Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
File: SVbzCE2TEO-hvAfvMfk0spQfED4.mft (raw, json)
Hash identifier: NftDpYKyHw7k1zlNvd1HwHsjh01tr8/WLBx/Ec9HwmI=
Subject key identifier: BB:1E:6E:E4:EE:7C:43:B1:4B:42:A8:AA:22:57:36:E6:29:21:83:B4
Authority key identifier: 49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
Certificate issuer: /CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Certificate serial: 01976929E17BB801D82341F83B7504D3B4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 12:00:41 +0000
Manifest this update: Fri 13 Jun 2025 12:00:41 +0000
Manifest next update: Sat 14 Jun 2025 12:00:41 +0000
Files and hashes: 1: QocjuYoGfozpr0QiTXkGPfsUrcg.roa (hash: Y8oC4kwoV9mXXZSXGd1lAHQDlPdz5kxQi4KnTi7EYOM=)
2: SVbzCE2TEO-hvAfvMfk0spQfED4.crl (hash: HeKjLKbp47Bd0Z9/XoCAxfBamu9XCG6GDw/bDGGhC0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:e1:7b:b8:01:d8:23:41:f8:3b:75:04:d3:b4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4956f3084d9310efa1bc07ef31f934b2941f103e
Validity
Not Before: Jun 13 12:00:41 2025 GMT
Not After : Jun 14 12:00:41 2025 GMT
Subject: CN=bb1e6ee4ee7c43b14b42a8aa225736e6292183b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d1:ba:3c:e6:67:cc:10:3b:85:70:b8:f7:15:
c1:1b:7d:8e:79:45:be:01:9e:38:04:87:08:5d:2e:
b8:5f:f0:83:f3:62:b4:fe:52:18:0f:1b:57:47:3c:
cb:d7:5f:e7:01:e9:5b:63:07:36:77:65:d9:c1:3d:
bc:6b:7d:a7:bf:12:6e:b7:12:b8:a6:f7:d5:33:f7:
59:24:2f:77:65:d3:69:8b:11:87:51:3d:2c:37:7c:
1a:0f:94:8b:04:bb:ab:97:53:ed:b8:c2:ba:20:14:
5a:b5:f3:8f:84:18:a0:c2:8f:7e:61:8c:13:90:5f:
3a:24:37:c7:ed:b3:37:06:94:3f:22:14:a6:e1:7c:
47:31:c1:1b:e7:cf:c9:73:74:99:76:d0:50:d2:c6:
58:02:87:49:e6:46:d0:d7:69:48:f7:7f:d1:4c:53:
c7:b1:ac:c2:fd:bd:2b:0c:9f:cd:d3:1a:37:ae:53:
0f:cb:6f:1b:63:6a:cd:dc:95:6a:2c:a5:9f:30:9f:
d9:d2:40:f0:c4:ed:e8:7f:3b:0f:da:73:7a:6a:85:
b9:6d:59:c7:10:3a:56:75:a7:92:75:62:0c:96:a7:
35:1a:b5:56:d6:ca:2c:bb:aa:8e:75:a0:25:69:e0:
3d:55:36:2c:49:96:a2:ba:b5:88:d9:31:7b:b8:65:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1E:6E:E4:EE:7C:43:B1:4B:42:A8:AA:22:57:36:E6:29:21:83:B4
X509v3 Authority Key Identifier:
keyid:49:56:F3:08:4D:93:10:EF:A1:BC:07:EF:31:F9:34:B2:94:1F:10:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVbzCE2TEO-hvAfvMfk0spQfED4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4af898-21cb-4d8d-a63f-1dc967d56409/1/SVbzCE2TEO-hvAfvMfk0spQfED4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:92:4d:c1:51:f8:e9:0d:3c:7b:67:38:bc:ab:4e:1a:ff:b8:
be:09:5f:29:e4:f3:5d:d8:16:66:e2:37:cd:42:36:2f:c4:48:
e7:46:4b:04:14:c9:d1:6a:ba:2a:e6:9c:93:6f:7f:e7:d2:5f:
2d:e5:f5:44:b4:4c:b0:9c:84:34:af:fd:08:44:a2:3e:15:eb:
8d:46:17:7f:00:22:59:a8:19:58:6f:07:66:61:a8:fc:e7:5c:
c3:56:61:5e:ca:d9:c1:52:34:c3:eb:50:60:f2:77:81:48:cd:
6c:5b:a0:20:21:ba:8b:b7:f4:df:30:62:fa:86:24:1a:46:49:
3a:e6:c6:20:fa:50:35:96:33:83:68:2f:b2:12:69:c0:0f:8a:
ae:48:e1:9c:45:aa:0e:91:db:4a:3d:fb:10:3a:e1:ec:15:72:
0d:31:26:5c:5d:21:c4:a7:5c:df:19:cc:5b:7e:04:8b:06:24:
0d:ab:15:6a:7a:77:a6:4d:69:21:e3:07:88:71:1a:cd:cc:33:
e6:a7:98:31:f5:1e:5b:3f:cb:f0:e4:ad:01:1e:65:53:f1:55:
ff:bb:3a:e5:24:cd:f0:0f:0f:c3:7d:b5:0f:15:91:5b:ae:49:
bc:57:df:f9:ae:a2:0a:46:65:15:32:36:b1:22:c3:c7:69:c3:
e7:be:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:11 2025 by rpki-client