Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
File: SAa55i8bAPLPmNDcxYMpKvrLUi8.mft (raw, json)
Hash identifier: YgHHPabutwj+Dh/WLP5QeuX5Gd04HOmxNlwIX0ac13s=
Subject key identifier: 3D:BD:43:DC:4C:B1:CD:A4:5B:99:D7:BC:33:C2:1B:F7:50:2B:49:00
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial: 019772641FE502128020EEB3AD78C264B40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
Manifest number: 1055
Signing time: Sun 15 Jun 2025 07:00:53 +0000
Manifest this update: Sun 15 Jun 2025 07:00:53 +0000
Manifest next update: Mon 16 Jun 2025 07:00:53 +0000
Files and hashes: 1: SAa55i8bAPLPmNDcxYMpKvrLUi8.crl (hash: TArZspJcgXdk1RNN/sPzW8GeH+j5EATYdrP9rijPCCA=)
2: bOFB3LalOSOdSrbz-a4cUkkG03M.roa (hash: SZa6u36skxx1rALcmnxtRi0278XWZ89tCnch5FRpzoM=)
3: ipcAqlbQdh9QjilJG8UTA6cw-zw.roa (hash: RUMHng+Xlo2Ru6wmJaBAotc3mLSEqq30G4I26Jr98jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:64:1f:e5:02:12:80:20:ee:b3:ad:78:c2:64:b4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Validity
Not Before: Jun 15 07:00:53 2025 GMT
Not After : Jun 16 07:00:53 2025 GMT
Subject: CN=3dbd43dc4cb1cda45b99d7bc33c21bf7502b4900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:7f:ef:c8:42:8d:25:6e:2f:90:1c:7e:9c:
bf:1e:fa:79:37:db:9b:59:c9:03:25:69:f5:7c:e2:
79:b8:80:39:e5:66:69:53:18:06:bd:be:69:dd:99:
53:b4:6b:1f:a7:d4:d3:62:56:c7:7c:a6:a6:e2:6a:
ee:42:3a:35:b9:f7:f0:e5:94:ce:17:57:23:18:71:
33:51:cd:ef:2e:13:24:0f:50:0b:d0:62:2b:74:1f:
d3:e9:db:41:17:ca:58:b9:b5:91:f7:83:3c:e7:e1:
66:62:15:06:b2:57:f7:c0:f5:87:7d:c6:9a:1a:3d:
2e:1c:f0:c4:57:4d:5f:8a:92:85:b9:5f:1f:63:a5:
aa:cc:51:07:aa:fe:32:22:c8:00:47:ba:21:1b:2e:
20:8e:cf:d5:59:80:7d:3b:76:bb:98:02:b1:55:70:
19:a3:32:f6:37:44:67:d0:bb:d8:5f:41:2b:2e:6e:
2a:3e:f7:95:55:7c:72:3e:f3:e4:7b:9b:0d:02:24:
2b:1f:0d:69:4a:f9:86:83:27:e6:ad:cb:85:de:ee:
7d:77:0e:67:3a:66:64:f6:4c:37:1b:da:1f:c1:7c:
a4:80:cb:74:d0:46:c3:77:1c:63:50:2e:90:02:5f:
32:4e:1a:ea:fe:14:c6:8b:82:8c:f8:ac:ab:e7:b9:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BD:43:DC:4C:B1:CD:A4:5B:99:D7:BC:33:C2:1B:F7:50:2B:49:00
X509v3 Authority Key Identifier:
keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cd:dd:11:a3:c6:e5:ef:ca:9d:c3:36:7d:e5:8e:9e:5b:57:
0a:fd:53:16:be:3a:0c:04:15:e7:85:4c:b7:20:e9:2e:ab:a5:
ac:4e:c0:75:49:2e:15:94:63:fc:52:f7:c8:bf:4b:a8:08:80:
ec:f4:ec:e4:84:ca:70:f1:e3:21:92:7f:86:6a:93:22:52:be:
47:a1:49:97:af:4d:09:80:14:cd:14:0d:1f:a3:81:e6:bc:bf:
e3:fd:51:d7:36:2f:42:08:df:b4:b5:9a:a0:d3:3a:ca:3a:c7:
0d:3b:0b:5f:ac:19:1e:0e:e5:84:aa:f8:97:42:b0:d9:1b:d0:
e8:6a:f3:57:a1:e6:b2:68:d5:12:2b:7a:39:9e:85:27:ca:e9:
cc:7a:b3:8b:36:f1:f7:6d:78:08:b6:0a:69:76:73:ba:69:fc:
de:5f:3a:04:a0:bf:55:c0:4e:8b:4a:fb:2a:1e:ab:97:e5:1b:
b8:37:ad:43:64:f3:82:b9:aa:9d:c3:5a:7d:62:00:19:86:b8:
e1:98:19:5d:52:e4:9b:65:ee:d4:8d:31:aa:a0:71:86:62:0f:
7f:08:87:04:e3:d2:df:c7:ce:ab:f7:7d:01:d2:56:0e:5c:7d:
1c:40:4c:72:d1:59:bd:b2:6f:f9:93:f1:9e:71:e7:6b:64:dd:
cd:6d:fc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:20:23 2025 by rpki-client