Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
File: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft (raw, json)
Hash identifier: 49rkEluq3Enie6nFnSOZk6g/DRMvE6fd8+YOydfGjfY=
Subject key identifier: 9D:85:D4:81:08:54:08:A0:02:24:E7:09:27:38:BF:91:BC:6D:6D:28
Authority key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
Certificate issuer: /CN=d5a2196ef119221155e1683f8967d254625dae71
Certificate serial: 01974C9FDAA02265B3EC0ACC2852D7A857F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 23:00:33 +0000
Manifest this update: Sat 07 Jun 2025 23:00:33 +0000
Manifest next update: Sun 08 Jun 2025 23:00:33 +0000
Files and hashes: 1: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl (hash: aBOc/ilh1IIv+z5zvADvRZ9wrs6Gae6vTHReSESnGwk=)
2: Rvoozr9-AEirIvl3H78yEjywI3M.roa (hash: C8PH+7JgTNI/2g3gAC+RhVDcD73858pmRmw+QrCbn9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:da:a0:22:65:b3:ec:0a:cc:28:52:d7:a8:57:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a2196ef119221155e1683f8967d254625dae71
Validity
Not Before: Jun 7 23:00:33 2025 GMT
Not After : Jun 8 23:00:33 2025 GMT
Subject: CN=9d85d481085408a00224e7092738bf91bc6d6d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:19:13:55:7c:c6:b2:50:ff:63:71:87:83:
bc:6e:03:ce:43:fb:1a:03:63:10:3a:9d:ee:f9:0e:
12:51:3b:24:9b:58:e4:02:a4:b6:d0:fb:d6:c6:6d:
ae:56:fe:6f:ef:19:4a:67:4d:6f:7f:c9:e6:e6:e3:
10:4f:ab:4c:de:8b:26:b6:40:90:ad:1c:d1:c9:94:
5d:4f:3a:cd:6e:94:56:88:e6:cf:55:40:2a:49:47:
2c:dc:84:31:33:ee:5c:dc:51:4e:28:44:b3:6e:9e:
4b:d2:c3:1a:9c:e3:69:5e:c4:76:f5:68:e5:55:77:
97:76:82:18:19:fd:b9:66:fa:59:ea:05:d9:dc:71:
2f:cd:33:be:24:ba:f1:8e:15:9f:25:8c:94:0e:e8:
0c:c5:5d:10:44:c9:63:c4:46:f2:e3:34:c9:44:f4:
dd:d6:cf:65:5a:28:e3:af:9d:83:40:5d:73:5a:e8:
f5:03:ae:eb:ca:43:25:12:74:5a:74:1e:79:20:dd:
32:a2:cd:0f:5f:56:12:69:19:d4:96:da:1c:e2:75:
4d:2d:16:25:c9:77:01:a0:d0:59:1f:59:3e:40:1f:
4a:f8:7c:ec:58:75:be:f3:c5:a2:89:16:dd:0b:2f:
8f:0d:8d:84:00:e4:8f:bd:7d:d4:bd:bd:ad:e2:46:
35:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:85:D4:81:08:54:08:A0:02:24:E7:09:27:38:BF:91:BC:6D:6D:28
X509v3 Authority Key Identifier:
keyid:D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:79:09:a0:38:c1:64:54:d6:05:f8:2e:32:27:ef:fe:01:42:
fb:fd:83:f2:09:d5:fc:ba:3f:8d:10:e2:37:b2:77:11:55:ce:
ef:b2:ca:22:43:4a:bc:bd:95:d9:bb:9e:94:ff:f5:00:e9:88:
71:3b:b8:1c:ff:91:bf:ee:5f:22:94:20:19:b8:df:03:24:6f:
85:69:e8:38:3a:74:94:ad:c9:1a:78:5a:fc:f4:16:08:3a:56:
d3:23:f7:ca:b5:33:fe:b1:16:2b:ce:a3:55:09:34:b5:e1:af:
ea:7d:fd:94:0c:d8:52:18:12:37:8a:91:5c:b0:91:b1:4d:de:
ff:e4:c1:41:5f:a0:e9:7e:84:ad:d6:5e:9d:7a:49:2f:2e:b5:
0e:f1:32:22:f0:66:5d:02:f0:64:32:8a:a2:fb:bc:6c:9b:e9:
bc:43:16:ff:14:3f:8d:59:4b:f3:ab:0f:41:62:26:d2:44:3a:
ae:bb:b9:20:6f:0f:b7:37:3c:12:c8:2b:f5:be:81:c7:e2:25:
1a:34:47:38:20:27:88:74:f8:bc:de:7a:46:3c:4c:83:c6:e7:
3b:36:b6:75:4f:03:6e:1b:7c:b0:e5:f3:2d:ad:a9:bb:2f:6c:
32:ec:90:e3:c8:7d:61:7a:20:c2:33:91:66:5c:3f:5e:f4:84:
df:d3:7c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:53:12 2025 by rpki-client