Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
File: SBVxyrg7M5yGCR7HR8ITX85PZYc.mft (raw, json)
Hash identifier: BT31JsX1DWrEqfq7ldxORCwKRE/nVqvLwMGqiV3soYk=
Subject key identifier: AA:07:8E:1B:D4:0C:6A:43:E0:43:19:D9:E8:CA:D8:F1:47:6C:77:C4
Authority key identifier: 48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87
Certificate issuer: /CN=481571cab83b339c86091ec747c2135fce4f6587
Certificate serial: 01976A061727786F8E4035A4C21BCA3A8A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
Manifest number: 1431
Signing time: Fri 13 Jun 2025 16:01:13 +0000
Manifest this update: Fri 13 Jun 2025 16:01:13 +0000
Manifest next update: Sat 14 Jun 2025 16:01:13 +0000
Files and hashes: 1: SBVxyrg7M5yGCR7HR8ITX85PZYc.crl (hash: ovlrKGvwVrK5ZbpGd2OI4FVfm+aKUaGiW+XEhw63wBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:17:27:78:6f:8e:40:35:a4:c2:1b:ca:3a:8a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481571cab83b339c86091ec747c2135fce4f6587
Validity
Not Before: Jun 13 16:01:13 2025 GMT
Not After : Jun 14 16:01:13 2025 GMT
Subject: CN=aa078e1bd40c6a43e04319d9e8cad8f1476c77c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e9:5b:19:7b:37:a0:b8:16:39:d8:84:c6:32:
8e:fb:56:a0:cd:b8:16:67:34:bb:a2:af:20:1f:05:
6c:e3:3b:98:d7:2f:40:e7:86:21:ce:b7:88:2a:ba:
3f:57:7d:3d:50:d0:27:43:e2:f7:d6:ee:e2:45:ee:
13:32:7f:f1:ae:1b:9f:6f:07:df:0d:34:c4:d3:8c:
f7:f9:18:94:39:7f:e0:b5:98:d4:0c:9e:b5:78:b3:
4e:80:71:b3:6e:af:97:82:e0:9e:9a:b6:5e:7b:4f:
b8:64:44:19:6e:10:07:9e:23:66:2c:4c:74:17:b6:
72:71:00:63:e2:38:72:e1:0f:c1:e3:b7:c3:25:c4:
f9:19:db:b7:de:9f:d0:b3:fe:ed:4f:81:0b:0d:74:
8b:d4:97:33:73:c7:ec:26:38:3f:9c:c1:18:48:de:
e0:6e:31:0e:08:a9:3c:22:d2:36:ae:54:d2:cb:37:
3e:95:f4:86:78:e0:12:e5:ff:0b:fd:56:75:cc:e1:
3d:55:42:99:a3:79:5e:22:7a:0d:3c:33:89:0a:30:
b3:e3:12:81:42:05:be:92:9c:ea:6d:7f:b8:76:a6:
7a:ba:7e:5e:ff:b0:c5:0e:1b:6c:32:ba:40:b2:fa:
92:6c:92:c3:ee:47:23:14:c4:17:e1:d3:8c:a3:60:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:07:8E:1B:D4:0C:6A:43:E0:43:19:D9:E8:CA:D8:F1:47:6C:77:C4
X509v3 Authority Key Identifier:
keyid:48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e3:5b:2f:6c:75:21:d2:b8:08:fe:49:b0:fe:3d:e7:94:2a:
0b:85:37:26:6c:c5:dc:06:d7:ca:8c:7d:b9:86:5e:6c:2c:95:
f9:99:8a:cb:dc:0c:2c:85:2e:26:11:18:a8:05:b9:bc:95:00:
38:2c:d3:3d:5f:e9:c8:a6:83:bc:89:5a:bb:eb:91:d0:74:d8:
15:ba:4e:5c:21:7c:7f:ea:11:6b:5c:47:dc:6b:28:3c:07:05:
9c:e4:98:c3:0b:b7:72:2a:30:f0:a2:f2:96:7c:95:e9:e7:fe:
b9:ec:fb:9e:ad:88:94:9a:16:ef:b7:47:c3:22:7e:71:18:35:
10:b0:73:43:d4:ee:0c:7e:96:d4:7c:2c:bc:85:74:31:7a:90:
2f:64:17:76:24:82:fa:a7:18:d8:d1:bd:a7:29:36:ad:4c:ea:
e9:fc:3d:fe:2f:69:3f:29:3b:e3:f5:82:48:c8:7a:68:07:e1:
fa:3e:f7:ef:da:60:cb:7e:a6:ce:26:94:3a:7f:90:43:46:de:
40:ee:cf:d3:ad:f4:76:f3:96:96:db:c2:8b:d1:5f:c3:5f:ca:
e3:f4:06:26:4e:ce:39:e1:0e:81:0c:c3:02:0e:07:50:91:0f:
4d:b0:2b:84:e8:b2:06:c0:61:80:c2:06:dd:a2:98:83:3b:c2:
18:1d:c1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:05 2025 by rpki-client