Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
File: sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft (raw, json)
Hash identifier: XUf+ZwU/+rPNE528I3g10CepAd7bafwxwwgPVuIbNes=
Subject key identifier: 38:AE:16:34:F4:98:88:52:19:82:2F:1F:52:A1:E0:EC:BF:46:31:6D
Authority key identifier: B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
Certificate issuer: /CN=b01a59d0a61aa6174438988cc83598dbfea5a998
Certificate serial: 0197684DD477E8C98AB5D7D4549738AB168E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
Manifest number: 10FE
Signing time: Fri 13 Jun 2025 08:00:20 +0000
Manifest this update: Fri 13 Jun 2025 08:00:20 +0000
Manifest next update: Sat 14 Jun 2025 08:00:20 +0000
Files and hashes: 1: HSNefFgXaRWCGcIv1fjoOpFklrI.roa (hash: cKpMHes+RehvKJ31+pA2N64A397k3fGtWACpN0dogjA=)
2: sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl (hash: if2N5LOJho2puPbHb/m/Q23CRUebBlYjnsU55d5g35c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:d4:77:e8:c9:8a:b5:d7:d4:54:97:38:ab:16:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b01a59d0a61aa6174438988cc83598dbfea5a998
Validity
Not Before: Jun 13 08:00:20 2025 GMT
Not After : Jun 14 08:00:20 2025 GMT
Subject: CN=38ae1634f498885219822f1f52a1e0ecbf46316d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:ae:b3:00:a8:08:22:32:36:3c:e6:08:e3:
cc:94:51:6c:c5:68:72:25:81:0f:00:dc:a7:31:55:
c5:9f:30:33:ae:37:e8:6f:ee:d4:ec:95:c2:5e:51:
41:d2:b9:51:37:20:31:68:a7:c5:7d:c9:5b:c1:78:
6d:e8:dd:71:3c:0d:de:10:8a:3e:d8:ea:0b:a0:00:
e4:b5:3f:7a:a7:0d:1c:b0:1e:61:dd:ce:db:ee:e8:
4b:90:30:c3:7b:d2:12:d2:6e:13:a5:32:6b:cd:c0:
db:27:e5:37:d4:13:0f:6a:c0:25:44:0b:6e:56:a6:
0b:7c:4c:37:3b:75:08:5b:66:14:ad:42:e3:67:a0:
52:8a:71:b6:e6:ff:02:a3:7e:70:3e:57:62:c7:5a:
cc:2b:85:b1:0e:a6:bd:bd:7c:ff:bf:fd:bd:e0:62:
8d:07:53:14:bc:d7:42:bb:26:9d:02:4e:1e:e6:73:
4a:4a:7a:8c:14:5b:15:ea:c8:04:1c:d2:c9:05:cf:
3b:1b:d1:f4:5e:ea:bc:27:9b:0e:42:04:38:cc:69:
b3:56:25:7f:48:6f:6e:78:a7:f8:04:5d:31:ad:14:
45:d6:a5:fc:3c:57:79:9f:48:d6:eb:e4:3d:f8:07:
81:cb:0e:91:47:be:85:6f:fd:45:5a:ea:0e:4c:c9:
ea:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AE:16:34:F4:98:88:52:19:82:2F:1F:52:A1:E0:EC:BF:46:31:6D
X509v3 Authority Key Identifier:
keyid:B0:1A:59:D0:A6:1A:A6:17:44:38:98:8C:C8:35:98:DB:FE:A5:A9:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBpZ0KYaphdEOJiMyDWY2_6lqZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a0e8e3-a4e7-4a9e-b798-04e1fa808426/1/sBpZ0KYaphdEOJiMyDWY2_6lqZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:24:a8:11:07:4d:88:2e:66:fc:48:24:02:b8:01:42:8b:90:
67:90:31:c8:78:ea:bc:6f:5b:be:18:dd:44:5e:81:07:1d:a4:
b6:1a:16:de:9a:66:61:aa:bb:c0:61:c3:b4:35:9d:9c:40:86:
0e:d9:e5:f0:6e:81:3c:83:86:db:54:05:77:fd:6a:db:f3:9b:
66:94:2c:d6:7e:2b:0b:3c:9e:81:78:a6:4d:0e:5c:3a:73:f7:
d3:56:cd:d9:02:2f:93:fd:2d:77:8e:22:cd:04:3d:79:a4:44:
cd:eb:83:19:f9:39:50:94:a6:74:cf:68:c8:3d:e6:9b:87:07:
59:6b:44:dc:89:16:06:90:8b:b8:5c:76:a9:52:3f:da:ee:64:
95:c4:16:47:d1:8b:06:ea:d9:50:37:36:99:57:25:69:9a:a7:
37:f2:e1:52:4b:f5:c8:b4:69:5d:c8:77:3b:66:32:85:49:b9:
5f:ba:a7:bb:05:04:a3:9b:d7:22:d1:4b:ac:97:83:98:58:0e:
1f:31:78:ba:10:2a:b2:b7:15:8b:8e:8b:aa:36:50:1b:f4:f7:
9a:9f:a3:3a:1f:f6:f5:f2:97:4b:ff:c4:e3:60:5f:d0:f3:e8:
ee:28:90:a6:39:ef:13:5e:bd:c7:8f:bb:95:95:ac:10:8c:c2:
7d:b8:51:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:59 2025 by rpki-client