Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
File: sdgCZnmAlE302iq0sI6dNLIKjRE.mft (raw, json)
Hash identifier: X4t5Qns0K190/t4Nt18+H/p5/vctHaZbRaQf0fbMGso=
Subject key identifier: DC:AC:78:1C:83:6F:0F:56:8C:AB:A9:7F:D0:AF:F6:2E:66:69:BC:A4
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 01976F62A1CA401887662D394A0B799431AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
Manifest number: 05C9
Signing time: Sat 14 Jun 2025 17:00:24 +0000
Manifest this update: Sat 14 Jun 2025 17:00:24 +0000
Manifest next update: Sun 15 Jun 2025 17:00:24 +0000
Files and hashes: 1: So0J85BPs3UG_C6BWLfnLZ9c_3I.roa (hash: +ubxlITiYsafbFryEurkXW802YUQIUAFsrYygMwxezQ=)
2: sdgCZnmAlE302iq0sI6dNLIKjRE.crl (hash: HcaqWB9I1SPU71kDpCR1OAWiAxKx6Tq1y0TX6HJR9rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:a1:ca:40:18:87:66:2d:39:4a:0b:79:94:31:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: Jun 14 17:00:24 2025 GMT
Not After : Jun 15 17:00:24 2025 GMT
Subject: CN=dcac781c836f0f568caba97fd0aff62e6669bca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f5:93:16:82:67:8f:2a:57:ae:2f:d0:3f:34:
22:9b:cd:a4:30:bb:fc:5e:74:4c:fb:46:a5:cd:01:
f0:be:c5:92:af:16:1f:82:6c:ff:a9:af:c2:db:ab:
c6:99:c8:b4:6c:dc:c9:a4:eb:f4:e3:4f:1b:22:37:
88:ef:36:3a:ca:3d:53:9b:97:46:ac:e5:26:94:18:
89:45:69:7e:ad:00:19:60:9f:93:40:85:71:63:2b:
83:1d:d9:d2:d5:ad:39:b4:37:5d:22:7a:fc:7c:1c:
47:41:df:20:d0:80:60:2e:38:0d:16:bb:d9:e1:88:
e2:a4:89:c7:e2:df:bb:41:89:ec:c1:c1:89:fc:01:
47:98:b5:8e:14:15:99:b8:07:6b:86:a8:c5:01:82:
b3:53:8a:f1:31:87:92:ad:0d:07:eb:4e:77:ff:12:
ed:c2:75:9e:09:d1:0a:d4:67:0e:2d:cd:e1:be:08:
03:b4:54:71:aa:61:27:ef:7a:57:2f:75:2f:2a:c9:
18:cb:cd:53:96:ab:2b:85:28:d3:9a:68:7b:b0:84:
c8:7e:d6:86:b8:a8:9f:d1:d4:da:1e:0a:7f:66:64:
88:be:d1:71:84:82:97:74:83:bf:87:53:d6:ed:f6:
95:f2:85:11:7b:f7:bb:e7:92:12:5b:08:e7:fd:2b:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:AC:78:1C:83:6F:0F:56:8C:AB:A9:7F:D0:AF:F6:2E:66:69:BC:A4
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:dc:c7:0a:30:d8:fe:5e:3a:a9:10:11:bf:09:de:fb:a9:81:
a4:10:3c:27:41:8d:b4:66:ef:02:e0:b6:9f:13:91:da:77:72:
26:31:c5:2f:8d:89:25:1f:31:ba:df:07:61:4e:6e:55:fe:d1:
9f:f6:8b:ff:ab:86:9a:53:82:30:b8:91:13:a3:0e:6b:29:eb:
4c:56:f6:77:25:9d:73:3d:87:97:33:8b:7a:85:19:df:83:80:
1c:f5:c7:4c:00:32:23:cd:b8:e4:b3:51:d2:f2:66:44:ca:b1:
2e:51:c1:74:d0:3d:1b:c9:70:aa:1a:41:3c:1e:14:a6:1a:51:
29:12:6a:85:2f:2e:7e:ad:8b:0a:67:c6:fe:01:e4:64:de:aa:
cf:49:c4:b0:78:02:1f:e9:8c:4e:c4:20:36:bf:bc:69:fc:f9:
48:f6:1e:dd:11:1b:4d:1f:2b:4a:c2:ba:f9:37:93:a4:cb:da:
6e:c5:fd:20:a0:30:4e:cb:f2:65:03:f9:3d:e0:74:d3:37:18:
ac:26:a5:d6:fb:6c:57:64:87:ed:cf:89:56:6a:4e:82:b8:9c:
83:76:03:61:d4:26:63:85:1e:a2:fb:70:8e:2f:35:64:d2:07:
26:b9:d9:fa:d2:72:8a:f4:47:4b:45:d0:a8:af:7f:91:72:08:
ff:93:f3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:58:23 2025 by rpki-client