Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
File: sGVRk378luFF4zoevKJEktwSDss.mft (raw, json)
Hash identifier: NVPAlMdftNtBQOuWhADb8mq3YoQScibDVZfHGs5HTqw=
Subject key identifier: 37:C6:FF:B8:2F:E6:BE:47:18:40:22:1D:49:EC:84:D6:3E:28:ED:63
Authority key identifier: B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
Certificate issuer: /CN=b06551937efc96e145e33a1ebca24492dc120ecb
Certificate serial: 019768F303732E89C69D162A9F154EB578FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 11:00:45 +0000
Manifest this update: Fri 13 Jun 2025 11:00:45 +0000
Manifest next update: Sat 14 Jun 2025 11:00:45 +0000
Files and hashes: 1: CwqvWSmBdm9lt3PehiaP0H6J-oY.roa (hash: gTSav2fMjMmokQJGJr0YwjWXX9H3AhJSgjsJ2wpM5SA=)
2: QdvbepQukFmfMSQYf6HBBLcHcMk.roa (hash: F/Id75RSk4+xz0N0tNwJ7jB7AAssoyiwdWIUCFeT7Qg=)
3: sGVRk378luFF4zoevKJEktwSDss.crl (hash: okL7QfD6CFQ2M6shEaYjQqiYFOsGRPq2IZIELpkdZEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:03:73:2e:89:c6:9d:16:2a:9f:15:4e:b5:78:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06551937efc96e145e33a1ebca24492dc120ecb
Validity
Not Before: Jun 13 11:00:45 2025 GMT
Not After : Jun 14 11:00:45 2025 GMT
Subject: CN=37c6ffb82fe6be471840221d49ec84d63e28ed63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:09:5a:6e:1b:6d:79:d7:d1:1b:b0:bb:da:
34:b7:36:ee:3d:92:1f:8e:cb:eb:13:18:50:18:43:
4a:9c:7b:81:50:d5:3d:99:ca:b8:aa:59:c9:67:9d:
57:d5:d5:1c:7a:40:3d:16:1b:e2:4d:8a:cc:53:aa:
4a:d3:cc:d9:1f:36:1a:ce:27:5f:27:20:a2:ad:15:
fd:21:2d:aa:21:6a:df:06:50:c0:3b:7d:bf:27:0b:
d8:ca:d8:ed:bd:fc:e1:0c:e5:13:4d:ed:96:17:c6:
bc:5f:3b:78:f7:22:a0:29:5c:e4:1f:a9:82:38:fc:
33:1e:45:c0:d0:3a:dc:51:d5:bc:3a:91:44:89:bd:
9d:3d:e5:15:57:a5:ea:5d:a4:04:b9:f7:62:c3:ce:
9b:9d:65:35:f3:fd:7e:d3:ec:d6:0f:48:3e:59:bc:
9c:02:d3:e3:4c:2c:c1:68:75:0c:35:8f:45:29:dc:
b9:b5:29:e0:1a:4d:82:07:6a:39:de:8a:7a:c5:ca:
01:d5:bf:fe:43:56:c3:03:cd:2e:ba:0f:7d:9d:20:
ea:87:f6:e0:a2:27:e0:a3:89:f7:7d:c5:86:45:1f:
7e:ae:48:6b:13:05:01:32:23:b0:d8:54:39:5d:a8:
01:7a:4a:bc:40:6e:ce:3e:aa:15:32:4c:70:30:2a:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C6:FF:B8:2F:E6:BE:47:18:40:22:1D:49:EC:84:D6:3E:28:ED:63
X509v3 Authority Key Identifier:
keyid:B0:65:51:93:7E:FC:96:E1:45:E3:3A:1E:BC:A2:44:92:DC:12:0E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGVRk378luFF4zoevKJEktwSDss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2c4731-89d5-4e9b-b4aa-bf09ad32c888/1/sGVRk378luFF4zoevKJEktwSDss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:94:93:a3:99:72:d8:f4:56:7b:32:5f:00:bd:36:04:7e:7f:
fd:14:4a:11:2f:d6:38:38:27:90:77:6f:a3:5b:88:db:e0:fa:
3b:22:49:dd:d3:3c:f6:28:f2:50:90:84:68:2d:2e:2a:32:93:
4c:da:38:de:8d:5b:c8:f8:82:ed:31:69:b1:aa:e8:82:0b:c1:
0a:a7:24:8c:5d:68:2d:38:f3:68:f8:38:e1:41:62:5a:ce:0b:
73:e2:ed:83:97:4f:e8:a1:74:44:4c:f4:ca:1e:4a:07:2f:b1:
b2:95:4a:84:80:bf:10:63:92:7d:a8:4f:af:15:2b:28:12:b0:
8a:99:31:b7:18:fa:58:14:1b:a7:2f:1f:b0:17:88:a6:ab:b3:
9c:b3:1e:08:ba:f8:2d:ec:26:cc:f5:ab:f5:5c:51:2d:4c:1d:
0c:64:dc:fb:bd:87:b6:d4:8c:9f:be:79:72:7e:7c:86:e7:2d:
ba:7a:1a:22:b4:7d:72:ed:87:69:5f:87:63:37:4e:31:15:02:
88:39:cd:89:65:fc:4b:5e:cd:c6:47:64:f7:44:34:d7:c4:8f:
99:59:2a:3b:b2:e7:c2:e1:5b:fe:bd:07:c9:d7:07:28:0f:da:
8d:41:00:79:1d:4d:d6:37:d6:be:fe:b7:2a:0b:52:3a:17:76:
b8:53:6e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:00 2025 by rpki-client