:f5:dc:77:04:39:b6:74:a7:ef:04:58:a4:56:aa:19:0c:
a3:2a:b8:16:49:93:32:25:54:27:3b:34:5f:75:12:c2:09:21:
20:2f:bd:be:00:a7:b0:59:87:11:33:e0:eb:44:cb:fb:1a:e9:
2b:bd:e5:70:4b:0e:9d:6b:67:9c:27:17:4f:54:69:81:65:a7:
f7:17:4e:61:01:8c:0a:4e:d9:32:bd:36:63:79:0c:b8:92:1b:
5b:fd:1e:7b:69:e8:b1:97:2c:03:15:30:5a:72:6e:f9:f2:cf:
1d:5c:19:1e:10:4e:35:8e:5f:24:00:c7:ff:bf:c5:db:a2:d2:
42:5f:54:91:67:4e:4a:2f:0d:c4:98:6b:a0:33:90:37:42:2e:
d5:7e:4c:30:b3:11:bd:ce:4c:e6:40:05:19:c8:f5:1b:51:29:
51:e2:39:ad:97:f8:2b:c5:c1:64:e8:ea:6e:18:94:4b:89:05:
a2:8d:d8:3a:53:88:0c:e7:aa:d6:43:a1:70:e1:e3:ac:f6:01:
5d:ba:a5:ff:7e:44:0b:6d:c9:d5:fa:8d:fe:94:f5:de:17:5a:
be:6a:14:88:1c:57:03:37:d7:9b:20:81:2b:ff:35:92:c3:02:
84:58:79:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:39:50 2025 by rpki-client