Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File: sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier: UCTPQbEu/pSM6RCFY2QZWIv95Jin58QmteoRw8jfsWw=
Subject key identifier: 22:C5:FC:00:48:31:AD:E0:DB:91:26:E8:CC:42:2F:93:25:7E:2F:44
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 01976C2AAB2919D180A212CDD491F24488FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 02:00:25 +0000
Manifest this update: Sat 14 Jun 2025 02:00:25 +0000
Manifest next update: Sun 15 Jun 2025 02:00:25 +0000
Files and hashes: 1: BA5XRS-VBm8RVVbSCJW6HST0wD0.roa (hash: b9K7NP8BwX8VNftSD4zDv00erFxrleUYzaeFhztZOO8=)
2: gbBXW-vxInHi16BrBBKHLf7If3g.roa (hash: fBYMDG4bZkxXYdO0y/chVffLP2RSHLaDCHJZ1DFzD3E=)
3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: 3PTSqj0ksq/iFvw10qLzz1TasC7Z6Q5kFQ+6BDDD0eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:ab:29:19:d1:80:a2:12:cd:d4:91:f2:44:88:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Jun 14 02:00:25 2025 GMT
Not After : Jun 15 02:00:25 2025 GMT
Subject: CN=22c5fc004831ade0db9126e8cc422f93257e2f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:8d:57:f4:1a:65:e7:76:de:e7:58:ec:ba:
e1:9a:18:1c:1f:f4:3a:e1:c9:47:0e:77:e1:97:98:
a7:44:92:6a:da:5e:8a:51:e6:99:68:e2:a4:25:b0:
34:6b:ba:2d:76:22:ef:d4:76:76:05:9a:61:b5:ea:
95:e6:3f:ce:54:c7:84:95:7e:2e:0f:d2:d3:bd:4e:
b3:0c:9c:11:67:f4:32:35:68:f7:cb:63:b9:49:f7:
f7:d0:28:de:1e:30:8b:03:2a:c9:2f:a1:97:a6:79:
69:2e:cf:22:0e:c2:b1:7f:fb:22:9c:82:18:89:83:
2f:5f:2d:9c:b4:9d:5a:b6:06:4b:f8:73:5f:15:58:
08:b4:ab:3f:c7:0d:fd:c6:fb:10:b8:31:24:f9:07:
8c:3e:3e:a9:3a:ee:50:24:f9:3e:89:c8:9b:d7:7e:
60:0b:48:29:25:14:62:d7:69:0a:75:42:d3:e8:0a:
41:23:49:2d:3a:5d:7f:df:11:31:65:0b:25:8a:c8:
2b:21:7d:db:87:4f:78:a2:74:d6:76:95:3e:b7:ad:
ae:4f:87:39:47:9d:91:55:db:24:e5:19:1a:8e:88:
9b:a0:d0:41:c5:9c:39:75:f1:42:73:68:eb:d6:f6:
f4:d3:41:10:19:9f:72:27:ca:36:b9:94:3b:25:aa:
fc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C5:FC:00:48:31:AD:E0:DB:91:26:E8:CC:42:2F:93:25:7E:2F:44
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:58:58:3b:84:cc:b3:b0:c3:77:58:62:54:bf:dd:6a:a9:a3:
31:57:7f:ec:ff:bd:b1:dc:61:22:bb:c7:d9:7a:bb:4e:4e:f9:
49:91:a8:f9:6e:0c:f3:b5:a9:2a:b4:36:f8:10:9a:68:1e:37:
8a:9e:70:40:cc:36:ce:b3:3c:35:ba:2e:9d:ec:fa:37:2f:50:
34:73:ff:1f:23:c0:4e:2a:39:84:32:5c:fc:2d:80:73:87:73:
29:2d:b0:f8:21:41:0a:af:b2:6a:18:4f:92:ee:3f:d9:c5:7b:
38:aa:76:ee:09:a3:ec:22:9c:2f:70:b9:de:d0:ca:71:98:69:
0c:af:32:3f:85:db:39:0b:0f:b9:dd:65:bd:9c:af:b7:93:61:
b9:dd:68:a4:b4:88:0d:68:8c:12:74:bf:e6:51:ed:5c:e2:e6:
e3:5a:14:cd:3a:5e:1a:49:fb:13:8a:e4:38:4b:47:f0:b2:e6:
9b:6a:eb:41:fe:68:dc:1a:5a:a7:82:b9:30:fa:5f:7c:46:64:
22:bd:ce:36:a0:52:44:ce:4e:67:d3:49:39:65:fa:ad:26:95:
d8:68:e3:04:0a:ab:a8:7a:f2:f6:7b:c3:98:08:db:de:29:4b:
52:67:0c:35:ac:cb:2b:1e:1d:8d:88:7a:fb:b2:14:17:53:bb:
8d:13:81:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:04:49 2025 by rpki-client