Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
File: SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft (raw, json)
Hash identifier: KwQJz1nTOZ7N+pvEMGtqQB+uGN0TYvdx5wdeW/ubkko=
Subject key identifier: 7A:76:08:A1:DE:F1:DD:0A:35:0C:5C:AB:C0:A5:AE:B3:B6:E6:5E:CE
Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611
Certificate serial: 01976FD11405D685656CA9F140EABE4B94B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
Manifest number: 1053
Signing time: Sat 14 Jun 2025 19:01:02 +0000
Manifest this update: Sat 14 Jun 2025 19:01:02 +0000
Manifest next update: Sun 15 Jun 2025 19:01:02 +0000
Files and hashes: 1: MfMkCUr7HQ6KxqyWEzQVmKSbin8.roa (hash: 15XIx+4E6jpmVYTgDMId5DLCY/biXmoyIZeEQt1OExE=)
2: SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl (hash: RaIfKJUSO2uOLCY5aocj/LfOHLyZcw35/DxVCWcSli0=)
3: V7TwuQchFJyj3FzgSo-quNHM3vk.roa (hash: hjNtsrFF5n1yKl43GjiftBGk4/SSn0HVl0kFwJ8ePwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:14:05:d6:85:65:6c:a9:f1:40:ea:be:4b:94:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611
Validity
Not Before: Jun 14 19:01:02 2025 GMT
Not After : Jun 15 19:01:02 2025 GMT
Subject: CN=7a7608a1def1dd0a350c5cabc0a5aeb3b6e65ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3c:e7:69:b9:22:32:1a:b4:9c:4a:47:bd:c6:
ed:6b:e2:f2:ec:53:c9:78:5e:34:8a:26:72:11:fe:
9a:d3:78:e8:97:99:03:01:8d:dd:bc:f7:17:06:19:
13:b9:a9:69:e8:aa:fa:5e:40:20:e7:96:28:1f:6d:
9c:3b:5e:b5:f2:f2:5e:05:66:d0:1b:00:05:ca:ff:
e7:4f:21:f8:84:62:52:d7:b8:e5:5f:18:62:d3:4a:
3c:57:bb:23:d8:57:09:56:5c:20:da:a0:61:e8:f8:
2d:8d:83:3c:39:0b:4f:2c:d1:e1:48:6b:59:89:ff:
15:77:e5:4c:c7:94:17:0a:19:92:82:a7:05:b4:8a:
f3:c3:8e:d4:7b:2c:ba:37:ee:64:dc:85:f1:95:fa:
e4:66:e8:f6:8d:f6:9b:57:66:55:c2:8e:86:91:63:
92:ab:d8:ea:c4:b1:eb:2e:d7:cf:0e:bc:2c:be:be:
4c:79:2b:80:f3:0a:5d:ec:0c:b1:8a:4a:fc:71:54:
a9:f1:85:27:db:9b:71:76:a5:5d:24:69:cc:84:a8:
cc:aa:41:5f:ba:e5:41:58:06:83:d3:27:8d:85:f1:
59:81:d5:b0:cc:9a:44:89:73:5b:90:9c:8b:bb:e7:
4f:27:a5:04:05:cb:03:d4:d3:97:34:05:cd:1a:3b:
dc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:76:08:A1:DE:F1:DD:0A:35:0C:5C:AB:C0:A5:AE:B3:B6:E6:5E:CE
X509v3 Authority Key Identifier:
keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:04:45:3f:ba:c2:70:44:f2:43:97:a1:36:6c:63:e6:48:00:
54:d5:4a:36:31:a3:34:e4:dc:4a:9a:2c:7a:2b:b1:79:e9:53:
5a:4f:95:c1:a6:b0:87:7d:7f:01:b7:1a:1e:d3:e8:cf:57:57:
db:9d:c8:27:ce:06:e6:e0:ea:5d:5a:c7:56:16:2b:ac:6b:6c:
cf:d5:45:a5:17:21:3d:bd:d3:b3:6b:f9:23:48:b5:7d:5a:87:
b9:bc:e6:9e:3e:f1:b7:85:7b:39:f1:0e:4f:0f:9d:9e:c2:27:
7d:65:13:20:90:a8:ac:48:39:f4:11:3c:d9:e7:5e:36:35:3f:
b0:ac:3b:14:ee:ea:bf:5a:e7:8a:b6:ab:40:33:64:ba:5e:de:
e1:8e:05:50:f4:c3:65:34:f8:0a:31:d9:b2:2d:2f:f7:12:c7:
a5:f2:de:7d:68:2b:c3:c1:27:8b:9b:dc:61:56:b4:a5:14:60:
e4:15:26:01:74:da:a0:67:2d:39:84:85:1e:58:5f:ca:b8:02:
89:ba:e0:94:fb:4b:69:70:aa:8c:1a:bc:44:58:d4:0a:ed:94:
45:b9:77:cc:3f:fc:5b:14:7c:8f:4c:a8:ef:0d:40:b0:45:94:
0f:70:75:6b:d8:ff:3f:a8:11:e4:42:68:c9:b3:6f:d2:9f:57:
59:18:71:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:58:20 2025 by rpki-client