Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
File: d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft (raw, json)
Hash identifier: FEu0pJ8G8HHZoUCLzEFh3DxK9yrWVWpmrBWVUQR0ZRQ=
Subject key identifier: BC:18:73:CA:02:92:D9:43:B3:4B:F1:48:6D:C9:BB:4A:71:F2:C6:FD
Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
Certificate issuer: /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Certificate serial: 0197493114163570C0BE80A2B0394043EAA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 07:00:42 +0000
Manifest this update: Sat 07 Jun 2025 07:00:42 +0000
Manifest next update: Sun 08 Jun 2025 07:00:42 +0000
Files and hashes: 1: 9RiEw_mWI329p00ygK6PV3zCib8.roa (hash: 76xZV8riwU1FZRHFqIOaKnZ1x4iN7Apxati5A/6/dRc=)
2: d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl (hash: j68B1HmC0fhm2wGT8XZgStgX3QFL7EBYODGCCiYsctQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:14:16:35:70:c0:be:80:a2:b0:39:40:43:ea:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d
Validity
Not Before: Jun 7 07:00:42 2025 GMT
Not After : Jun 8 07:00:42 2025 GMT
Subject: CN=bc1873ca0292d943b34bf1486dc9bb4a71f2c6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:e2:d4:1e:ca:0c:08:51:a9:cf:47:d4:1d:
5a:a4:9b:0a:27:3d:f2:e4:b5:25:9c:ec:e4:c4:93:
01:fc:35:c3:f2:cf:8d:3b:61:28:d6:2a:50:d2:08:
52:f6:83:3d:dc:83:f2:3c:4a:da:00:02:df:d8:f8:
6f:01:b2:da:ae:3a:fe:71:fd:b1:31:08:04:f1:2d:
38:d8:c5:70:6f:81:1e:de:83:0a:77:f4:ad:f0:d7:
3c:31:a7:ee:d0:f7:ea:8e:ea:96:cd:8f:77:f1:6b:
17:31:5e:1e:37:7f:0b:09:c4:f0:7d:a7:72:5c:70:
e8:ad:23:b6:22:f5:9b:05:03:66:54:25:20:1b:8c:
31:be:ed:6b:11:7f:ee:d1:0b:11:93:53:6e:79:8c:
09:ba:37:eb:15:aa:ab:08:97:d6:f2:e8:fb:7e:41:
a8:d3:bb:dc:1a:da:16:1d:3f:a8:64:45:0a:0d:47:
4c:8b:b1:df:9f:76:b5:fb:d0:aa:29:2f:8c:33:55:
9c:cf:28:4c:39:d3:4b:f3:62:b4:66:5d:59:dd:5b:
9f:1c:32:af:20:de:d6:00:90:71:7f:f1:2b:0b:b6:
d1:2a:98:03:2b:ec:9d:45:c8:4b:33:e7:6d:1e:c2:
d6:d8:15:4e:58:3c:85:89:62:95:51:0b:8e:a2:98:
0c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:18:73:CA:02:92:D9:43:B3:4B:F1:48:6D:C9:BB:4A:71:F2:C6:FD
X509v3 Authority Key Identifier:
keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d9:24:45:20:53:99:3d:15:d3:0a:84:9f:52:58:d9:c4:a9:
14:f5:37:62:de:2f:d4:de:c5:f5:cb:c1:60:13:fa:16:45:3a:
0f:e2:cc:81:15:45:33:9e:ad:a5:d8:6e:b0:c5:ce:b4:80:6e:
e8:84:03:5c:42:d4:83:6a:ac:33:6a:65:09:4e:52:59:92:40:
3b:ce:d4:2b:7e:8c:d8:0e:3d:fb:ed:ab:7b:68:01:1e:43:3b:
ca:7c:55:14:49:16:de:cc:75:27:f1:d1:3b:a4:74:fe:a5:af:
7b:8f:4e:e4:78:a3:0d:8f:41:17:b3:3f:3f:01:02:48:fb:8d:
cd:8b:ff:86:a9:ba:8e:cc:76:46:87:37:b6:21:26:5d:78:7e:
ea:61:4b:c2:46:0f:30:b6:fc:14:23:5b:ea:c2:86:0b:3d:95:
b1:73:76:da:f1:ed:de:6e:43:e3:04:c7:68:19:51:34:d6:c8:
b0:0c:41:dc:88:fa:63:fe:04:e7:44:3b:d4:ba:22:52:3a:e9:
95:95:55:19:c5:2b:2b:e7:2a:d0:b9:3c:28:d5:ea:3e:f0:a8:
e8:1d:15:f3:7e:d8:5b:3f:37:a3:13:24:fe:eb:8d:45:84:06:
b9:ac:1e:b9:38:f7:00:41:b9:2d:eb:a0:a2:4e:bc:03:6e:31:
76:33:fc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:51:07 2025 by rpki-client