Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
File: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft (raw, json)
Hash identifier: +PNFsDeb4YDgIfSePgsCHezWymY2mukqt9kVklp6u1I=
Subject key identifier: 26:A4:68:62:1A:32:B6:5C:E5:C7:1F:C4:38:C5:57:56:C2:4C:F8:2E
Authority key identifier: 49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
Certificate issuer: /CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Certificate serial: 01976B862515045D886682BF12D165C90274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
Manifest number: 0136
Signing time: Fri 13 Jun 2025 23:00:42 +0000
Manifest this update: Fri 13 Jun 2025 23:00:42 +0000
Manifest next update: Sat 14 Jun 2025 23:00:42 +0000
Files and hashes: 1: 2VOoNC3U3dbfOvp8BLzsJ1f-ifE.roa (hash: /4n1vWOP9xioYbfhWLfqMCZdtH551Gxmhk/RZPxKlZ0=)
2: 75LTo_jTlCg81UcwDjwfJUQMDKk.roa (hash: EkR0b+zKTp/aZ94o/SjZ2ZZg+QA0fvdyyS6BFZkQ6d8=)
3: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl (hash: J0jdMREVOWjHbSl9g8BqEXMQKH9w5By4ch84fH/WaSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:25:15:04:5d:88:66:82:bf:12:d1:65:c9:02:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Validity
Not Before: Jun 13 23:00:42 2025 GMT
Not After : Jun 14 23:00:42 2025 GMT
Subject: CN=26a468621a32b65ce5c71fc438c55756c24cf82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:88:af:5c:a8:99:35:29:7b:e0:f4:e2:c3:
4a:8d:b6:0c:e5:b4:9c:71:f2:dc:04:d6:88:da:fb:
72:5c:95:2d:cc:00:c9:a5:4d:08:3f:a9:7d:d7:83:
15:88:b1:9d:ff:03:1c:49:60:b5:87:d2:47:32:e3:
83:0e:5f:76:5a:ba:0f:df:0c:46:fe:c3:7b:97:1a:
68:36:33:c6:2b:3a:fb:f8:8d:e1:fc:38:fc:62:4e:
3e:65:7b:78:e8:6f:d1:c1:22:c2:be:39:c8:0f:a9:
39:07:18:cb:89:2b:6f:1e:44:29:c9:df:92:94:ea:
60:9a:80:80:08:b7:26:d7:95:7b:93:36:1c:7b:c0:
70:7b:a8:2e:1e:1b:94:22:82:2b:18:23:53:cc:da:
1b:c9:e1:96:87:16:27:ac:c3:43:e5:d6:ab:d4:75:
f4:57:9f:de:d2:1c:31:9e:8b:57:a9:d2:ca:88:08:
10:f5:78:27:a5:45:be:7c:7b:eb:2c:56:b8:47:7f:
47:dc:f9:bc:8c:d2:50:0a:f1:54:ea:73:f5:a8:af:
19:dd:f2:86:1c:69:02:2b:fb:fb:95:65:c2:bb:bc:
36:90:61:0b:e8:2a:0f:2a:4a:47:65:a2:87:0f:72:
5b:44:a9:c5:a7:f4:56:6e:60:07:f2:c0:15:54:9c:
c7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A4:68:62:1A:32:B6:5C:E5:C7:1F:C4:38:C5:57:56:C2:4C:F8:2E
X509v3 Authority Key Identifier:
keyid:49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:83:ef:c5:10:a8:82:32:06:d6:2b:04:79:f8:f8:bc:f6:6d:
01:dd:1b:cb:f2:fb:f0:a6:96:a1:23:87:03:68:8f:6a:0b:6c:
c4:34:4c:25:81:8c:54:c4:17:ce:a2:26:76:60:51:0f:b5:0b:
59:6c:6e:02:04:1a:cf:0f:f8:e9:9d:10:c0:68:12:31:c3:ce:
39:34:79:97:f7:09:c2:c2:d7:41:94:ea:bd:35:24:0f:e7:ff:
dc:ca:bd:1f:f6:92:f5:d4:f1:be:2d:22:2d:31:f6:59:01:c7:
41:3b:7b:df:9e:23:e5:73:5a:b9:23:5f:0e:c7:48:78:be:0b:
83:55:49:96:08:47:dd:8d:0f:36:f9:5f:cf:e7:17:23:4a:cf:
5b:12:79:74:7b:39:0a:3a:d1:86:c6:f9:09:54:de:ca:10:f2:
f0:76:72:49:55:3e:8a:67:6f:f5:33:32:ab:d0:21:f3:46:4c:
c2:46:f0:26:90:f7:b8:f1:65:35:2b:f1:84:d8:d9:3f:dd:8a:
20:09:08:31:a2:0d:61:d2:68:40:b7:31:0b:0a:e4:6d:bd:f5:
0d:92:21:bd:b8:59:5b:8a:dd:ad:b4:ea:73:fb:3d:49:43:4f:
27:eb:d2:a6:71:f1:99:95:60:4b:60:6e:8d:3e:af:43:aa:38:
af:d2:9f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:32 2025 by rpki-client