Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
File: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft (raw, json)
Hash identifier: XIHAVTklKWlZKMSpdv+bf8KRl8zzMmq3WjJDTX3POL8=
Subject key identifier: F9:1F:50:E6:EB:CE:64:F2:D8:0E:FC:07:18:00:C4:F2:21:39:8B:D0
Authority key identifier: BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
Certificate issuer: /CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Certificate serial: 01974BC48399C891EDE0C1F6F075E1B4D6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 19:00:59 +0000
Manifest this update: Sat 07 Jun 2025 19:00:59 +0000
Manifest next update: Sun 08 Jun 2025 19:00:59 +0000
Files and hashes: 1: Lhe1dIcaQ8uYC-tM4_HlulQzvCo.roa (hash: tTALYzIFh4izYkRayS1lcrRII4GdMnV6mKHpYnfWfmk=)
2: u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl (hash: eI3EKawBzcqUa6zvDl0OIz7a5IF5UkoijrpHRJHlPA0=)
3: xG6V-ZBOkUvyT-WvdOCbpNGBhno.roa (hash: Naq65ENl+tsrgyE3t3NO3AfPirgJokBnbdzMIvkSOwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:83:99:c8:91:ed:e0:c1:f6:f0:75:e1:b4:d6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb61df71f97461c6b3b4548fdcfecd77b679030f
Validity
Not Before: Jun 7 19:00:59 2025 GMT
Not After : Jun 8 19:00:59 2025 GMT
Subject: CN=f91f50e6ebce64f2d80efc071800c4f221398bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:ac:b6:0c:ba:18:59:bf:bd:27:49:a4:e7:
a7:60:0e:d0:9e:74:74:ef:25:87:65:af:6d:a9:91:
0d:ca:63:a0:0d:cb:77:94:a6:1a:99:fb:a9:10:1c:
38:be:e5:11:f3:cb:d9:bc:4f:c6:da:cd:41:35:fd:
41:78:5f:91:60:2d:4d:00:2c:45:5b:a4:fd:00:00:
e6:e2:73:b7:2c:01:17:01:11:8b:c0:ee:6c:b7:55:
73:2a:a3:8d:47:47:30:9d:65:63:6f:19:95:e4:0b:
de:8b:4e:19:d7:85:71:32:58:d7:25:4b:46:c2:ea:
48:fb:98:af:e1:b5:23:a4:20:3e:8c:35:ab:f0:4e:
35:f2:3c:e1:c1:57:73:a3:33:f7:28:09:15:fb:43:
06:4e:91:8d:42:c5:e3:6b:19:98:2e:b4:85:8f:9b:
22:7a:86:23:9b:31:94:94:11:c0:5b:3e:bb:ea:d0:
22:c0:39:ba:e2:27:38:f1:9d:e3:e3:c2:ed:f4:d2:
a1:f7:ac:12:54:e7:f6:d2:c3:48:b4:99:47:d5:a7:
6d:54:e7:fd:d8:f4:8c:44:1f:1b:b4:a5:f6:d8:22:
a5:81:09:13:dd:5a:42:d9:1b:24:c9:e0:90:92:22:
30:ff:08:cd:1e:59:65:54:07:34:77:11:09:54:5a:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1F:50:E6:EB:CE:64:F2:D8:0E:FC:07:18:00:C4:F2:21:39:8B:D0
X509v3 Authority Key Identifier:
keyid:BB:61:DF:71:F9:74:61:C6:B3:B4:54:8F:DC:FE:CD:77:B6:79:03:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f52cea-3f41-482b-8ce8-2e2548310df3/1/u2Hfcfl0YcaztFSP3P7Nd7Z5Aw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e7:df:3a:5e:df:ea:e9:8b:22:2f:15:77:88:99:ed:25:5d:
d2:f0:65:f2:e1:ae:12:32:f3:52:a2:ce:eb:26:8a:6a:97:97:
82:5c:a6:28:60:a0:c8:61:1f:24:94:45:e7:b2:a6:7a:b1:a3:
36:9f:86:33:41:8d:24:84:6d:e5:fb:5f:79:67:de:9d:a6:30:
be:09:11:77:35:8c:1e:c7:a7:f0:f1:7a:00:13:8c:1d:ea:58:
3b:b1:43:88:93:68:a2:e6:c5:60:02:41:29:48:8a:45:15:69:
23:09:c0:d1:d6:c8:60:d2:fd:eb:73:e0:25:61:17:41:dd:b7:
f9:e7:f1:e0:71:3d:f6:f1:16:40:5f:ff:78:ce:90:4d:c2:3d:
75:a4:55:2e:5a:d2:b2:9c:5a:d5:bb:af:b4:7b:02:9c:36:ec:
93:d6:85:03:09:59:21:e8:d4:bb:98:9b:75:19:14:71:b9:d3:
b0:e4:00:9d:54:00:9a:15:75:a0:ae:78:e2:43:cd:78:9b:56:
4c:64:92:70:fc:3f:a1:60:aa:f1:36:e3:ac:27:ad:00:31:98:
67:9b:3d:b4:68:da:79:65:72:6f:35:ed:c0:52:f9:ff:60:66:
12:3d:a7:b1:b8:7d:16:77:3d:76:e2:ad:57:2e:8b:ea:2f:1b:
7a:b3:77:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:35:03 2025 by rpki-client