Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
File: SornhxUlvi6k0N_9rk86i_83JJY.mft (raw, json)
Hash identifier: m+CcFbQ+MQTjtkthe6oN4201pusOvUIhrcUWzpMzTk8=
Subject key identifier: 3C:6A:3C:4D:6B:FA:77:72:8F:92:D3:6D:E4:50:AF:77:A2:BC:D4:EB
Authority key identifier: 4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
Certificate issuer: /CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Certificate serial: 019784331C8664BBF0B39F5237E5982E488A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
Manifest number: 132C
Signing time: Wed 18 Jun 2025 18:00:31 +0000
Manifest this update: Wed 18 Jun 2025 18:00:31 +0000
Manifest next update: Thu 19 Jun 2025 18:00:31 +0000
Files and hashes: 1: 8gW9HzVtsq8E7qA7ltvcwjfvGOc.roa (hash: YA8a2IoWK4RdfAw+N6IQe1enWMEGZEE3fnlKSQfkojY=)
2: SornhxUlvi6k0N_9rk86i_83JJY.crl (hash: PXb1PN5fdAn9omBwMQ5OC074be6czAXmqbaPfaciqF8=)
3: vrCnquL3s__Kn2NMqtqwOpjNIg4.roa (hash: 0IwPyrwAs82lGKG6S2evYkZYnCmMy2vXHa9NpVcKusQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:33:1c:86:64:bb:f0:b3:9f:52:37:e5:98:2e:48:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8ae7871525be2ea4d0dffdae4f3a8bff372496
Validity
Not Before: Jun 18 18:00:31 2025 GMT
Not After : Jun 19 18:00:31 2025 GMT
Subject: CN=3c6a3c4d6bfa77728f92d36de450af77a2bcd4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:a5:43:c5:5b:3f:4d:7d:ba:55:2f:40:1e:
9d:69:73:4d:b6:85:34:43:aa:c5:1c:5b:20:2a:de:
26:9b:48:f2:ed:3a:e9:30:3c:1d:4d:75:8d:8a:82:
62:50:b2:4c:33:6b:24:29:70:52:49:f4:01:77:5f:
17:b2:2b:b5:46:07:77:2a:1e:d1:b8:47:4a:a2:8d:
12:6b:b1:53:6d:89:c1:5e:c3:59:2b:7b:33:14:33:
e4:af:c0:c6:36:36:ee:8f:7e:38:5b:21:65:bf:13:
1d:06:b2:dd:b0:01:1b:df:4c:e3:c7:e4:fe:c5:97:
28:4f:f4:e6:fe:ac:06:e2:7b:d7:e7:94:68:43:7b:
4c:08:b9:f0:13:14:0e:c9:ce:8d:9d:b0:f5:6a:a9:
08:e1:3b:da:ba:94:10:3c:a9:a8:7d:33:ba:cb:85:
c6:29:08:0e:07:c9:2c:b7:d6:a5:97:84:38:85:40:
4e:96:2d:ce:2c:25:d1:3b:42:22:68:93:6f:11:b8:
ad:c9:0b:fe:14:77:80:67:49:c4:67:98:1c:ca:5a:
20:69:8e:7f:84:f2:53:14:4f:08:f4:68:ff:92:53:
f1:84:e0:46:41:fa:4b:b8:0a:eb:12:5a:07:66:40:
08:c5:2f:c6:49:e0:86:89:f8:98:de:36:9a:33:87:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6A:3C:4D:6B:FA:77:72:8F:92:D3:6D:E4:50:AF:77:A2:BC:D4:EB
X509v3 Authority Key Identifier:
keyid:4A:8A:E7:87:15:25:BE:2E:A4:D0:DF:FD:AE:4F:3A:8B:FF:37:24:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SornhxUlvi6k0N_9rk86i_83JJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/fa6cc2-27af-416c-a134-98f7454ba6ce/1/SornhxUlvi6k0N_9rk86i_83JJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:42:19:65:cd:3e:9a:50:ec:26:df:75:19:de:35:7d:c0:96:
f6:eb:d4:06:4e:f3:5c:15:b1:47:ee:e1:b2:7c:5e:3c:f3:51:
57:77:71:f4:3e:18:7a:22:f9:c3:5e:33:86:07:fd:52:d5:42:
81:17:81:58:a5:60:0e:66:e6:5f:3c:0f:90:63:e4:50:ed:a1:
45:10:d3:b9:f3:df:4d:17:13:03:ab:80:e1:eb:59:d9:ca:1e:
1f:6b:17:73:14:53:01:87:b1:f9:34:4f:83:99:73:fb:1f:d6:
e4:7f:e3:19:1c:90:59:6e:d3:4f:9c:52:a9:d6:63:48:39:96:
50:1a:39:a5:13:d2:15:50:c5:5c:df:96:9e:9e:a1:55:ee:b5:
5d:77:33:53:22:e4:9a:b5:2e:8f:95:fb:d8:b3:30:96:19:c5:
07:ec:20:d6:65:87:05:cf:55:31:d3:d9:e0:ec:ba:26:61:c8:
b1:70:94:c0:6f:52:d1:69:43:07:a5:65:df:d3:14:f7:33:00:
a9:ee:f4:61:f3:2a:b7:69:b0:29:f4:cc:c2:b8:10:e7:93:c5:
67:2b:60:5e:03:0a:20:38:be:2e:e0:09:7f:9f:18:24:82:14:
27:99:51:bc:20:2b:d4:d2:cf:bd:e8:8b:09:c1:a7:b9:6e:fe:
c9:c0:53:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 01:15:54 2025 by rpki-client