Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
File: sNcTFlrGKE-0HV38gmV3_B2gtzA.mft (raw, json)
Hash identifier: BauaR7NDM8hpnf4358ooLLYKJkrIqftBSN6qVhwFHLI=
Subject key identifier: C5:93:5C:7D:EB:D8:A8:BB:36:06:4F:E7:19:5C:38:9F:FA:5F:B3:FE
Authority key identifier: B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
Certificate issuer: /CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Certificate serial: 01976F2CC0FCD5F0974C31B39438246C19FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
Manifest number: 12A6
Signing time: Sat 14 Jun 2025 16:01:33 +0000
Manifest this update: Sat 14 Jun 2025 16:01:33 +0000
Manifest next update: Sun 15 Jun 2025 16:01:33 +0000
Files and hashes: 1: sNcTFlrGKE-0HV38gmV3_B2gtzA.crl (hash: udoItiJi2y6uadgR5RwAZFtYGQLGoH4NT0HVVF8DS6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:c0:fc:d5:f0:97:4c:31:b3:94:38:24:6c:19:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d713165ac6284fb41d5dfc826577fc1da0b730
Validity
Not Before: Jun 14 16:01:33 2025 GMT
Not After : Jun 15 16:01:33 2025 GMT
Subject: CN=c5935c7debd8a8bb36064fe7195c389ffa5fb3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:2b:5b:ba:17:77:4c:83:9c:a5:8c:db:a7:
bb:bb:72:58:3b:b6:85:de:ee:ce:6e:13:2b:44:b0:
91:53:b1:27:bf:bb:28:0f:af:b4:55:e9:7b:f8:0b:
d7:fc:92:e9:ef:62:00:13:3e:9a:94:e7:70:40:30:
6c:09:ee:16:5d:61:10:ef:de:04:c9:bd:56:63:be:
04:02:b6:22:e9:7a:4c:31:cb:f8:cb:8f:56:ce:ca:
ff:7d:a3:24:4a:50:47:40:a1:aa:35:9d:f1:31:b8:
cd:72:ef:a1:aa:50:ac:de:16:a8:01:a8:24:1c:d9:
ac:ee:ca:18:91:31:6f:45:95:ad:2e:6e:3a:18:b0:
d7:84:81:58:9e:9b:42:57:0b:65:86:ad:32:f5:e4:
de:b2:71:e2:86:23:6a:5c:b2:a7:6e:2b:88:8a:3a:
b6:85:82:7b:4a:3e:da:bd:41:4c:79:df:10:c7:b3:
04:9e:dc:d2:f4:f4:4e:1f:bd:11:8c:62:79:0f:d2:
5c:d4:fb:44:61:67:f0:f1:7b:0b:29:36:78:52:03:
e9:73:ce:f3:55:66:89:23:e8:86:72:50:fa:2c:6b:
40:73:0c:b4:ad:62:c6:2a:2e:a7:f2:74:a9:f6:7b:
29:b3:2f:22:08:5f:43:fa:66:21:c3:c6:6c:86:78:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:93:5C:7D:EB:D8:A8:BB:36:06:4F:E7:19:5C:38:9F:FA:5F:B3:FE
X509v3 Authority Key Identifier:
keyid:B0:D7:13:16:5A:C6:28:4F:B4:1D:5D:FC:82:65:77:FC:1D:A0:B7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNcTFlrGKE-0HV38gmV3_B2gtzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/284b3e-2d4f-412a-8862-539e1ac821d7/1/sNcTFlrGKE-0HV38gmV3_B2gtzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e2:82:ba:0a:45:9e:a9:29:90:6b:a0:75:ed:59:71:f1:b1:
3c:e1:bc:f0:6f:62:1c:be:e8:f3:38:3c:50:af:66:7b:ba:3e:
a1:05:b9:50:16:ec:6f:95:50:08:d3:6f:be:11:3d:48:79:7c:
19:d1:e9:b7:6b:0e:43:0f:18:15:78:1c:32:cf:c2:ec:7f:28:
6e:46:75:8c:4c:7f:b7:41:bd:2f:1f:d7:bf:11:30:8f:52:c8:
19:8a:3d:a6:6d:d1:86:dd:07:a6:e3:fa:7c:cd:2f:79:26:05:
0a:07:0d:b2:e9:ae:3c:87:29:ab:3c:a3:2d:99:1b:40:17:b1:
16:b2:c3:e4:54:eb:ed:09:ec:de:31:86:c6:ef:32:74:68:69:
07:e7:6d:7f:94:9d:51:e9:7c:20:92:7b:24:c5:f0:1b:92:af:
70:fa:e0:96:6b:83:d0:dc:24:da:e6:81:1b:3a:2b:c8:d8:07:
7c:34:ea:d2:3f:30:8f:25:c4:02:ad:da:7e:6a:a4:8f:9e:58:
ac:bc:b7:7b:6d:02:79:50:90:8a:54:ba:b1:19:5d:c5:9d:f6:
90:6c:43:3f:df:60:50:0e:1d:bc:35:77:2a:cd:90:fc:63:bb:
0f:97:50:70:3b:65:ef:68:da:ab:30:bb:6e:25:1c:db:25:91:
66:c1:f2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:54:19 2025 by rpki-client