Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
File: ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft (raw, json)
Hash identifier: MXzfftMrsiIZyiDHob4VWI20tRzK/v2RfOcrShB0yzY=
Subject key identifier: DF:80:8B:B0:3B:2D:EA:D9:50:DF:97:12:B7:DA:38:70:EA:FA:8A:55
Authority key identifier: 7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1
Certificate issuer: /CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
Certificate serial: 01974C694D63AD65B3EB10DBE4E90013413E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 22:00:58 +0000
Manifest this update: Sat 07 Jun 2025 22:00:58 +0000
Manifest next update: Sun 08 Jun 2025 22:00:58 +0000
Files and hashes: 1: W5t6K8mhaeB1jcBRnZnKCObRLXo.roa (hash: vlPvYnrh67Sac6G89vl74L5sy1jyV/vOZ0tMCXQKGc4=)
2: ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl (hash: sm1wRxG4adn1gA5aATAHPBQe36jbZWBQzkhevtSdOR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:4d:63:ad:65:b3:eb:10:db:e4:e9:00:13:41:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
Validity
Not Before: Jun 7 22:00:58 2025 GMT
Not After : Jun 8 22:00:58 2025 GMT
Subject: CN=df808bb03b2dead950df9712b7da3870eafa8a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:1a:0f:1e:5d:d6:04:c7:39:84:ec:62:fe:
43:80:2a:ae:6b:49:2e:01:1b:e2:a2:c9:00:63:ba:
a8:f7:03:df:77:e2:be:92:1e:ee:38:25:d0:f2:d9:
8f:07:08:9e:3e:f5:a6:cc:86:f2:44:27:52:88:95:
53:73:90:15:ab:37:40:be:d7:35:ab:89:53:00:30:
30:4a:61:6b:cc:bc:83:98:17:a5:30:d6:ac:51:d0:
9d:f7:4a:0a:8a:fb:80:44:e3:1e:8e:7b:5d:7b:bb:
04:d6:bc:48:fb:54:57:58:8f:6d:0a:86:db:1a:b4:
5a:24:51:0f:59:58:cd:04:b9:65:30:57:7e:87:14:
70:c1:c1:0e:d9:a7:33:a3:e5:ab:07:2d:99:0b:f0:
b3:f1:93:47:40:8b:22:01:cd:c6:14:41:89:05:7e:
e4:ed:d0:af:8b:0c:2b:39:4d:82:e3:61:86:39:da:
1a:42:46:b0:a8:4e:d3:30:3d:fc:ae:a5:bb:e6:a6:
5b:29:e1:d9:fa:4b:59:db:75:f7:80:71:cf:96:e9:
fa:19:21:b4:45:8a:d5:8d:65:73:d6:fd:15:3e:09:
55:9f:af:5e:6f:08:4c:6e:77:b0:1c:bd:77:03:83:
3f:e8:35:b4:b9:27:37:9a:af:8a:5f:36:88:1c:09:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:80:8B:B0:3B:2D:EA:D9:50:DF:97:12:B7:DA:38:70:EA:FA:8A:55
X509v3 Authority Key Identifier:
keyid:7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f2:e9:08:37:41:18:00:9b:70:a0:b1:9b:e3:d4:03:fe:09:
fd:16:42:f5:83:42:be:3c:f7:2c:72:ed:c7:99:2e:a5:42:88:
47:8c:7f:91:32:3b:7c:d7:60:68:51:28:1d:d4:aa:b6:af:10:
c5:89:21:72:81:21:33:7f:cb:4f:54:0d:ac:6d:01:55:ea:ea:
e1:b7:7a:db:b0:10:dd:e7:76:58:af:57:f0:5a:15:28:af:1c:
80:2f:3c:02:fa:40:01:c5:ed:21:79:e7:61:72:86:97:dd:39:
40:7a:24:24:5d:a1:41:99:0c:df:78:9e:45:6f:d7:da:7b:40:
45:14:94:e3:5a:4c:27:5f:33:a0:57:33:1d:1f:ed:01:b9:2e:
5f:fb:02:e2:4a:af:8c:51:8d:58:a6:a7:a4:7c:7d:11:69:f3:
10:b2:fe:36:c2:cc:25:e3:10:14:22:57:3b:b7:a6:4c:ef:2a:
73:d1:9a:f6:0e:af:2f:63:a3:9a:8e:24:da:36:0b:b4:1e:12:
66:0a:d0:a3:58:1b:e1:4c:b8:1f:47:f0:5e:c6:ac:fd:af:01:
a1:31:1f:41:99:99:9d:0e:e4:93:3a:9f:67:dd:23:18:49:75:
a7:be:72:52:6a:95:69:fa:d6:ab:17:68:ce:e1:b4:7f:25:93:
61:a9:5f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:28 2025 by rpki-client