Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: oY3f/FUz0+6UmyqKW8aQmDddJDMZw/kg3e+iuwt8414=
Subject key identifier: 5B:94:2D:B2:5B:DB:9C:C8:8D:DF:EE:16:B9:5C:71:E1:9A:84:A7:94
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 019771F638195B4945C887DFF91074D36D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 1526
Signing time: Sun 15 Jun 2025 05:00:51 +0000
Manifest this update: Sun 15 Jun 2025 05:00:51 +0000
Manifest next update: Mon 16 Jun 2025 05:00:51 +0000
Files and hashes: 1: aXSOEWx3tVF7ynpp-Q3fBbDZg50.roa (hash: RSnTxORBukbARx6FRTZpYXAyjlGDaMBXkz61tBk9AhY=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: WaMcNoQGxmRr+oOJGLLZIndlpUsZoTRx2uD7HJBxJ0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:38:19:5b:49:45:c8:87:df:f9:10:74:d3:6d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Jun 15 05:00:51 2025 GMT
Not After : Jun 16 05:00:51 2025 GMT
Subject: CN=5b942db25bdb9cc88ddfee16b95c71e19a84a794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:82:7c:45:9a:2c:ea:dd:c9:78:23:7a:f9:
a2:2a:70:de:d5:d9:dd:86:0b:a4:45:29:95:1b:7d:
92:b1:7b:3c:cc:fa:1b:55:93:58:21:50:e5:f1:94:
f8:5a:20:71:46:53:44:dc:d4:99:d6:6a:fe:20:85:
e5:0d:1d:98:29:b7:ab:05:8c:b7:19:e3:d6:93:c0:
9c:1d:8a:a7:28:4f:ef:37:d4:64:cc:d6:11:46:65:
d6:5f:0f:3e:5e:d8:0c:71:7e:f5:c6:85:6b:57:1f:
25:aa:fb:81:ea:27:6c:74:d6:68:d9:52:83:c4:dc:
57:87:11:d0:98:35:6f:b4:a4:9f:a6:8b:e2:4a:21:
a2:e4:9f:f4:77:5a:38:79:e1:a5:01:e8:24:bf:89:
b5:08:4f:ce:ba:15:41:e8:87:14:99:e4:83:89:ba:
65:bf:9b:6c:a3:78:89:95:88:1b:0c:88:f1:4f:e7:
b8:b7:99:d5:51:bc:1a:30:07:97:5d:15:35:1d:02:
c0:8f:9b:76:0a:c7:3f:3b:1e:0b:ae:48:86:43:4f:
77:4b:14:10:f7:b3:b1:9e:3c:46:d0:d5:99:06:d4:
d9:f8:3d:f7:8d:49:b4:67:de:f7:64:25:ed:8c:a0:
f1:45:dc:ad:e1:2e:ac:31:89:3c:69:3f:ab:9c:15:
ec:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:94:2D:B2:5B:DB:9C:C8:8D:DF:EE:16:B9:5C:71:E1:9A:84:A7:94
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9d:a3:b9:47:ae:cb:71:e9:a2:49:b5:70:f7:d0:4f:07:52:
8d:9d:7c:0f:94:1a:a9:98:a0:07:8f:92:8f:97:bb:a8:9f:63:
c3:57:1f:c1:4e:20:d6:5c:3e:fa:33:33:2e:0b:87:dc:52:97:
06:90:28:bf:f8:ee:93:16:f3:60:61:4b:e4:af:06:9d:c3:0b:
9c:4c:42:86:83:ea:ce:6f:02:4a:d1:6d:0d:c0:7a:13:7d:c8:
47:43:f0:16:e6:94:71:b9:e4:85:69:b9:6f:f3:8d:18:62:35:
27:0a:a3:b6:35:57:61:fa:2d:5a:b9:ef:2a:61:6d:42:09:b3:
83:68:a0:a9:ad:30:02:4e:81:f4:24:a9:26:a1:aa:5d:e4:8d:
89:b5:5d:24:f3:0a:29:51:5e:12:cd:85:9e:c9:9a:9a:6e:9c:
03:15:c0:14:67:4b:eb:2d:ac:8c:54:e6:2e:c9:2b:2f:68:ed:
8b:f5:8d:8e:25:3d:ea:0c:22:0b:b2:22:31:f2:00:3e:e7:7a:
46:aa:19:2a:e1:17:24:be:6a:87:cb:93:49:73:50:b8:0d:07:
f9:77:f7:e8:e9:5b:8d:42:8e:af:1e:86:33:1b:8e:86:a0:99:
59:b9:a0:5b:e3:bd:af:8a:9a:dd:3a:f0:f7:61:5d:08:27:80:
93:ab:fa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:25:57 2025 by rpki-client