Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File: g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier: nsQkaIuLsId6qfCDa5/SRqRZ6L60vpxdy3lDkUNWy1E=
Subject key identifier: 76:7A:9B:8F:57:9A:2C:CD:F6:FE:90:B4:53:4B:C6:06:DA:A8:D5:BD
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial: 0197488CEFB925D54737DB6BCFCE0EAE8A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 04:01:25 +0000
Manifest this update: Sat 07 Jun 2025 04:01:25 +0000
Manifest next update: Sun 08 Jun 2025 04:01:25 +0000
Files and hashes: 1: CvGHepAgyhQF29vgwO5RLU27Tig.roa (hash: MTqSAP2ijcRiLN3/AxskccxaBqUIlze/F2fZZstIpd0=)
2: LG2MEPQP4SA0RYNet0_i-TbLVOA.roa (hash: Q0AqpzK5pnfc1Ye6ZvO737eSRCPhdfmTWDd+EoGA7/k=)
3: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: KZAc5uiikpI5rMRTKAnets+vXwuCSC+6DBNinZW1vtU=)
4: mM8VTopJZmHymxZODgrdAS9tCB0.roa (hash: xbQXqlIoaX+7utbFJ34rZdlVmArTuhCKQpdLZlu7I7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:ef:b9:25:d5:47:37:db:6b:cf:ce:0e:ae:8a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
Validity
Not Before: Jun 7 04:01:25 2025 GMT
Not After : Jun 8 04:01:25 2025 GMT
Subject: CN=767a9b8f579a2ccdf6fe90b4534bc606daa8d5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:5f:8d:76:da:b3:fa:19:4c:e3:34:65:01:
6d:3e:06:68:9a:61:07:1d:7f:15:8c:ad:6d:56:85:
6c:17:19:31:b7:4b:e6:c3:6d:9e:ce:b4:36:db:61:
3f:01:2b:07:2e:c9:31:a8:a8:b1:55:45:b3:75:ba:
60:74:2b:8a:fa:c1:b9:68:0c:33:9a:1a:33:3a:92:
9d:07:4c:16:34:ec:26:1f:f2:1b:3f:23:64:ba:ed:
47:78:e4:43:cd:fe:00:fb:7f:d2:49:68:54:d1:a4:
be:36:9f:15:1b:43:50:b2:e6:cf:a4:0a:a6:96:f5:
09:c4:dd:35:fb:ee:2a:e9:b1:26:ff:b6:99:f9:91:
05:9b:fa:1a:09:6b:79:98:b0:e7:bc:1d:d8:18:78:
ce:8c:56:cb:d1:40:cd:c5:ee:8a:bf:f6:20:bd:15:
a6:e2:3b:4c:b5:7c:ba:43:ac:0e:3e:28:7a:bf:17:
7e:19:b0:b1:e7:81:df:5d:ef:05:81:8b:2d:f4:80:
53:de:0b:fe:d7:12:b9:3b:6a:e0:e7:c4:c8:d9:67:
cd:38:9d:6f:98:a9:3e:2f:5a:22:a5:35:a8:5e:7a:
ca:02:67:a6:51:e4:60:c9:4b:99:5b:3f:a0:a5:38:
01:2a:d1:24:00:01:94:46:95:ac:ee:b3:e0:29:74:
b0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7A:9B:8F:57:9A:2C:CD:F6:FE:90:B4:53:4B:C6:06:DA:A8:D5:BD
X509v3 Authority Key Identifier:
keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f7:fb:a8:69:fa:26:f6:42:16:96:e6:bc:11:2f:86:18:09:
8e:af:7d:4b:f5:c7:3f:bb:a1:df:52:83:be:71:78:d9:b8:68:
a2:0d:02:29:af:21:9e:4e:d5:dd:0b:b8:99:63:d3:63:97:99:
c3:88:ed:70:a6:2e:5d:b6:44:e1:a3:c9:06:c1:60:3d:6c:15:
7e:76:5b:90:18:f8:e0:24:12:12:58:1b:cf:a1:c3:f4:fe:9f:
cb:42:35:fc:62:97:0a:03:2f:89:17:97:85:57:78:9b:87:e6:
a4:81:c7:96:05:88:97:13:46:7b:c3:fa:d3:d1:e7:54:86:83:
9b:f9:5b:d3:86:15:a6:5f:47:be:38:02:4f:bb:5e:b3:2d:7b:
33:da:63:61:84:fe:97:bf:e4:eb:4f:e4:65:10:5b:0c:d4:2b:
e7:96:9f:da:05:79:be:e4:1d:84:da:3a:68:c7:0b:68:c0:11:
e1:c4:ad:33:95:3e:2b:87:70:d2:8f:19:5e:b5:09:9a:13:c5:
ba:6f:50:d9:03:6b:5a:78:82:03:1f:09:79:54:87:bf:9a:6a:
71:6d:9a:72:2f:25:af:52:d0:9c:e1:00:ff:31:b8:c3:51:dd:
1a:5f:0f:89:c6:df:ec:55:a9:0d:bb:9d:6f:89:0d:c3:82:a6:
fb:68:3c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:16:22 2025 by rpki-client