Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
File: sMXmrlmHEAZksjA0zvxy1H-PS5s.mft (raw, json)
Hash identifier: G/Qg2aIC8urQvszUEUxwB1tCod+VXSI2vd54YOlHr5M=
Subject key identifier: 52:27:79:4E:D2:DC:DA:71:EB:0F:80:43:F6:10:10:E2:B7:56:0D:DE
Authority key identifier: B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
Certificate issuer: /CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Certificate serial: 01976D3D881181B6FE50982A9323D843020E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 07:00:38 +0000
Manifest this update: Sat 14 Jun 2025 07:00:38 +0000
Manifest next update: Sun 15 Jun 2025 07:00:38 +0000
Files and hashes: 1: Xpu5z6C93G9BRUn-gmewTXpV4p4.roa (hash: HRJgPQbn7ofu1m7IlOj+BpfT6NzW9G/pwBr/coPVab0=)
2: sMXmrlmHEAZksjA0zvxy1H-PS5s.crl (hash: SZBaRgQklat0K7fdNhP0CL+vfRzcP0zgiyQP4T4ZDqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:88:11:81:b6:fe:50:98:2a:93:23:d8:43:02:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c5e6ae5987100664b23034cefc72d47f8f4b9b
Validity
Not Before: Jun 14 07:00:38 2025 GMT
Not After : Jun 15 07:00:38 2025 GMT
Subject: CN=5227794ed2dcda71eb0f8043f61010e2b7560dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:be:7c:0a:1e:20:0e:64:1f:2e:2d:a1:3f:
d1:95:84:10:b1:26:a8:3e:6b:64:85:fa:92:00:7a:
01:db:b3:d1:52:83:c0:12:16:82:eb:74:e8:cd:64:
e2:1f:27:36:4a:f1:4b:03:67:f4:53:09:e5:63:78:
71:11:b3:48:69:3d:f1:9b:2c:39:6d:8b:81:1c:46:
44:26:93:f6:a5:8d:f5:18:9f:6a:9b:4c:63:9b:e0:
c0:3b:dd:ed:03:b1:18:7a:43:1b:b7:15:a9:c1:e5:
bd:c1:ef:03:6d:52:95:dc:56:96:c7:67:78:64:cf:
50:21:1a:4d:9b:36:33:a2:f9:fe:74:1d:b6:77:8f:
19:54:9e:95:4b:fc:5c:fa:48:71:25:d6:87:c7:11:
13:1a:81:89:16:66:cd:da:fe:3d:ca:50:14:08:d0:
73:d0:5b:e3:56:8c:98:57:df:5c:32:f5:a1:be:32:
16:dc:d6:06:2c:ae:f6:f5:65:bf:88:fe:5d:0f:31:
70:e6:da:99:c2:27:85:d7:f5:25:87:88:f6:d6:48:
98:7d:a9:88:ae:b4:c8:9b:65:86:70:9b:39:52:72:
6d:73:64:32:96:3c:48:a9:e0:d7:02:ff:c9:30:3d:
e3:50:0b:a4:87:fd:d0:43:9c:c5:03:85:70:78:6a:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:27:79:4E:D2:DC:DA:71:EB:0F:80:43:F6:10:10:E2:B7:56:0D:DE
X509v3 Authority Key Identifier:
keyid:B0:C5:E6:AE:59:87:10:06:64:B2:30:34:CE:FC:72:D4:7F:8F:4B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMXmrlmHEAZksjA0zvxy1H-PS5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/57ed6a-1177-4a9d-98c5-d59e264ee83b/1/sMXmrlmHEAZksjA0zvxy1H-PS5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:41:bd:97:92:0a:02:44:d4:f9:15:c7:df:20:f6:f9:1c:eb:
6b:f8:f1:9b:da:70:51:cf:25:d0:f3:65:f0:bf:12:3e:29:5c:
7f:68:fa:33:2f:e2:5e:7f:05:e6:d7:4f:5b:6e:10:bb:1f:d9:
fc:ae:56:04:fc:2c:60:e3:61:e3:e2:df:ec:77:d6:e7:5d:d2:
7b:4a:90:2f:33:6b:5c:c7:81:0d:13:a1:d7:73:5a:38:93:e1:
5d:52:c6:59:09:59:be:d4:46:6a:1a:21:5a:31:c2:2a:02:4d:
9e:00:a8:b7:bd:5d:ae:4e:b9:54:0a:7c:29:b7:a4:9a:eb:ea:
66:26:4e:f1:3e:f5:c4:ed:3d:65:d6:ea:65:5b:0a:08:86:ef:
0e:cc:2b:d1:fb:1a:11:6d:c0:a1:f0:96:96:69:3d:ac:a1:d0:
f1:3e:71:13:89:4e:a1:c3:9d:74:08:11:96:e8:10:b9:8b:34:
cb:de:a2:1d:f0:88:b0:d4:9d:4b:62:51:4e:c7:6f:71:9b:96:
02:f0:eb:ec:19:6c:2e:4f:c5:c3:c7:af:96:4f:00:d9:e5:d5:
9d:95:96:c7:20:75:e1:94:b0:e8:9b:7d:f4:86:fa:a9:6a:57:
c5:54:86:5f:df:5f:e0:d2:6c:63:7e:6f:06:14:0d:38:4e:e6:
5a:8b:bd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:35:53 2025 by rpki-client