Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
File: sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft (raw, json)
Hash identifier: XwTKU8afk96VWLc40WhDG4++lp6PeG7kSN6BlFZXWrQ=
Subject key identifier: C0:1F:84:C1:CB:76:3C:1E:A2:31:A8:7A:50:4D:F7:27:DD:6C:C4:09
Authority key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Certificate issuer: /CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Certificate serial: 01978168EA9DE8B1FFF4E38974D34D26CA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
Manifest number: 0C62
Signing time: Wed 18 Jun 2025 05:00:25 +0000
Manifest this update: Wed 18 Jun 2025 05:00:25 +0000
Manifest next update: Thu 19 Jun 2025 05:00:25 +0000
Files and hashes: 1: ANXnYTqKTr9oV5Alzmy-G7Z1jr4.roa (hash: Gt/XD54HF++DivzLiOI9eyUVujLtao+p/hKCG9urNc0=)
2: C7MhaPZbslU0VnJ9f8aWGwMPQ1s.roa (hash: N2sOMWlDByUi7A5K2JVccMDH9oIH2ZkyI/wL4WYAlVY=)
3: sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl (hash: tTZeHcioSZyMISKiOyB+tkSzeMZjYB+ZzNbwE8r5CFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:68:ea:9d:e8:b1:ff:f4:e3:89:74:d3:4d:26:ca:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Validity
Not Before: Jun 18 05:00:25 2025 GMT
Not After : Jun 19 05:00:25 2025 GMT
Subject: CN=c01f84c1cb763c1ea231a87a504df727dd6cc409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:29:4f:f2:3f:75:b5:b1:ef:73:0e:90:dc:
23:dc:79:53:c8:1a:e0:5e:24:11:2d:f5:dc:93:e4:
cd:a5:95:e6:66:d4:36:56:41:c4:6b:7a:c5:15:7d:
58:da:e5:ef:c2:7d:f2:42:6c:7e:51:1a:c1:6a:89:
db:0d:af:9b:87:7f:91:00:de:82:c1:6c:52:f1:6c:
82:95:15:ba:d4:cb:38:18:aa:d0:58:a2:2c:bc:84:
8a:e0:46:f8:2a:4e:ea:b9:b5:d6:3d:d2:82:76:be:
83:75:d8:f0:ec:5c:f1:17:58:94:e6:61:85:3c:6b:
51:f4:7d:f0:e5:17:23:e2:0f:85:df:1e:36:38:13:
31:8d:68:6a:b3:7a:73:50:9a:96:88:ef:ac:cd:63:
9d:6f:35:53:36:6c:6d:1a:d0:46:16:e0:0e:a9:2d:
66:54:d9:ad:94:98:4e:c4:eb:de:e8:ec:d4:58:fc:
90:e7:04:85:51:4f:dc:08:7f:88:37:ed:9a:53:f5:
5c:2d:6a:8c:f7:3d:3b:5c:0c:90:ac:ca:1f:78:79:
27:8a:88:84:27:24:94:35:72:5f:cd:85:4f:8c:06:
66:47:10:35:b2:92:7c:25:8a:0e:62:fc:f2:a4:7d:
55:fa:eb:22:74:72:fb:1b:bc:6f:91:30:ce:1a:50:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1F:84:C1:CB:76:3C:1E:A2:31:A8:7A:50:4D:F7:27:DD:6C:C4:09
X509v3 Authority Key Identifier:
keyid:B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6a:54:70:7c:a4:ef:61:f0:f1:7a:99:43:07:5a:7a:c4:29:
df:80:25:4f:3b:3c:60:6a:a3:fb:ec:86:4e:1e:74:34:5d:7f:
65:fb:57:85:2b:dc:57:9b:2c:65:24:8e:57:5a:c0:60:35:66:
72:23:4f:03:34:4c:9f:81:ac:77:c0:7c:e6:94:dc:21:88:89:
72:42:2c:39:81:dc:dc:74:56:aa:0e:12:74:1c:fb:a8:db:5c:
42:a9:af:83:6d:66:cb:ca:e4:9c:3d:a9:30:07:ee:f3:4d:7b:
c9:8d:35:c0:e6:96:c1:1f:2a:db:71:d3:cc:f7:00:33:8e:b0:
e3:06:59:3e:3c:b5:40:02:23:0d:dc:1f:6a:0a:02:62:c2:1a:
9a:45:3b:f0:cc:6d:43:dc:f2:e9:58:7f:4d:0c:de:3b:01:e5:
43:5b:d8:f5:2e:35:86:d8:1b:5d:66:33:eb:41:0d:ed:35:cd:
01:f9:3c:8f:cc:82:8a:4b:0b:59:0a:f8:d3:2a:14:dc:fa:d7:
57:c8:c6:f4:24:13:a0:80:be:38:1c:ee:28:62:a4:c2:a2:21:
3a:b2:f9:b9:fa:b5:51:a7:d8:f8:ba:c2:db:3e:36:55:80:f9:
14:d3:39:62:7e:cb:a4:0a:66:dc:f0:88:d0:89:dc:90:18:12:
f9:e7:05:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:00:14 2025 by rpki-client