Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
File: syu38vqMQUxnGIvau_t2IVaTuoc.mft (raw, json)
Hash identifier: 0i45CG0/lvIgAEPvUbqhcwgmDu+izO+aFEZhYOHSXWU=
Subject key identifier: F5:09:86:DA:D7:66:94:D4:54:62:B5:12:88:57:6C:6E:8C:C4:EE:D7
Authority key identifier: B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
Certificate issuer: /CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Certificate serial: 019770ACAEDA1BCE3387D153574D4D7BA5E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
Manifest number: 038C
Signing time: Sat 14 Jun 2025 23:00:54 +0000
Manifest this update: Sat 14 Jun 2025 23:00:54 +0000
Manifest next update: Sun 15 Jun 2025 23:00:54 +0000
Files and hashes: 1: dlFU-VFKr3DcjZAchl6XqyqKK5c.roa (hash: neVLf32lP2kuQND5P5wXOeNSgGn0qOcZGwTsUoY1fZs=)
2: syu38vqMQUxnGIvau_t2IVaTuoc.crl (hash: /VPqU7Hl388xHpht7XduMVKSRDGcBrbHgGMUR49GxuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:ae:da:1b:ce:33:87:d1:53:57:4d:4d:7b:a5:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Validity
Not Before: Jun 14 23:00:54 2025 GMT
Not After : Jun 15 23:00:54 2025 GMT
Subject: CN=f50986dad76694d45462b51288576c6e8cc4eed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:3a:7e:a3:c0:96:6d:b2:a8:e3:76:2b:75:
4f:13:9d:d4:32:d6:0b:f0:f3:0d:99:81:15:ac:2d:
fb:99:a0:e6:c1:97:b7:40:de:61:80:10:19:63:9c:
db:75:44:1d:db:e4:78:71:ab:f9:ea:e3:b4:89:5d:
88:50:74:f9:44:8c:06:ad:22:c1:52:98:6d:f2:90:
2a:a1:37:d8:2e:2c:30:89:3d:6e:09:42:c9:65:90:
e3:5a:f7:9d:1c:0e:f0:e8:73:c8:8d:33:b4:1e:7a:
c2:33:ea:d7:45:a2:89:84:74:d6:2e:7c:07:1e:49:
7f:7b:d5:13:54:87:2f:c5:91:1b:fb:24:6c:c6:86:
c5:5c:79:70:19:f8:2c:07:26:28:13:ea:00:ee:70:
c1:86:1a:74:54:75:0a:80:3d:f8:29:eb:03:d6:d7:
3a:3f:9e:c9:67:e8:ea:d5:f2:af:c0:18:ea:a2:91:
f5:cd:8c:78:17:e5:85:8b:c4:57:a8:c6:ce:e3:20:
1a:f9:39:d2:51:fa:5f:e5:db:ef:69:90:f3:f9:3a:
4a:33:4c:52:01:53:26:ec:67:bd:18:a3:e7:b5:60:
e9:2a:ba:a4:f1:a3:29:46:d5:6b:4e:f9:04:0f:d6:
cf:5f:32:51:eb:f8:70:11:de:10:7d:51:b6:5d:34:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:09:86:DA:D7:66:94:D4:54:62:B5:12:88:57:6C:6E:8C:C4:EE:D7
X509v3 Authority Key Identifier:
keyid:B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:bc:30:ca:47:36:cf:3f:5c:54:b0:91:92:bc:9c:19:e4:2e:
87:c6:f9:d5:99:c3:f5:17:c0:3d:51:ba:95:e4:33:c3:56:a0:
83:61:6f:b0:86:3b:a6:30:6d:c2:54:dc:bb:5e:dd:e1:2a:13:
4e:90:5c:f3:bf:ab:04:a0:21:39:5a:e4:17:8b:a7:cd:45:39:
24:24:b1:c7:b6:d6:c1:7e:4a:47:80:ef:88:bc:7d:e3:fd:21:
e7:b1:ce:40:52:c6:e5:d8:15:ce:cf:6f:08:36:7c:4e:8c:58:
09:39:cb:c9:8d:d7:57:f3:b9:4c:94:2c:b9:01:16:0d:ed:50:
a5:0c:f7:3d:a0:5c:31:83:ac:69:2b:24:79:30:7a:e0:56:be:
9f:b3:2e:62:76:78:13:41:c9:f5:b2:97:2a:0b:fb:36:27:6e:
50:13:21:7d:a6:f3:6a:76:7c:c2:56:e4:bb:fd:bc:23:0c:b5:
a8:ee:c8:97:e8:0d:86:95:3c:c3:c6:3c:8b:87:c2:e0:83:7e:
1d:7b:79:4d:b8:55:86:f2:eb:92:25:3c:06:c7:25:01:5a:3e:
19:db:43:ed:9e:14:1d:9e:40:e7:7f:25:26:03:3c:ff:b4:70:
92:e3:e5:b3:b8:dd:fe:bc:53:a6:95:a9:d1:3e:86:a6:59:42:
5e:78:c1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:47 2025 by rpki-client