Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
File: sfcTzyBVLWxcI_CeezdmmEb5ylA.mft (raw, json)
Hash identifier: GwhGqYEhxa/AYyVfOuPQt5NDV0dNYefB7mAkRDWVEus=
Subject key identifier: B5:BC:58:BC:5E:79:79:30:AB:5A:4D:DE:44:01:F7:58:8B:AF:7B:18
Authority key identifier: B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
Certificate issuer: /CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Certificate serial: 01976D06E8E0E3403A26E41830199225E784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 06:00:58 +0000
Manifest this update: Sat 14 Jun 2025 06:00:58 +0000
Manifest next update: Sun 15 Jun 2025 06:00:58 +0000
Files and hashes: 1: RlSX_O9nuK4visZrcXhuUrMTobY.roa (hash: rJSur0He4KlKRGvS+jaXIpRrSe2/3CDqYP07r9YT8i0=)
2: _FEDHOA1DaPuw5szVg_jX1NChtc.roa (hash: NTy69zIQkKyjkxDfKJ+X67SWRMXHN0I5/tJxmftqgVU=)
3: sfcTzyBVLWxcI_CeezdmmEb5ylA.crl (hash: wvgd4ppkHvn4ulZuZfHYGkRxkDJkoktnKptsUQ4oKYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:e8:e0:e3:40:3a:26:e4:18:30:19:92:25:e7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f713cf20552d6c5c23f09e7b37669846f9ca50
Validity
Not Before: Jun 14 06:00:58 2025 GMT
Not After : Jun 15 06:00:58 2025 GMT
Subject: CN=b5bc58bc5e797930ab5a4dde4401f7588baf7b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:a8:a4:46:e0:3e:c1:cd:d0:a6:dd:4a:36:
16:d5:0f:db:73:ad:ef:76:27:d7:2e:ee:21:f6:14:
d0:fa:ee:c9:01:64:6d:83:84:b5:2a:1e:6f:36:7a:
6d:4f:f6:ba:2f:d5:f3:f4:55:75:e5:b5:54:57:0a:
a1:84:ce:3c:02:92:b5:e8:dd:a7:36:1d:88:14:01:
7b:56:5f:55:6e:08:90:3e:6b:3a:c7:14:43:68:c5:
7b:18:81:6e:9a:3b:b4:48:03:ac:66:cb:9f:5c:e1:
22:02:6b:36:d5:c4:85:0a:0b:98:1a:e2:2c:3d:18:
11:1c:86:5d:bb:b1:99:45:31:5e:90:25:e1:0f:bc:
28:f8:66:62:4b:78:42:da:13:35:58:44:ce:2d:cc:
2c:eb:4f:d6:ec:51:34:a6:ef:cf:58:16:46:b8:98:
1c:d4:43:d6:b0:5c:20:59:40:d3:2a:d5:3b:88:26:
76:22:af:7e:79:37:25:5a:7e:00:67:f8:48:b6:81:
8e:c0:97:21:fa:2d:a4:46:57:f9:eb:4e:dd:df:d6:
5c:74:c8:8e:f5:c8:2b:4f:00:83:19:d0:04:19:95:
26:43:d3:bd:25:59:12:d5:e4:d4:43:a3:0f:4e:f8:
51:e3:e2:de:9d:a3:58:39:8b:80:96:eb:61:bd:b6:
e3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BC:58:BC:5E:79:79:30:AB:5A:4D:DE:44:01:F7:58:8B:AF:7B:18
X509v3 Authority Key Identifier:
keyid:B1:F7:13:CF:20:55:2D:6C:5C:23:F0:9E:7B:37:66:98:46:F9:CA:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfcTzyBVLWxcI_CeezdmmEb5ylA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f1af29-7f09-4f9c-acd6-694d78b32d20/1/sfcTzyBVLWxcI_CeezdmmEb5ylA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8b:c6:00:51:86:6b:0b:94:18:69:64:38:da:a4:b0:df:89:
5f:8c:8d:a9:2b:72:64:3f:7e:ea:77:15:e3:87:d0:c4:25:1e:
60:5a:fd:10:d3:d0:eb:29:ea:d1:05:e4:03:dd:4d:c7:01:28:
ec:eb:21:9a:45:85:86:f3:b4:e1:ae:53:5c:dd:bf:fa:25:9b:
6c:24:47:41:17:50:c0:40:66:58:f7:33:32:10:38:2e:77:0a:
7d:7d:75:12:68:49:b6:9a:99:71:84:a5:7f:62:a9:02:fc:cd:
6a:03:36:6d:4f:8f:5d:07:50:97:b3:66:80:cf:cd:cf:01:44:
c1:fb:5c:a3:57:2b:e1:30:24:10:33:e4:00:64:f2:5e:b6:ec:
af:1b:20:c7:7c:52:f3:1c:6e:58:af:29:39:aa:61:bf:fd:92:
16:01:21:8f:f2:0d:1e:ca:4e:a9:a1:b2:c3:9a:dd:66:e8:c3:
2d:18:73:0b:37:ce:01:50:8c:33:b5:6d:40:35:87:9d:da:3b:
65:74:aa:c4:cd:14:9b:26:12:3c:57:b4:bc:f1:80:14:93:3b:
4c:05:d8:f2:9a:85:1a:ca:b7:8d:7b:6a:8a:58:87:a6:fa:c2:
65:e9:3e:78:40:dd:ac:ef:88:f4:22:98:23:7c:e2:3d:63:ae:
ee:94:0c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:18:37 2025 by rpki-client