Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: RgMblEfjhsDq/arsgcOtZaQHT3QBMB/vYuPVA/yt0ts=
Subject key identifier: E7:A5:9F:C4:64:17:C1:E5:48:3C:30:AF:A5:5F:F8:4C:C1:31:B6:75
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 019746D4D9653538717F18859C941B778BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 20:00:43 +0000
Manifest this update: Fri 06 Jun 2025 20:00:43 +0000
Manifest next update: Sat 07 Jun 2025 20:00:43 +0000
Files and hashes: 1: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: IV0vT/fzpPBYRXqzPzyzY82SsHZFzuIJC+MZJtRKDYY=)
2: tZdMpKDB98hJ9pZj681_6AcpB6s.roa (hash: i6o9Pghma18l7gMu2eMNZU5hQVcsb4HmVOsk/64sqkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:d9:65:35:38:71:7f:18:85:9c:94:1b:77:8b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Jun 6 20:00:43 2025 GMT
Not After : Jun 7 20:00:43 2025 GMT
Subject: CN=e7a59fc46417c1e5483c30afa55ff84cc131b675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:ca:fc:8d:1d:e6:e2:13:5b:48:c4:b0:14:
cc:56:9f:a4:f5:f4:37:46:c3:8a:32:9e:f6:c8:23:
14:77:5d:85:e9:03:80:67:65:9c:59:4a:9a:52:5f:
c2:b4:75:a4:8a:7c:21:53:9a:69:d1:3f:86:05:0b:
3f:22:4e:8c:b1:d6:7e:df:4e:c7:cc:cc:5d:fd:ee:
5c:4e:d7:dc:00:78:d7:2a:e4:1d:31:dc:5f:06:15:
e7:e1:2d:0d:8d:d7:fe:f2:8f:95:b9:a5:fa:7e:67:
50:07:0d:f8:70:77:15:2e:e8:fc:3f:69:e3:8a:89:
64:fa:4c:58:56:f4:41:12:90:77:7b:13:d2:0e:04:
38:07:41:d3:fc:b6:9c:89:f9:58:62:52:ca:81:5e:
72:2b:73:53:c9:f6:9d:e6:09:91:98:cb:6a:0c:af:
97:71:9c:89:e0:3a:75:87:aa:26:e9:99:0d:a8:f9:
67:a7:f5:e5:ea:6f:77:c3:50:36:fb:9a:52:91:e6:
88:0c:6d:93:ef:c5:9f:53:ec:a7:49:87:bb:98:d2:
33:f5:81:bb:2e:6b:00:6c:dd:f0:4c:fb:c6:47:d3:
b7:f8:a7:d8:83:12:d7:c2:21:29:0e:e0:36:db:be:
da:39:e0:98:ab:0a:a3:81:c0:86:2d:77:b3:a5:e8:
58:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A5:9F:C4:64:17:C1:E5:48:3C:30:AF:A5:5F:F8:4C:C1:31:B6:75
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:29:e1:0c:a3:f9:c8:23:74:a0:e8:0c:23:20:e5:ca:10:e3:
69:2a:50:58:44:10:93:57:d0:b5:96:ff:9b:27:cb:29:e9:3c:
f6:3c:96:e8:7e:bd:db:7c:66:a3:83:1b:f8:48:20:38:e2:f7:
00:df:00:ba:8e:b1:48:f1:15:96:e5:e8:bb:ab:1d:e5:2d:78:
9a:42:10:9a:f6:54:19:9e:5f:2d:59:40:55:cc:6d:5c:99:fd:
c3:8f:11:68:92:98:0b:ab:10:46:ba:60:81:3c:8a:e2:a5:8a:
19:43:d3:9b:a9:aa:76:1b:b2:78:63:7a:96:75:a1:37:08:49:
61:a4:d1:90:ea:33:8d:83:2d:26:12:70:a9:d4:3c:a6:3c:c1:
b4:0f:f3:24:cb:9e:07:4d:88:94:85:ff:53:47:42:60:39:0c:
7d:3e:cf:53:92:6b:33:cd:d5:18:33:bc:23:4b:90:9a:ff:c4:
bd:be:d4:8d:d8:de:b8:69:51:7c:39:3a:05:35:8a:a9:52:be:
2d:fb:72:15:71:f9:96:8f:12:47:57:79:d8:b8:9c:0c:5a:fa:
56:8d:f4:4f:d7:ba:50:ba:ae:d0:3a:85:3a:af:7e:d3:32:f3:
06:ff:89:2e:7f:82:3d:70:dd:9e:97:db:20:db:c8:54:48:3d:
d2:6a:90:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:39 2025 by rpki-client