Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier: i8ZDB4GTcDSzTGwlF43Md5UNY2kIfi+j3OHT23nXd7s=
Subject key identifier: 3D:50:2A:BF:02:38:D6:0B:BC:03:87:03:B2:A4:2F:13:79:12:47:71
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 01976F2BA1465AB12CA1C9C23C5D82C8EF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 16:00:19 +0000
Manifest this update: Sat 14 Jun 2025 16:00:19 +0000
Manifest next update: Sun 15 Jun 2025 16:00:19 +0000
Files and hashes: 1: 7MtM04j_v2k1Wph2OgnR4TG2Sv8.roa (hash: 4itzuX/fQ15qNQ7YFYgNHc2z9oC3AqKBZmDxx9ZMouE=)
2: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: lXRKnO5YawpygiG6y9dk/5ipnnW0PD8ZZm5oRyVooO0=)
3: kx9kPAQ67ntw1Xkq0X26moD-pwk.roa (hash: X9S/3YSjUgYxw6y4t3NQ27+L1d2kR0+Z9uu+3WHTnVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:a1:46:5a:b1:2c:a1:c9:c2:3c:5d:82:c8:ef:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: Jun 14 16:00:19 2025 GMT
Not After : Jun 15 16:00:19 2025 GMT
Subject: CN=3d502abf0238d60bbc038703b2a42f1379124771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:af:66:5c:f8:eb:4c:14:6d:76:85:bd:46:19:
13:c2:c5:ab:65:e0:2e:5a:67:79:8c:37:85:ac:ae:
50:23:92:b0:83:45:04:ce:2d:8a:43:58:ee:3c:50:
25:2c:40:a9:c5:6f:87:f9:b4:8b:85:0c:af:ac:3c:
f9:6c:3f:ca:4c:5a:b4:f8:49:17:d4:d4:0d:3d:f6:
0f:29:59:1d:8b:e5:56:54:e6:a6:a5:48:6c:17:17:
73:33:63:07:2d:0e:a9:8a:0c:74:fb:46:0e:fc:ab:
00:15:92:a8:4e:f9:1c:8f:10:c7:3b:e5:99:ce:a3:
1b:f7:02:05:5b:b2:7e:9f:ba:2d:c7:f2:0c:c3:0d:
19:c5:b3:ff:6a:83:43:33:70:d9:b2:d1:e1:00:44:
40:19:f8:90:65:ee:62:0a:3c:61:62:c7:e6:a0:9c:
d4:0d:98:4f:27:78:ac:fa:2b:35:86:58:84:d3:8c:
25:ad:1c:0b:36:47:43:d7:44:d2:ec:16:0c:34:a5:
66:5e:05:a9:9d:09:fe:16:5a:42:27:ec:97:2e:ce:
d5:00:a7:3c:71:e7:89:fb:4c:59:53:a2:aa:c8:87:
65:50:d8:ed:22:e9:59:b9:91:76:f8:61:0d:23:8b:
88:fc:5c:f7:00:68:40:07:87:91:88:b0:86:6f:2e:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:50:2A:BF:02:38:D6:0B:BC:03:87:03:B2:A4:2F:13:79:12:47:71
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4f:3a:26:5d:03:a0:19:ee:11:7e:2e:db:a7:a2:3a:50:03:
9d:3f:74:08:04:85:38:18:79:a2:ba:f6:2d:f7:1b:bb:ac:c4:
09:f4:05:8b:7a:3b:e8:8b:32:c8:81:96:aa:da:ab:89:65:6d:
1c:95:7d:51:3a:53:b6:05:4f:e9:ea:16:c1:fe:3d:3b:73:1e:
27:cf:9c:cb:51:e0:14:64:5d:de:22:36:12:13:0a:e3:4b:02:
25:48:06:08:55:23:a4:89:9b:6b:4e:05:ef:15:87:9c:bb:73:
3f:66:66:fc:7d:60:b1:9e:c2:30:36:19:70:af:f0:a6:bb:14:
78:70:cd:98:bd:5f:80:a9:1c:a7:42:e4:3a:c5:74:ac:28:c8:
09:99:2c:37:40:89:17:50:67:b1:e5:11:39:74:88:5a:76:1f:
ff:8b:ad:f9:77:f0:a2:77:f1:51:4c:d7:89:37:62:15:da:43:
10:15:b2:fe:eb:c7:d6:6c:df:d5:f0:6b:d1:55:36:6d:8a:30:
1c:90:dc:08:0b:2f:86:c9:27:61:b7:30:22:49:11:bc:6e:20:
b6:f6:c8:6e:d0:7b:2a:d0:55:dd:ea:9f:91:1b:9b:bc:4b:c4:
57:df:3f:2f:e6:5d:8b:f9:64:ef:19:73:07:f2:84:fd:47:de:
06:a9:88:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:47:05 2025 by rpki-client