Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
File: S6mv0hy4--a4UIAM1LSfJWLJK6A.mft (raw, json)
Hash identifier: 7YN6I/DJlCMqQpd68Bncv7/GmtGNVctqIL1rS6c1xcI=
Subject key identifier: C4:8E:0F:31:B5:98:7C:FD:8C:49:2E:FA:A3:B9:6F:39:5F:F2:E7:6E
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 01976E198323C7C75A2CDA1CC64CB696972C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
Manifest number: 0972
Signing time: Sat 14 Jun 2025 11:00:55 +0000
Manifest this update: Sat 14 Jun 2025 11:00:55 +0000
Manifest next update: Sun 15 Jun 2025 11:00:55 +0000
Files and hashes: 1: 7qAkcUK8ZlpOQk4HP0uuF0lhspY.roa (hash: ZilTYghFnWRS/ebtjdIbZ9Dk7wTzY0JMcLcLjLJ+fE8=)
2: S6mv0hy4--a4UIAM1LSfJWLJK6A.crl (hash: N4bN6aDD7eap5zKtjftKY9NrDQzDXCpUcMqYcEW9ZJ0=)
3: vrYtR17Us0uRR4gxZn7liWGR4no.roa (hash: iPAbeEWSZ9JV1k70IoKGFIA+pbF0zGakCFdiJ4Nxk/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:83:23:c7:c7:5a:2c:da:1c:c6:4c:b6:96:97:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Jun 14 11:00:55 2025 GMT
Not After : Jun 15 11:00:55 2025 GMT
Subject: CN=c48e0f31b5987cfd8c492efaa3b96f395ff2e76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e5:31:5c:76:15:65:08:35:80:08:0e:ac:1d:
c7:be:76:f7:0b:66:62:b0:e2:32:ec:ca:b5:36:05:
bf:ec:b6:7c:85:95:50:5f:2f:99:45:8f:cc:ea:ad:
63:1c:40:be:27:db:e7:0b:85:f6:1c:dc:ab:29:c2:
4b:e2:b1:91:9d:f5:e1:ca:56:e7:50:70:e9:05:f4:
7a:a6:3c:e5:14:b9:00:52:4f:62:e3:17:42:f6:e3:
dc:e5:b6:b8:ae:f0:02:1c:c3:54:53:d1:85:51:35:
9b:97:64:d1:92:00:bd:22:25:fe:77:b1:7c:c7:41:
e6:95:da:8f:b3:d6:8a:51:d2:df:62:60:c9:cf:85:
65:ae:1b:ff:a6:bd:26:95:58:28:83:ee:ca:e6:cc:
dc:fc:70:6f:92:cf:27:ff:0c:3a:aa:bc:03:c4:07:
95:fc:a1:d1:0b:82:74:a0:3a:75:db:6e:12:fe:e5:
a1:6d:f2:43:c0:21:f8:74:94:f0:5b:c6:7d:b8:c4:
65:90:ba:9b:a2:3c:49:76:96:d7:18:ac:19:0c:cb:
e1:ac:74:9b:17:6a:1d:02:6f:59:8b:1b:35:8c:08:
45:8f:73:4f:14:e1:de:b0:93:8a:62:96:5a:b8:13:
44:7d:d4:2b:77:c4:35:29:11:47:a6:41:04:7e:a7:
b7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8E:0F:31:B5:98:7C:FD:8C:49:2E:FA:A3:B9:6F:39:5F:F2:E7:6E
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ba:ab:1d:ff:f4:6d:15:df:bd:18:e3:02:ba:e8:f9:31:3d:
db:87:86:17:a0:29:39:cc:3e:35:bb:50:bd:46:92:20:9c:aa:
5e:53:66:f8:cf:38:53:1a:04:b5:e2:12:28:51:f0:37:6b:83:
bb:07:44:eb:2e:23:8a:8e:44:d3:60:25:80:19:e2:64:bb:1d:
78:dd:21:80:cc:2a:01:3a:d9:58:b5:c2:be:be:98:6e:68:8e:
51:ae:96:5b:72:b7:d5:a0:1b:e6:f8:91:1a:08:a8:e1:cd:f4:
78:1f:f0:b4:56:08:79:4c:cc:9a:74:1e:82:f0:be:05:2f:96:
b0:6a:ff:be:63:5a:c6:6b:4c:59:70:08:a0:54:00:05:b7:af:
73:ea:40:f6:fc:df:0b:51:0d:37:db:05:fe:26:c3:80:fa:6d:
ce:37:4a:53:4f:93:ce:9a:f5:7c:97:f2:21:df:5e:de:54:54:
4c:13:52:d5:15:85:5b:74:c1:9f:bd:48:c0:a1:54:61:bc:86:
55:2e:ae:95:8e:87:20:a2:69:f6:48:2c:de:24:36:ff:df:c4:
a6:d0:7f:8c:62:d7:90:28:3e:ff:37:40:aa:4e:1e:01:14:a7:
6d:0c:fe:e3:eb:f1:b8:91:c8:ee:b2:39:fa:70:9d:a5:b1:70:
4e:d0:13:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:09:03 2025 by rpki-client