Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
File: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft (raw, json)
Hash identifier: wZKp9E49O+kPjHM+wcQ2Un97qqSE5W8rGvIYPqe3ZBU=
Subject key identifier: 07:99:A3:BF:33:94:54:E2:7E:BF:9D:4D:D7:57:20:18:8C:C6:E1:03
Authority key identifier: FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
Certificate issuer: /CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Certificate serial: 019749D5CE5C70656F73AD19550B00EB5646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 10:00:38 +0000
Manifest this update: Sat 07 Jun 2025 10:00:38 +0000
Manifest next update: Sun 08 Jun 2025 10:00:38 +0000
Files and hashes: 1: 1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl (hash: be8xYMG3KgYrhOGxOyZMG2aLm/iO/XNqfCTWezwt+gU=)
2: NMUyPdZC5qwvI-uU8yAq__R87OE.roa (hash: wNqu5LklcPh8GK25XCT828wVBYluabvZCKgobN8TPqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:ce:5c:70:65:6f:73:ad:19:55:0b:00:eb:56:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa55d2877132aaadcdf54058acbf9e07eddb598c
Validity
Not Before: Jun 7 10:00:38 2025 GMT
Not After : Jun 8 10:00:38 2025 GMT
Subject: CN=0799a3bf339454e27ebf9d4dd75720188cc6e103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e5:76:23:7f:56:30:78:5e:76:d7:2b:00:1c:
05:83:60:59:99:55:0b:f8:31:d2:f9:21:e3:12:ab:
2a:5a:e7:d4:c1:7c:fb:c8:10:14:84:b8:64:57:89:
36:ab:c9:e4:4e:fe:75:25:e0:84:a7:79:38:0d:8c:
56:a1:ba:96:44:8e:32:08:69:bf:e2:e3:04:62:8c:
65:9c:ca:f7:b2:dd:30:b7:c9:4a:96:6f:d5:2b:a6:
d1:ef:30:07:c2:0c:92:77:aa:d4:89:b1:55:cc:37:
ba:4e:c1:7a:20:7c:9c:c0:d1:ce:95:0c:ff:81:f9:
3b:79:e2:09:6d:82:91:2b:03:c8:5d:4f:60:0f:48:
bb:ed:52:8d:0d:0e:df:e4:72:3c:01:91:28:75:9a:
4a:d0:8d:21:70:11:a5:87:5c:c9:46:db:74:be:4d:
ac:32:29:52:24:5e:3a:4f:ff:44:3d:45:81:93:1e:
b4:f6:42:c6:54:80:05:a0:f5:a8:c0:7b:67:5a:5d:
96:7c:51:5d:ef:ac:34:7c:57:81:dc:60:22:a1:3e:
3b:cd:cc:06:6d:a3:f6:29:bf:5d:37:dd:52:50:13:
ed:2f:64:59:e2:aa:46:31:e2:51:71:5f:e3:20:08:
de:7f:19:04:af:6a:07:2f:9d:eb:50:1c:74:f0:73:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:99:A3:BF:33:94:54:E2:7E:BF:9D:4D:D7:57:20:18:8C:C6:E1:03
X509v3 Authority Key Identifier:
keyid:FA:55:D2:87:71:32:AA:AD:CD:F5:40:58:AC:BF:9E:07:ED:DB:59:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/92d208-a22a-421c-8c5b-eaf9da4adef6/1/1-lXSh3Eyqq3N9UBYrL-eB-3bWYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a5:bd:e0:bc:dc:a0:5f:09:93:a4:d8:c5:81:83:a9:60:91:
4c:85:4b:6c:45:ac:cb:b6:e8:ea:50:ac:62:b8:ca:06:cc:36:
8a:dd:f7:e5:4e:2a:68:a5:ec:bd:9f:64:b7:be:da:e0:1d:49:
18:81:15:ce:67:cd:3a:9a:66:db:23:09:9b:9b:66:17:f5:45:
26:ac:bf:c5:82:08:16:b4:ba:ef:47:e1:98:2c:8a:aa:77:8d:
60:01:04:b8:7a:36:40:e8:5d:f8:aa:7b:86:42:98:f1:79:73:
f4:2e:01:c5:b5:9e:54:64:14:09:61:a4:fe:da:3e:5a:8c:47:
42:ec:aa:89:c6:68:f2:53:5e:51:93:36:00:8b:83:33:d2:ae:
c1:08:df:3f:1c:b8:fa:40:75:ed:a0:3b:90:a6:64:a8:af:2e:
bf:cf:17:43:67:81:1e:0a:77:e3:56:f4:ce:a4:91:b0:d3:be:
b6:b8:b3:c8:d9:00:3a:cf:8f:37:0c:7a:82:49:31:7d:cc:08:
95:ac:78:b8:d7:e5:c3:60:f8:09:50:53:94:56:1c:16:ab:7d:
5e:e2:39:c6:93:f6:26:6f:f9:93:a4:cd:23:26:af:e2:8e:72:
72:d0:ab:30:aa:d3:91:3d:73:da:a3:af:ba:85:95:f8:78:5d:
78:13:eb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:08 2025 by rpki-client