Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
File: suRItKCPDkxYooPYBzWoqAPhDU4.mft (raw, json)
Hash identifier: jOB/YWtt1gd2sHzXKVQp6vlEO0wjFEY6Gdd9a+scUvI=
Subject key identifier: 82:F6:C8:02:18:4C:33:1A:D5:9B:E0:F3:35:E7:13:63:B6:DD:DD:40
Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Certificate serial: 0197684E0E962BE6795EE05675A1AD948721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
Manifest number: 1595
Signing time: Fri 13 Jun 2025 08:00:35 +0000
Manifest this update: Fri 13 Jun 2025 08:00:35 +0000
Manifest next update: Sat 14 Jun 2025 08:00:35 +0000
Files and hashes: 1: 0JGiKje1faw9lacGbk5NhV2XAbU.roa (hash: Z5RBvg80RTlugYiMNKYpsKysKI83C+571C6SNSSEK3o=)
2: 2DxKgawRIdwPHYKPKO80oLEjXnQ.roa (hash: GkiqXgjmsGCVt8nP5qXPMp6hqSSrH1HiN32NDxCXRyM=)
3: CzOVrXq8s2rQFDCGaFJZ_xM7OZ0.roa (hash: 5XAPorQnylekwHM79ynLgJVh80voKy6A8YYVF6d1gL0=)
4: DpKy84xGq4bZRMW3bg3Qqscpy-g.roa (hash: Pghneqh0rqfe/wIbx3lltKoFinQFr3Xds6By1KC5GTY=)
5: Zf4cfRQ8Yb3zaonMniOY9mHCgZU.roa (hash: 7qovkktB6alfndSsebLaLeESbLcFDoOHnNh2I5l6SkM=)
6: rJBUoTOBCbGpyq2LQ5qyqtlWDVk.roa (hash: OOOBfJlZtCKY/fNu/6lDyCNmP9uVM4ZIRjn3vJc9saw=)
7: suRItKCPDkxYooPYBzWoqAPhDU4.crl (hash: VZsXBitOUrtp7mqTK8TEyeRYQ6ApiQyrgzXaKkJtC/U=)
8: wz_TvTU1xF0eJ_9EwkVCuufFGFo.roa (hash: Vtdi4r4GuCz7NyZSMqwPceN5sJkZoRY3YKYSc4S4CjI=)
9: yDDPfOYkq9TvDo49z4rJ89YrUS8.roa (hash: h90+S4fhQ3iqdh42EvmGUJBw540N3+LmJjYWM7l7haw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:0e:96:2b:e6:79:5e:e0:56:75:a1:ad:94:87:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e
Validity
Not Before: Jun 13 08:00:35 2025 GMT
Not After : Jun 14 08:00:35 2025 GMT
Subject: CN=82f6c802184c331ad59be0f335e71363b6dddd40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:57:10:87:ee:93:79:2f:32:b6:38:c4:97:
e1:66:20:27:36:b0:fc:a0:5f:7f:12:49:83:d1:0e:
3f:e4:b9:8d:7f:fa:39:a1:0d:e9:3b:7a:01:2e:81:
50:75:06:dd:d4:2c:b2:ca:09:97:d6:ef:b5:30:6a:
cf:a3:9f:06:3e:ef:6c:39:07:4c:3b:fb:25:ed:e1:
34:fc:83:c7:b5:d1:5f:52:62:43:49:8f:04:b2:2f:
b0:ff:1d:22:f9:5f:ae:67:3d:2f:f0:37:0f:9c:33:
a0:7d:5e:52:78:24:a8:e8:6c:ff:ab:bb:be:71:1a:
a4:6a:db:9f:2c:3f:c3:94:6f:ee:7f:e8:34:aa:9e:
0b:e8:77:5a:ef:da:e8:71:78:f9:08:05:30:04:8a:
6e:2f:68:f0:a4:68:72:70:12:01:a8:75:a7:7a:b0:
ab:64:e4:7f:18:95:6b:10:78:cf:c4:40:2d:2e:43:
81:ef:27:03:55:0a:61:e7:de:9a:28:76:d3:e5:01:
a7:b7:12:cb:f3:81:64:b9:a8:0c:ef:e7:ec:c6:b2:
47:d7:89:4d:41:e2:5c:71:9c:55:f0:9b:06:52:c3:
f9:83:55:6f:9c:48:fd:61:01:b1:1f:c8:37:32:d1:
6b:41:25:49:ba:4b:4c:ea:c3:0e:08:47:8c:8b:d4:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F6:C8:02:18:4C:33:1A:D5:9B:E0:F3:35:E7:13:63:B6:DD:DD:40
X509v3 Authority Key Identifier:
keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:56:58:55:cd:0a:6e:89:e8:f5:50:8a:12:30:5d:5a:75:5e:
a8:d8:a5:11:20:fe:99:dd:15:a8:11:e6:bc:09:a4:fe:c1:71:
b5:75:24:80:a7:0b:b4:b8:33:82:1c:b5:64:b2:46:08:38:47:
d2:32:cc:44:63:88:d4:bf:22:8f:82:ee:db:76:3b:52:d5:ce:
e8:7f:0d:6b:bd:fe:dc:c8:e9:c5:e7:06:1f:45:fd:b7:5d:52:
1e:59:8f:83:8a:6b:b7:f2:6b:ba:e9:5b:99:1c:8e:26:8b:cd:
16:21:eb:12:3f:a6:79:86:e2:7b:ce:6f:e8:4d:25:ff:f9:eb:
36:88:5a:ab:be:7c:80:bd:1c:08:6a:f1:2b:e7:4c:95:87:0b:
c8:2b:2a:29:1f:67:de:b7:f5:c5:f6:89:f3:8e:bb:f7:b8:f5:
a9:d3:2e:98:70:2f:88:71:ae:10:c5:b1:fa:b9:41:40:71:24:
de:47:16:36:25:22:a5:38:fe:b3:e4:c8:98:b5:69:c5:fd:05:
bb:d7:9f:e3:c3:6c:57:da:1d:91:94:72:6f:58:31:d5:29:15:
40:8b:3e:af:c2:4e:51:53:c4:99:e8:d9:59:13:47:c1:8a:72:
6d:d9:ca:e1:34:5d:29:b9:d6:23:c0:d1:f4:0d:57:2a:76:d3:
6b:ed:aa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:02 2025 by rpki-client