Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
File: SrfcA3ifWGIbJejdDZJdyRtKWqI.mft (raw, json)
Hash identifier: yZU/xzAb+oDb89reVvP8sTBU7oooyaExTOalShFokck=
Subject key identifier: 67:70:C0:46:92:A8:99:3C:12:A7:37:58:B7:D6:6C:B8:15:7E:74:7D
Authority key identifier: 4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
Certificate issuer: /CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Certificate serial: 01976DAC129F505E53D317F0C87BA0066410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
Manifest number: 0A34
Signing time: Sat 14 Jun 2025 09:01:22 +0000
Manifest this update: Sat 14 Jun 2025 09:01:22 +0000
Manifest next update: Sun 15 Jun 2025 09:01:22 +0000
Files and hashes: 1: EmdE4lFlfaABPtiZtlnbFIKNWhE.roa (hash: xZDQuK6O09neLie5Q456W4oztNFuHLsLoArEyWHRJSU=)
2: SrfcA3ifWGIbJejdDZJdyRtKWqI.crl (hash: ozOaXM7xkq13GY77FxkcmogW/B0oBN6nvN6ZcBMqpdM=)
3: lCpE9-_9vA0HzQAwKrWQ7gX2Gi8.roa (hash: YkwTTveNH0IQGCLC0ZIMEDB0zjPdx3yFhcYm5gkoPpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ac:12:9f:50:5e:53:d3:17:f0:c8:7b:a0:06:64:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab7dc03789f58621b25e8dd0d925dc91b4a5aa2
Validity
Not Before: Jun 14 09:01:22 2025 GMT
Not After : Jun 15 09:01:22 2025 GMT
Subject: CN=6770c04692a8993c12a73758b7d66cb8157e747d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:89:5c:d4:c3:e0:fe:ac:9e:b8:13:5b:80:
34:49:1c:40:84:10:6a:de:c7:1c:91:75:fe:1d:1c:
37:df:09:c5:47:16:37:4a:3b:e8:d6:27:be:d2:b5:
7e:c3:09:a5:11:32:e3:0e:ed:4a:bb:77:10:e1:b1:
47:b0:90:6f:71:39:91:3c:a4:f0:57:e3:7f:3d:64:
ea:aa:52:d6:f7:db:2e:80:fe:44:22:61:4a:8d:01:
84:33:d3:b8:f7:88:f5:c5:da:89:02:34:f7:73:8d:
32:5f:0c:39:1c:34:7b:c3:f1:3a:5e:0e:ed:53:c5:
ac:35:a3:67:3d:0e:97:55:24:8d:d2:28:cf:11:1f:
f0:fe:74:43:58:43:6c:4e:30:e5:b4:3c:11:9b:4e:
de:47:02:00:81:fa:ba:e1:76:9a:e1:35:7d:3b:43:
1c:a1:b3:00:eb:ed:77:4b:2e:33:f2:31:28:cc:f9:
86:96:e6:e7:df:c5:92:ab:98:c2:50:37:22:4a:b9:
84:ae:22:f5:da:ca:a5:bc:6d:94:c4:cb:c6:ec:8e:
11:21:67:4e:d5:42:22:53:22:6a:f9:1e:e8:ea:37:
1f:f5:57:a7:a6:f8:bd:d8:64:80:88:bb:f5:b2:d5:
fe:ec:a6:76:d7:ba:42:40:da:2c:45:53:a1:66:70:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:70:C0:46:92:A8:99:3C:12:A7:37:58:B7:D6:6C:B8:15:7E:74:7D
X509v3 Authority Key Identifier:
keyid:4A:B7:DC:03:78:9F:58:62:1B:25:E8:DD:0D:92:5D:C9:1B:4A:5A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SrfcA3ifWGIbJejdDZJdyRtKWqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8a59db-5ad8-4f3f-97c2-f38bcbd93390/1/SrfcA3ifWGIbJejdDZJdyRtKWqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7c:12:b6:99:9b:c6:b9:62:4b:48:83:2c:73:28:b2:b9:be:
30:25:0f:4d:51:3c:d4:57:14:4c:bc:3d:21:b0:af:ed:20:27:
92:c3:1d:9c:a4:b4:e1:50:e9:63:e7:ac:48:22:e4:00:c7:4b:
a7:de:92:1f:62:04:b3:bf:ab:65:41:df:37:75:26:b9:41:0f:
e3:18:06:0b:2b:f4:ec:89:d9:35:05:9e:6d:51:82:e3:4e:5d:
7f:64:b9:53:76:a8:1a:bb:d4:fe:ff:97:27:53:24:2a:09:6e:
c7:b3:72:a0:f2:3a:8c:83:a3:cd:98:5d:e3:be:53:fe:eb:ac:
31:44:ff:36:11:a5:b5:30:86:7f:e1:dd:68:20:ff:4d:04:0a:
ed:b4:61:00:67:12:88:39:93:13:64:f0:a0:68:c5:dd:5f:11:
e7:7b:94:00:6b:f7:e7:7e:3c:10:61:ff:ff:e8:c5:e6:a2:e4:
b5:6b:41:39:3e:48:3e:df:30:f1:70:c6:9d:9a:c8:a3:7a:eb:
5e:5d:cd:17:90:fb:17:41:d8:03:6a:32:5c:d3:16:0f:78:86:
ca:32:b4:97:6e:fe:41:e9:21:6b:e7:3f:38:11:f4:bc:57:bb:
9c:c9:16:f7:ad:5f:ff:cd:68:92:34:c6:29:27:d5:f9:fd:6a:
41:ea:88:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:16:11 2025 by rpki-client