Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
File: SoPufcwyg3sLpbiR2PFFQ1qztgo.mft (raw, json)
Hash identifier: huCtE0cOy6pI7/GhmnejPJu9YivPXohGoBq2ryr1Vgo=
Subject key identifier: DD:3A:DA:41:F1:D9:61:DE:D4:21:78:E8:E5:9B:15:92:C2:DB:6A:B7
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial: 019796A73920B3A3DBF3ECB4FF6B76F6F35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
Manifest number: 0FAE
Signing time: Sun 22 Jun 2025 08:00:30 +0000
Manifest this update: Sun 22 Jun 2025 08:00:30 +0000
Manifest next update: Mon 23 Jun 2025 08:00:30 +0000
Files and hashes: 1: SoPufcwyg3sLpbiR2PFFQ1qztgo.crl (hash: jvIQ9wOHlOJ+GtDr07ti3PkZA+fEen9xHUJ1kMJtpQM=)
2: sN71VdE_vP-brkQYYHxei4Ctk7k.roa (hash: Ng80yhJSUZ9ywzwtEcf5TCIYC5bSHVuPL+nXnqyIEIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Jun 2025 01:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:96:a7:39:20:b3:a3:db:f3:ec:b4:ff:6b:76:f6:f3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Validity
Not Before: Jun 22 08:00:30 2025 GMT
Not After : Jun 23 08:00:30 2025 GMT
Subject: CN=dd3ada41f1d961ded42178e8e59b1592c2db6ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:33:cb:8a:22:cd:cb:76:89:4d:e1:be:8b:
5d:0f:e5:ce:3c:00:1c:14:8e:26:ce:e2:cd:65:ff:
31:a8:59:0b:b9:a4:19:23:62:d5:00:16:66:5a:cb:
70:44:ae:e2:68:18:25:37:72:27:16:b4:fa:96:78:
69:86:19:3f:b1:d7:55:d7:74:7c:b8:7e:85:5e:54:
ab:a9:8a:61:9e:f3:d9:da:7e:1c:a8:59:6c:15:be:
e8:63:8e:30:f0:f5:2e:63:56:3a:e5:e4:fb:5d:2f:
52:52:66:56:68:cb:c7:91:35:55:53:69:e8:3b:18:
49:8c:65:62:75:bb:39:62:9b:5c:fe:ab:b6:b4:61:
c0:11:f1:68:4f:3e:c6:ac:72:2a:31:4f:4d:57:9f:
7e:9a:74:e1:a7:03:11:08:29:d9:a4:1f:df:6d:b9:
6b:dd:d4:f2:92:76:18:a7:55:1c:6e:8e:f3:4e:72:
9f:75:76:15:59:db:b9:94:7f:5e:19:5f:d2:b1:28:
c7:9c:4b:48:bc:02:9d:ff:4e:25:3b:f0:44:81:a3:
48:bb:dc:86:51:b9:91:ff:aa:ee:87:be:d8:69:04:
33:0c:d4:e9:9b:5c:a3:65:5f:bf:8b:cc:9e:74:bc:
6f:43:7d:22:59:b1:2a:71:6b:c9:31:c2:cb:39:05:
18:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3A:DA:41:F1:D9:61:DE:D4:21:78:E8:E5:9B:15:92:C2:DB:6A:B7
X509v3 Authority Key Identifier:
keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:5f:27:28:68:bb:61:cb:f0:f6:c1:be:1a:6d:5f:ee:ec:1d:
87:2c:d8:f0:5d:22:3a:9d:97:b7:1d:7e:d0:53:39:48:4a:28:
1d:ba:f3:5c:c9:13:88:47:5c:ab:df:57:4d:38:8f:21:0b:98:
38:bd:70:d4:fd:39:fd:d0:8f:d8:90:de:e6:b4:16:e2:89:88:
16:65:bd:39:01:5d:2f:84:57:19:ae:5e:0d:11:20:7c:82:f9:
ca:e2:03:17:aa:e1:fa:22:97:70:fb:97:ed:d2:07:ff:9d:fe:
ec:7d:d2:4a:1d:4a:05:ab:ba:7a:43:e0:32:4a:02:db:da:00:
3b:eb:7e:51:86:8c:6f:59:c7:21:7a:c3:48:7e:58:33:8f:33:
5c:89:0d:8e:af:43:46:19:7c:10:fa:31:96:07:11:90:6f:ec:
ce:a3:91:28:9c:34:da:7d:82:bb:6e:bc:a7:57:8c:92:ff:f8:
33:20:58:d3:f6:52:e9:c8:de:ac:df:7b:2e:f7:fa:0e:40:70:
35:63:f8:47:e7:32:18:ff:a7:ed:35:be:87:aa:f9:d7:02:17:
c2:40:99:4b:3c:19:47:bd:9b:0e:df:33:34:ff:1f:53:13:27:
62:2a:c8:0f:70:dc:a2:df:d7:a3:1a:20:73:14:f7:ea:8c:d0:
2e:7e:b7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 11:34:07 2025 by rpki-client