Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: MCMlHoQ3KBkl4G7YTXmzhs2mMZgT310Utvhrn/SRT+g=
Subject key identifier: 38:2E:8C:E2:14:95:39:68:74:22:AD:34:07:40:43:04:3B:6D:84:AF
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 01977C0BAC4ACD4D7738360AA9874439D29D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 1594
Signing time: Tue 17 Jun 2025 04:00:29 +0000
Manifest this update: Tue 17 Jun 2025 04:00:29 +0000
Manifest next update: Wed 18 Jun 2025 04:00:29 +0000
Files and hashes: 1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=)
2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=)
3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: 0D5pEqc9Po0PE/F9bclOcVI2gjXK6sC51aLx7Enume4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:0b:ac:4a:cd:4d:77:38:36:0a:a9:87:44:39:d2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Jun 17 04:00:29 2025 GMT
Not After : Jun 18 04:00:29 2025 GMT
Subject: CN=382e8ce2149539687422ad34074043043b6d84af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:28:e4:8c:60:1c:91:25:21:37:b7:cc:f2:
ed:93:62:4b:62:7f:f0:ba:01:20:3e:d6:a0:77:99:
9d:0e:9f:e6:fe:68:a4:93:ac:f5:c3:46:88:b8:28:
fb:44:b7:6e:21:77:1d:38:ad:af:f6:d0:3c:b2:a6:
37:bd:89:d1:6d:f9:0f:e6:58:46:2c:3f:cf:a7:2e:
40:a7:73:a2:91:4d:a1:05:12:83:a0:96:1a:25:b9:
b1:4c:5f:11:6a:57:8e:42:76:7f:43:6c:1d:31:1b:
1b:c4:88:8d:6b:97:54:e5:94:79:50:02:77:d7:b7:
a1:89:04:98:55:57:87:91:86:a8:dc:61:87:f9:83:
ac:c6:0a:85:72:92:69:11:43:d6:66:63:7b:42:52:
bf:e9:1e:60:86:69:5f:50:9c:b7:37:71:ea:ee:60:
44:0e:29:a7:b4:0f:73:37:99:2c:bc:2f:60:ce:0f:
a3:18:7b:5a:12:ed:96:47:d7:fb:7b:4b:0f:b8:af:
2e:71:70:d1:b1:df:aa:a1:2f:c7:85:9c:aa:cc:d6:
be:69:f7:c1:e7:67:52:18:0b:f7:42:ea:e4:73:51:
1f:a9:0e:2d:7e:a9:3f:62:53:ef:71:f6:07:cb:66:
ef:d9:b4:bb:c0:4d:fc:33:f8:9d:5a:2b:c7:ff:4b:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2E:8C:E2:14:95:39:68:74:22:AD:34:07:40:43:04:3B:6D:84:AF
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:33:3f:0b:0e:3b:90:84:1b:0e:bb:4f:47:21:8f:7d:c3:09:
78:b2:80:68:66:e8:50:76:fc:e2:d6:5a:c7:07:7c:e9:0a:aa:
7d:e3:c1:bc:40:c1:ed:9b:51:a5:8a:30:56:b6:b3:3c:f6:db:
9a:34:ba:70:a4:fb:66:47:f1:16:55:62:35:4c:7d:d1:37:a8:
4a:6b:d3:58:41:47:fc:d7:25:e6:42:77:9e:b9:35:ba:5f:7f:
37:3f:2a:02:47:59:3f:fd:62:61:cb:c1:4f:65:c1:c3:21:3c:
76:85:d2:76:17:0d:76:d3:3d:e7:49:5c:86:a3:ca:a2:a9:99:
ba:04:43:28:04:c9:34:bb:f8:e1:27:79:2e:a9:1e:25:bf:47:
14:d9:dc:a7:ee:87:fc:20:0f:03:13:bc:f6:6c:97:a8:8a:23:
c1:00:3f:d0:6e:04:f6:c7:ad:f1:98:1a:b4:0a:e9:b6:d2:bb:
aa:90:fd:fe:10:4d:50:b9:6a:71:71:6d:68:0c:39:ac:b8:63:
25:93:1d:f0:5e:98:af:27:d1:9a:a0:42:09:83:a8:ed:5c:7e:
70:5f:f9:24:ae:b2:e5:a9:27:e0:91:d0:f1:4f:d8:8c:18:79:
7f:7c:de:cf:00:0a:37:cc:ec:19:fc:ea:68:0d:ed:bf:bb:e6:
0b:b3:f5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:53:17 2025 by rpki-client