Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier: DQ438jkcgz9UxUQ1ReZdwcC/6kPnqaiAosNNTrkjLYU=
Subject key identifier: 63:66:23:DE:D5:C2:48:D2:A0:2A:F1:61:69:C6:D6:B7:A6:74:98:4D
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 01977B9E660E9778E883B4581715697885B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number: 1597
Signing time: Tue 17 Jun 2025 02:01:07 +0000
Manifest this update: Tue 17 Jun 2025 02:01:07 +0000
Manifest next update: Wed 18 Jun 2025 02:01:07 +0000
Files and hashes: 1: BHvEiTbi4Pq6B9PpmT5f6n87vL4.roa (hash: s+QevCZ3wcDACFh+jWTrJPdapoQkuOB0iQkRIdmgUkk=)
2: Nvgx0NStgiF6lAwa5XAPUa97GUc.roa (hash: HepcNDvL/nGXjv68tFuvUcj3BhJTbTJLihV6JiWEI70=)
3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: e402OQH+YF4NNE4LOhmTHRZ5svmkncFEU4VXUd8cSeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:9e:66:0e:97:78:e8:83:b4:58:17:15:69:78:85:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Jun 17 02:01:07 2025 GMT
Not After : Jun 18 02:01:07 2025 GMT
Subject: CN=636623ded5c248d2a02af16169c6d6b7a674984d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:70:64:e6:7c:f5:8e:30:19:0b:78:67:03:
73:02:47:51:40:0c:90:3d:68:0f:37:62:6f:b9:c9:
8a:09:68:ad:e9:65:61:0d:58:c0:34:7a:7c:15:69:
ec:84:3e:f7:18:22:18:7a:d1:56:3e:52:38:6d:fd:
0c:e0:3a:c8:85:b2:55:4f:42:7e:df:ff:ea:0d:61:
8d:d2:53:5e:47:be:69:82:5b:10:51:eb:b9:7d:56:
e9:ca:c7:36:53:6b:fa:49:7a:02:bd:fe:40:5a:7e:
f1:87:7c:b1:0f:8d:e9:da:98:7b:10:21:8c:bd:41:
e7:7b:65:ec:f6:49:80:90:21:4f:10:2c:39:33:af:
76:12:f5:8f:f5:18:05:d8:43:ca:d4:65:9f:a7:d6:
88:c1:95:f2:be:c7:75:76:9b:aa:40:47:5d:9d:a4:
cd:e3:f1:61:09:0f:53:7b:bc:c4:8c:db:c6:66:b8:
25:47:48:db:bf:f0:cb:da:80:3c:ee:04:61:29:be:
3d:1e:26:dc:07:75:fa:36:e0:e7:5e:da:8d:56:b1:
18:f9:78:c5:e2:4c:37:76:71:35:f0:74:a4:3e:20:
76:90:00:d1:db:75:08:e1:97:fb:bd:39:35:44:59:
17:0e:36:2c:51:0d:3a:bd:d1:de:63:a1:f7:fe:fd:
7f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:66:23:DE:D5:C2:48:D2:A0:2A:F1:61:69:C6:D6:B7:A6:74:98:4D
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5c:f0:6e:9c:3a:d7:32:1c:47:a0:8a:c6:0a:03:c7:51:4f:
60:77:60:cb:78:52:9b:ee:72:ab:a0:97:04:1d:6b:e5:08:a0:
16:b4:1d:28:66:fe:7d:d6:2b:91:2b:07:f7:a9:62:06:2c:ef:
cf:4a:b9:e6:0c:e1:29:68:cc:fe:e1:24:7d:22:15:cd:d0:de:
8f:f5:7a:c6:6d:94:3e:61:c0:e6:80:08:cc:cd:f1:04:5a:74:
29:fc:0e:7b:35:e2:a4:b7:ec:fc:20:04:58:dd:5c:87:c2:ea:
c0:c8:ab:e9:44:3b:27:ba:4a:1f:05:5b:b9:94:0a:a5:0e:01:
db:ce:f0:12:ab:11:02:e8:cc:e4:50:66:2e:27:08:fa:2a:68:
ca:64:17:b4:ba:b3:c2:14:ee:fe:7e:0d:6c:0b:53:7e:a7:45:
26:94:06:c5:de:ae:bf:21:5d:b8:65:b9:5d:40:21:fd:4b:b9:
f1:fe:4b:6f:fa:e8:12:f4:f9:2c:e2:bf:32:b5:f9:b8:98:cf:
ef:1a:78:84:83:09:6b:90:17:44:72:73:52:8a:ed:f0:db:c8:
f7:13:15:29:9b:da:07:a8:e7:4d:aa:6f:16:78:76:da:59:af:
c6:93:78:27:85:6c:00:35:4a:9a:78:33:b6:3f:f4:28:d8:c2:
f0:13:89:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:18:20 2025 by rpki-client