Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
File: sIrODrPi30n9u3dyZxb7Zed3eWQ.mft (raw, json)
Hash identifier: R9Yd+BsAvQP4lyD3tYpfbipRH5SmDALrTYe/4glPLbk=
Subject key identifier: 1B:28:4F:DC:D7:23:EE:19:11:67:86:E2:31:DC:01:59:0C:6B:7F:31
Authority key identifier: B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
Certificate issuer: /CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Certificate serial: 01976FD13C1882E042C4A403B5C23A89B568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
Manifest number: 0984
Signing time: Sat 14 Jun 2025 19:01:12 +0000
Manifest this update: Sat 14 Jun 2025 19:01:12 +0000
Manifest next update: Sun 15 Jun 2025 19:01:12 +0000
Files and hashes: 1: diUYpUKMIXz1gLgZaNSVSKV18U8.roa (hash: 2LacqRpLn+KwsMEDop6qn6ZSkweQldM8ZPPhx+K/olo=)
2: sIrODrPi30n9u3dyZxb7Zed3eWQ.crl (hash: /PeCVUtWs13Ma6v/XwnZODRlLX5Prir4zh7KUZPhJIA=)
3: ypDy4xS2R6Ye6aWBkCNFAdcm0wI.roa (hash: hjIAAkji2+ZqYHRNKyPRkJEyLfHtgHEfz/xpi/TOXR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:3c:18:82:e0:42:c4:a4:03:b5:c2:3a:89:b5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Validity
Not Before: Jun 14 19:01:12 2025 GMT
Not After : Jun 15 19:01:12 2025 GMT
Subject: CN=1b284fdcd723ee19116786e231dc01590c6b7f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fb:4a:f6:72:33:72:54:35:a0:7c:c7:6d:c3:
4c:6d:e4:1a:05:12:66:65:e1:2d:2b:ae:fa:f3:48:
04:82:9a:5f:c4:23:2f:3f:69:e6:5e:8b:40:0a:12:
05:78:e9:ad:f8:77:f0:d2:70:02:ff:87:98:e6:3e:
e3:e2:c6:41:87:bd:ca:48:ea:31:fb:10:7f:d8:96:
76:10:12:1c:c0:67:79:3a:c6:85:6e:38:4c:71:c0:
d0:e8:dd:28:4a:80:e8:81:e4:cb:06:79:30:f0:c8:
83:63:ec:c0:b0:92:95:8a:c5:c7:fb:88:c6:d7:8e:
91:e6:a5:ad:f9:ee:4e:60:50:1a:22:a2:12:0d:88:
42:0b:7f:66:8e:1e:de:eb:a3:98:7d:96:b8:46:d6:
75:e8:4c:04:6e:76:5e:8a:f2:83:41:e7:51:af:b9:
6c:0a:d2:bb:db:cb:82:ac:df:23:bb:4d:89:b4:75:
f0:22:6d:ae:03:8c:33:c5:9f:1b:cf:e8:ba:93:a9:
dd:98:94:27:14:7a:fb:44:20:28:b5:6a:8d:25:23:
37:70:63:75:59:56:56:6d:71:b5:73:0a:f3:96:0c:
51:0a:a2:5a:53:82:c5:37:51:c8:e2:ce:97:90:d6:
27:6f:3a:a3:a9:2c:85:aa:8f:a9:c3:08:74:7c:4e:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:28:4F:DC:D7:23:EE:19:11:67:86:E2:31:DC:01:59:0C:6B:7F:31
X509v3 Authority Key Identifier:
keyid:B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f3:43:a6:a3:43:2a:f8:98:34:f5:5b:b6:f3:82:5e:0c:07:
cd:70:23:ff:32:1d:8b:0a:bf:fc:c4:a8:b9:cc:9e:a2:a4:56:
15:bc:65:43:ff:49:64:0f:b8:97:c7:af:6b:33:9a:59:37:9b:
42:94:1d:72:b0:64:3a:3f:eb:88:68:f1:89:45:8a:5f:9c:7a:
5d:cc:be:fb:dd:93:53:7b:dc:c2:1f:6d:0f:37:e1:2b:e2:9a:
f5:37:10:d4:b5:75:b3:88:49:9b:4f:28:eb:b6:48:aa:e5:3a:
af:cb:5b:20:a2:52:b9:32:4a:3d:da:5f:d7:de:ab:7a:16:02:
9f:5a:26:24:9f:2a:43:88:5a:dd:7d:77:e1:55:fb:74:61:2a:
c0:41:05:df:ee:50:8a:f2:a7:83:c2:b8:84:f9:cb:11:58:bb:
65:c4:b7:25:8e:c0:04:e5:84:1a:57:d2:4e:9f:85:6b:02:2f:
e2:69:f7:60:81:fd:95:d4:bd:99:65:61:75:ca:a8:23:5b:54:
45:49:d3:7a:15:54:24:64:5c:fd:1e:c8:6c:ae:73:d3:1b:95:
7c:df:86:b2:6c:83:66:5e:1b:35:04:22:b5:4e:a1:72:86:b0:
b5:d3:c0:c0:61:b1:71:87:76:1f:43:9a:dc:ca:ae:47:e5:be:
c0:50:d0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:24:49 2025 by rpki-client