Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
File: sszaHFSHy5ONV-phzC1i0xBw21E.mft (raw, json)
Hash identifier: DV1lI615/3rUX8fCLFz7mywLy0L6SPuK0Bo+9gNHF3E=
Subject key identifier: 81:86:C0:7A:19:81:70:12:3F:10:3A:CD:6C:33:98:D7:4A:FE:F1:AA
Authority key identifier: B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51
Certificate issuer: /CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
Certificate serial: 01978E1378B0E8CD1AB424A51FBF84DACEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
Manifest number: 0BA7
Signing time: Fri 20 Jun 2025 16:02:10 +0000
Manifest this update: Fri 20 Jun 2025 16:02:10 +0000
Manifest next update: Sat 21 Jun 2025 16:02:10 +0000
Files and hashes: 1: 3_xmC1ho9_8ZqNCvSg_4Ci-eALc.roa (hash: F7LfywH9mxXY2KxRJjRgggVLiwyV5wwnZqXcnTIZ+/Y=)
2: sszaHFSHy5ONV-phzC1i0xBw21E.crl (hash: SryDBxuS4qw5stggEMk7UqEYAGHCrEnpFvwikW0mqww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 16:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:13:78:b0:e8:cd:1a:b4:24:a5:1f:bf:84:da:ce:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2ccda1c5487cb938d57ea61cc2d62d31070db51
Validity
Not Before: Jun 20 16:02:10 2025 GMT
Not After : Jun 21 16:02:10 2025 GMT
Subject: CN=8186c07a198170123f103acd6c3398d74afef1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1f:e7:f4:47:0d:eb:28:d1:3c:c0:b4:12:6f:
c0:fd:3f:9d:a1:75:59:67:70:30:60:42:25:de:54:
49:96:5c:32:6d:5f:b2:b0:00:f7:e7:b8:41:ac:c2:
3a:77:c5:dc:c4:02:24:99:bd:fb:6a:b4:a8:8d:10:
d6:3c:23:5f:22:82:a0:72:b9:91:49:b6:17:9f:d0:
38:88:f7:01:e4:9b:6c:48:70:cf:c4:48:c7:bd:39:
14:85:4f:b6:a9:71:90:92:2b:74:c7:0d:dd:db:49:
2c:a3:c9:77:30:e3:b3:d4:e8:24:93:e6:9f:d8:6c:
8b:b2:33:e8:56:ea:72:c8:26:d8:76:26:77:cc:58:
46:ae:76:09:17:70:f5:99:5b:ee:d7:33:8c:2d:c4:
07:6b:f5:cc:34:7f:81:8d:0c:75:2b:7b:b5:ec:18:
99:da:dd:f7:39:4e:53:1c:11:62:75:47:29:84:87:
46:e0:21:be:de:99:74:5b:25:3b:f3:24:4e:f2:a3:
50:20:fe:32:24:e0:49:37:4d:c6:83:6d:74:dd:85:
4d:7f:85:10:a1:45:b5:3a:3b:14:72:6c:8e:31:37:
fa:03:ea:2c:53:2a:33:b4:c5:1f:22:9f:64:9f:05:
f2:8c:2d:b9:a5:51:77:fb:d0:ae:54:1e:ff:f5:e9:
00:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:86:C0:7A:19:81:70:12:3F:10:3A:CD:6C:33:98:D7:4A:FE:F1:AA
X509v3 Authority Key Identifier:
keyid:B2:CC:DA:1C:54:87:CB:93:8D:57:EA:61:CC:2D:62:D3:10:70:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sszaHFSHy5ONV-phzC1i0xBw21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e6b77f-40e6-4c93-ac32-3db961703ea9/1/sszaHFSHy5ONV-phzC1i0xBw21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ba:3f:9c:5d:e5:02:13:c5:df:fa:80:82:b1:d0:7e:b4:eb:
f4:70:1f:89:a1:e8:e0:26:ad:31:98:cc:25:97:23:1b:09:14:
e9:cf:f0:74:6f:e0:35:77:40:b1:05:af:f1:35:26:94:71:17:
1b:e6:ed:89:8a:ed:f3:cb:72:f0:2e:ee:1a:c9:09:a1:57:b0:
41:be:0f:db:ce:e6:75:0f:3a:74:17:cf:d8:fc:0b:c8:66:c2:
90:7e:ea:08:e1:a7:65:9c:80:13:5e:7d:3f:e3:9b:29:0b:39:
57:1d:8c:e2:61:a9:f9:e1:75:be:4c:25:08:06:7f:68:88:22:
87:af:0a:bc:99:04:ea:21:d3:73:65:46:11:01:c6:48:4b:c3:
b5:81:7f:1e:64:75:f0:f6:d8:33:67:6e:88:2e:3c:1e:c8:4f:
70:82:db:48:45:f4:d3:91:39:43:be:22:d5:a0:b6:82:3f:8f:
f2:83:5f:18:19:6c:60:78:a6:88:d1:76:ff:6c:fd:99:d2:aa:
f9:1a:97:a6:b2:d6:13:e1:ca:03:16:63:82:2f:c7:fa:21:3f:
23:8e:32:34:4f:37:89:3a:89:f5:90:22:44:08:08:22:b8:c5:
3c:75:2b:3e:0e:53:2d:6e:3c:8b:24:38:bc:4e:66:69:86:40:
0e:72:2c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 02:48:06 2025 by rpki-client