Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
File: sPiohfd3bSq5m7TyDoTTBuA5SqM.mft (raw, json)
Hash identifier: 7tuEFzEPPPMvaV4oUUgs8mARPVKXfdXdQCSsSDkhxm8=
Subject key identifier: AA:A5:72:C1:CE:AC:D5:CE:53:CD:04:A3:43:F6:85:EE:92:E5:3B:41
Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
Certificate issuer: /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Certificate serial: 01976CCF6CAEE2C3881EA69E4AD77B083FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
Manifest number: 1322
Signing time: Sat 14 Jun 2025 05:00:22 +0000
Manifest this update: Sat 14 Jun 2025 05:00:22 +0000
Manifest next update: Sun 15 Jun 2025 05:00:22 +0000
Files and hashes: 1: SvV3htVhXEPI7wFXdPP_R5R2jOo.roa (hash: ADbpdowWW8HzIQ0XmIe2lqnPixhQxjU2ME36RexdQ8I=)
2: sPiohfd3bSq5m7TyDoTTBuA5SqM.crl (hash: TEtet8NdRgoDBJ98O3y8q2LhjCQjKtAzocPNbufSUys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:6c:ae:e2:c3:88:1e:a6:9e:4a:d7:7b:08:3f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Validity
Not Before: Jun 14 05:00:22 2025 GMT
Not After : Jun 15 05:00:22 2025 GMT
Subject: CN=aaa572c1ceacd5ce53cd04a343f685ee92e53b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:87:80:c6:bd:8e:f9:9c:4d:02:49:11:df:
ed:14:08:66:2f:fc:64:4b:9b:83:a2:39:bd:fd:6a:
07:89:08:50:1c:97:95:dd:c9:8a:9c:a9:34:78:13:
3d:f3:b2:ea:79:56:4a:eb:06:95:71:ac:d1:b2:d0:
f5:63:c1:2f:15:d9:8f:c5:52:db:8e:c9:40:c6:b9:
48:e4:a1:b6:9d:51:dc:9f:68:11:54:48:c5:3f:56:
93:bf:37:f8:4f:80:a4:5a:89:5b:0b:3e:c9:1c:cf:
20:8f:65:80:ec:6e:62:37:56:0a:26:dc:d1:c2:59:
2e:0f:e2:2b:e6:e9:b2:c0:b3:ef:7a:5b:74:37:e0:
99:84:4a:c8:a2:3b:e1:48:75:6c:be:ad:32:aa:d5:
af:cb:b5:44:d8:43:1c:55:9e:83:43:eb:ea:37:db:
a9:b9:e6:c1:73:b8:b1:b8:de:96:a6:be:4d:ed:91:
ba:2c:79:72:16:79:e3:9c:f5:1f:83:a6:2e:b1:cd:
91:6a:1d:bf:4b:92:93:dd:61:db:15:fe:77:08:5f:
c5:f1:de:56:29:ec:cc:59:76:e3:90:97:dc:ec:9e:
32:b6:b3:45:6e:c1:03:92:01:5e:cc:68:59:f0:fc:
ea:bb:90:fe:76:1d:96:c4:b6:80:e7:aa:e3:cb:ee:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A5:72:C1:CE:AC:D5:CE:53:CD:04:A3:43:F6:85:EE:92:E5:3B:41
X509v3 Authority Key Identifier:
keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b8:f3:00:dd:2d:2e:84:93:29:92:42:8d:47:12:6f:03:87:
b4:88:5f:99:6d:f9:e4:79:1c:e4:27:f3:74:68:7a:fe:b3:52:
7d:83:3a:a9:54:43:ee:31:32:29:e8:4b:b7:1c:69:fd:be:48:
82:a3:e6:7c:0c:f5:e3:01:98:88:fa:8e:4a:08:60:77:2a:9d:
8f:6e:f8:1c:c2:77:db:f8:4e:1c:fc:bd:32:0d:c0:7a:fb:63:
5a:6c:0b:a6:3c:11:99:69:f6:3b:cf:d5:85:70:cc:44:f5:68:
bf:d1:e3:8a:98:7d:e6:06:53:b0:1e:2a:db:d8:61:50:5f:5f:
63:b5:9a:e5:30:d6:5a:3e:f5:4c:9f:d4:22:27:c5:09:dc:a1:
38:4e:05:8b:23:77:67:95:a3:ba:92:2e:a8:3c:a9:3c:83:32:
9c:79:79:91:eb:69:49:83:15:17:be:31:54:2b:c8:58:d4:b1:
4c:6f:04:6e:49:3a:98:12:37:19:a9:f1:53:ff:19:7c:67:a1:
57:6d:8d:af:2e:5f:b0:2b:4e:8d:00:8b:24:52:9d:d6:a1:d1:
4c:d8:99:71:eb:40:63:26:f3:b2:a2:0a:15:86:19:85:01:bf:
88:98:f6:f9:3c:1e:dc:c4:a3:4d:65:7d:a0:42:f2:36:28:39:
76:e6:6c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:04:22 2025 by rpki-client