Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
File: SA4-gK7rhMMmEvT60RbiaQpUbHo.mft (raw, json)
Hash identifier: 4mk7ZiNjAas3Gyg1y2yybLdgYqoHSrwSbzd1aYfb2x4=
Subject key identifier: 16:75:E6:00:B2:4E:60:95:E7:E0:F1:42:34:9B:1F:FF:48:41:FA:38
Authority key identifier: 48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
Certificate issuer: /CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Certificate serial: 01976C621229878C01EC2197ECE3DAD80BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
Manifest number: 0547
Signing time: Sat 14 Jun 2025 03:00:55 +0000
Manifest this update: Sat 14 Jun 2025 03:00:55 +0000
Manifest next update: Sun 15 Jun 2025 03:00:55 +0000
Files and hashes: 1: SA4-gK7rhMMmEvT60RbiaQpUbHo.crl (hash: HejPFZUIfmcgphy5v8pzHxKBv09VszVk/YaLJgmrjyw=)
2: UgsM9IySNlxMAMu3nxLBQeRmBwM.roa (hash: iWc/Vehzon/VP/j65KvlMpaDrurTE8lXeWv7jdRc8u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:12:29:87:8c:01:ec:21:97:ec:e3:da:d8:0b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Validity
Not Before: Jun 14 03:00:55 2025 GMT
Not After : Jun 15 03:00:55 2025 GMT
Subject: CN=1675e600b24e6095e7e0f142349b1fff4841fa38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cf:57:24:f8:77:71:06:bc:01:96:3b:37:bd:
75:3c:22:f1:79:52:9c:c5:2c:04:1a:3a:91:25:a5:
13:c7:5f:3c:82:73:f0:11:92:ea:96:25:98:9b:95:
57:89:1f:f7:1d:29:1e:49:21:88:af:e5:9d:a8:67:
9a:1b:f3:52:46:0c:73:cb:90:ac:b0:ac:d4:4e:09:
9e:88:b5:ed:d8:f7:7a:c7:da:7d:5e:aa:6f:e5:fe:
1b:0c:95:3c:86:04:41:55:bf:06:94:03:ca:0e:1f:
b0:3a:d4:83:d9:16:d9:f5:f5:85:7e:8e:92:5b:79:
fb:a2:7f:43:de:03:5e:41:cf:f5:15:ac:0a:08:8d:
7b:f8:db:6f:58:75:78:69:be:45:87:81:f0:64:90:
6f:e6:18:2d:e8:4a:81:24:64:7e:aa:2a:72:47:31:
d0:a1:d6:ea:d0:64:40:11:03:70:ca:5e:ef:e4:e4:
96:18:7a:1c:30:a8:61:d0:52:27:c5:af:e5:85:8f:
75:f4:30:b9:81:45:90:21:f9:99:78:d0:7c:cd:26:
85:08:23:eb:6d:ad:69:a2:20:dc:26:fd:20:e2:dd:
7c:24:c6:86:e1:63:08:d4:61:0e:91:1b:90:b5:b0:
ef:47:4a:a7:75:6a:ad:94:d9:d6:77:3f:74:3d:0b:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:75:E6:00:B2:4E:60:95:E7:E0:F1:42:34:9B:1F:FF:48:41:FA:38
X509v3 Authority Key Identifier:
keyid:48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:80:6d:32:ee:13:bd:2c:e7:c1:9c:a3:01:5c:d4:c5:15:f8:
42:2a:b4:5b:5d:94:da:4a:68:10:2e:8e:24:9e:96:8c:30:17:
7e:48:b0:7a:34:78:5b:71:c9:76:42:b7:ec:26:fc:95:ca:e2:
23:f9:a4:68:d7:37:c4:b7:6b:c9:40:e5:b6:87:6c:7a:bb:f2:
b0:af:03:c6:08:e1:84:e5:cb:90:26:f1:85:19:07:07:ab:e2:
68:cd:ec:b1:af:6a:aa:46:12:81:4f:97:d4:09:60:8b:99:2f:
db:24:ee:c0:07:d8:84:63:4c:62:56:df:02:75:0f:1d:5b:c0:
67:37:b1:a9:86:15:9b:e9:83:7f:e2:f6:8d:a9:49:35:89:8d:
26:fd:94:83:a3:5f:01:cf:90:ea:82:93:74:b4:60:5e:cf:e1:
d9:c1:3a:7b:b5:d2:8b:1c:21:98:bf:d8:3e:fc:f6:f0:64:3c:
a3:c4:00:6f:52:44:fe:62:3c:1c:93:e6:3e:0f:63:9d:6f:59:
0f:e8:7e:18:33:02:59:15:f5:b5:ce:ad:5b:76:20:36:59:9c:
e8:ec:7d:19:99:21:15:af:1f:11:c6:e6:c0:3d:77:0b:89:4f:
d9:22:2b:70:be:0a:70:58:4a:e8:90:5b:3e:98:78:fe:9c:0d:
d7:4e:06:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:16:40 2025 by rpki-client