Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
File: _SxsGlV_WItkfheRGmMA40LGYes.mft (raw, json)
Hash identifier: LLCv5Uq/FmJu67HB8Ievs/kLcsaqHElxsOC8/xVc2Z8=
Subject key identifier: A2:64:6F:BD:23:AA:2E:42:41:C8:4C:9D:C2:B9:42:E6:A2:94:16:18
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 019771887A57726ECC5AF8DCC9CDCA7CBF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
Manifest number: 0CC5
Signing time: Sun 15 Jun 2025 03:00:58 +0000
Manifest this update: Sun 15 Jun 2025 03:00:58 +0000
Manifest next update: Mon 16 Jun 2025 03:00:58 +0000
Files and hashes: 1: 9mLiZaXlrMh-SLMVWKWdzKIZreg.roa (hash: JOVJ8r+m2mKwk5/18fVmvxGEIuiFVBEZYaB5XFvwZO8=)
2: _SxsGlV_WItkfheRGmMA40LGYes.crl (hash: t7jfQ2DlBsPQNMzUa9fv4YQOi1Slngyu0SVY8RSL79A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:7a:57:72:6e:cc:5a:f8:dc:c9:cd:ca:7c:bf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Jun 15 03:00:58 2025 GMT
Not After : Jun 16 03:00:58 2025 GMT
Subject: CN=a2646fbd23aa2e4241c84c9dc2b942e6a2941618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:88:a5:b2:c8:a5:33:88:d5:fd:07:27:f9:4a:
15:5c:f0:ba:fd:65:ec:26:07:d5:83:53:76:bd:9f:
3c:b5:02:34:32:95:ed:dc:0b:9f:4e:ed:13:b3:4b:
90:1f:43:cf:6c:74:67:d4:27:54:f6:4e:a2:af:7a:
74:57:a9:78:b8:45:a4:4b:22:73:c4:1b:dc:c8:45:
ce:ca:ae:38:0d:86:ca:a2:f7:57:ee:50:40:bb:81:
b7:52:a3:b2:3f:c0:aa:3a:d2:ac:c6:b0:bb:c7:61:
cc:74:a1:dd:f9:40:89:1a:1f:45:a4:0d:36:df:75:
02:7d:f4:1b:5d:e3:83:ff:1e:ff:ee:5d:13:37:4e:
75:67:a5:bc:af:0b:a7:b9:98:7f:99:f6:20:de:a2:
7d:a4:50:f2:49:1d:6d:90:0e:f4:56:bc:10:48:f8:
80:66:fc:79:f8:72:f8:5b:19:f1:99:d4:10:47:6b:
26:ae:d7:42:c3:8c:af:28:1c:d1:34:9b:83:f0:a2:
e7:ad:4e:35:db:7f:50:1b:3f:18:45:a6:7f:3a:97:
de:2a:41:29:56:c1:7f:2e:00:0c:33:82:18:67:70:
7f:91:8e:30:0e:30:e3:6c:9b:85:0f:b6:9d:1a:4d:
72:d5:87:bd:b7:a9:9b:3d:cd:d5:fb:53:6a:6f:a3:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:64:6F:BD:23:AA:2E:42:41:C8:4C:9D:C2:B9:42:E6:A2:94:16:18
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5e:a8:69:35:6f:2f:80:7c:07:cf:76:ec:92:58:60:2a:bf:
33:1d:51:2e:14:08:3c:6b:1f:7d:3e:1e:6a:4f:0a:93:08:f1:
48:78:67:1e:5a:7b:85:52:80:b5:5e:e2:54:5a:37:ad:cd:a1:
78:7d:c0:c3:64:18:7b:f7:72:07:68:68:9b:ee:0d:d6:df:a7:
ff:83:68:97:a7:e6:1c:47:89:6b:ab:07:3e:6b:80:5a:fe:e0:
36:10:25:b4:5a:a4:be:78:ef:6f:25:5f:e0:7c:56:ef:2d:d5:
ae:91:34:c7:f7:ae:71:7d:28:79:41:d0:ce:45:e8:46:ce:85:
57:9f:81:ef:e5:6c:3b:20:a1:de:a2:48:6d:4e:bd:ec:c2:c2:
23:44:83:e8:35:3d:32:cb:26:b0:8a:86:9a:86:b8:ae:47:2f:
12:6d:dc:ba:65:d0:85:5a:9c:38:cb:74:ea:92:e5:a9:57:4a:
81:d3:ca:09:a2:47:37:a0:c2:29:a6:d9:b9:90:fe:f8:1a:d7:
c7:1a:21:86:b6:82:8c:64:c1:3f:2f:e3:93:a0:73:2c:4b:c3:
f2:a9:94:85:8f:41:47:2f:ad:b3:b2:f8:d8:8a:dd:b6:70:ab:
c8:22:78:48:5f:a7:4b:8c:09:bf:46:74:8d:4c:3c:f1:d5:f1:
b2:2d:29:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:40 2025 by rpki-client