Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File: sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier: 8Zmahv7onE2PXQHvuFreWkA65g98wnasNh1CuISSL/c=
Subject key identifier: E5:94:90:CC:87:07:D9:A1:C4:78:1D:52:CE:67:73:83:3E:BC:DA:5B
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer: /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial: 01976C61F705A5473ED7A69AC049C03F275F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 03:00:48 +0000
Manifest this update: Sat 14 Jun 2025 03:00:48 +0000
Manifest next update: Sun 15 Jun 2025 03:00:48 +0000
Files and hashes: 1: 2nyXOUnq8HwO4oLCvfJ-Ox7H8mw.roa (hash: NuZHCaEAk+qkjfN7phn7HKdi7yOnn+ng8AEUE8vglQE=)
2: GKEiCiXD51YV54o_AXW0cf5rHVo.roa (hash: /4UzjNRUyHHeTjZCH+5v/WfPwcjPfXkUUwUC0eRZ12c=)
3: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: Fbog9CQomSDWtOSo7pWQXndhpV8dIzZq1wARK3ODmv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:f7:05:a5:47:3e:d7:a6:9a:c0:49:c0:3f:27:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
Validity
Not Before: Jun 14 03:00:48 2025 GMT
Not After : Jun 15 03:00:48 2025 GMT
Subject: CN=e59490cc8707d9a1c4781d52ce6773833ebcda5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:e4:45:40:7e:f4:db:44:7d:ec:b1:a9:d8:
0b:8d:9f:6e:cc:47:00:fa:c0:ab:68:05:e8:7e:0c:
0b:d5:00:28:8b:84:15:31:92:23:ba:f6:de:fe:9b:
09:64:19:d7:80:e7:5f:29:eb:1f:6b:07:77:b8:19:
71:73:dd:c4:cf:4e:7b:23:6a:a7:89:2f:85:5e:43:
1c:2d:ee:af:37:0b:f5:5f:3e:e6:33:62:9c:e8:81:
76:ae:7f:ae:4d:b4:93:0f:3c:93:45:df:b4:20:bb:
9c:51:09:a4:38:a5:c8:78:2b:94:9d:75:77:42:59:
f9:f3:6f:8d:16:36:5a:26:5c:79:35:3c:24:ba:25:
aa:38:f7:2d:82:f7:9e:fc:aa:3c:27:87:5a:17:df:
77:bb:2e:1f:ac:f6:e0:cc:e5:f3:3b:c6:91:7c:85:
4e:dc:4b:5c:69:fc:3c:08:5e:87:e5:ab:29:e8:eb:
f5:51:3d:45:3f:17:c0:c7:06:f4:c9:bf:2a:7c:df:
ee:f8:51:0a:9c:ce:24:62:f0:fb:50:ad:0b:a3:75:
e5:5e:02:53:2a:19:41:1d:da:5e:62:e7:80:34:4e:
1f:b3:eb:23:29:cd:87:7d:b4:c1:49:49:3f:8d:be:
82:02:41:45:39:a4:8a:0f:24:40:c9:6a:f1:ae:e6:
d7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:94:90:CC:87:07:D9:A1:C4:78:1D:52:CE:67:73:83:3E:BC:DA:5B
X509v3 Authority Key Identifier:
keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:66:e7:fb:6a:22:c6:b1:9d:5d:2f:a0:1e:24:53:6b:25:ba:
24:8c:04:01:2e:db:e1:9f:4a:a7:e1:55:6f:7a:19:41:fc:f8:
d2:50:25:9c:f1:c9:3c:83:f4:1b:e6:b2:d8:8f:14:f3:6d:21:
8f:84:c9:20:e1:02:e5:93:c4:b9:cf:d2:9a:41:1a:fb:9a:26:
24:7e:00:94:48:d5:fe:82:ef:b4:66:33:e3:61:66:ed:bb:6a:
e1:e7:ca:b7:cc:48:37:35:be:ad:1c:66:91:b8:40:ac:35:07:
f7:19:0f:29:07:4d:00:88:3a:4e:41:70:be:c9:e1:d6:68:94:
23:26:fc:be:9c:2c:d5:26:e7:cf:7e:f3:b1:ec:9f:0e:bb:c2:
f3:7a:27:61:8a:e5:f6:82:4d:77:dd:87:c2:dd:da:3c:f7:59:
3d:32:21:a9:c3:25:29:3f:43:18:7d:83:12:2c:1b:6c:f2:1e:
99:5d:66:75:42:3f:3c:e1:50:ea:ab:13:36:1c:4e:58:3e:00:
a2:5c:93:4c:cc:98:4b:17:a6:3a:a5:8d:89:5d:84:b7:85:f2:
a4:8e:ad:ff:84:f2:09:1b:05:2e:0a:90:ab:76:d0:fe:d0:f8:
c8:f8:3c:82:0f:bc:08:30:0b:b1:84:c7:f4:09:9c:39:07:0f:
ac:78:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:34 2025 by rpki-client