Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
File: 977TP_AejgncT-3NAROcDneFSq4.mft (raw, json)
Hash identifier: ynXaOm3aY3xIPgqMyJP2JAe6c0j9r3AmArYipBeebkg=
Subject key identifier: 45:F6:24:37:74:0F:33:04:EE:86:74:66:9C:26:90:FD:C7:57:B1:FB
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Certificate issuer: /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial: 0197488C636D9847C72DED1A362DC58D77E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 04:00:49 +0000
Manifest this update: Sat 07 Jun 2025 04:00:49 +0000
Manifest next update: Sun 08 Jun 2025 04:00:49 +0000
Files and hashes: 1: 977TP_AejgncT-3NAROcDneFSq4.crl (hash: +T2oL9Tn8866k9S3NhCOzkwmnl8Oj0ENu21zStkSNXo=)
2: _lgnGISO0ktGS-TS3jHHuxqlGcc.roa (hash: 2bgXxxG8FQEtolmgRr2kuRhZKybBJ/pEC6iODZDta6M=)
3: yIVyJLl1EpKKS9GoVS2g6EtcfKo.roa (hash: +BexIZ1+iniEPsBZlKynSCHhy877ZiICabmi/L0fbr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:63:6d:98:47:c7:2d:ed:1a:36:2d:c5:8d:77:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Validity
Not Before: Jun 7 04:00:49 2025 GMT
Not After : Jun 8 04:00:49 2025 GMT
Subject: CN=45f62437740f3304ee8674669c2690fdc757b1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:50:c4:06:e2:cd:99:14:d9:f3:ed:42:4f:
ad:34:b1:46:59:8d:28:3c:e6:5b:d3:b2:35:2c:52:
d8:ab:21:58:f2:a1:a2:e1:d4:bd:38:68:5b:a1:d0:
06:9e:06:95:4c:e3:71:6c:c2:7b:70:0f:47:c1:d6:
d0:50:79:c1:27:2f:bf:2d:44:02:b2:72:a0:8d:95:
8a:fb:25:b2:8f:a2:58:9a:44:6c:cb:91:cb:58:ad:
9f:6e:a9:24:bc:f2:b6:69:1a:0c:93:34:0a:3a:6a:
d6:d5:bd:49:1c:19:98:20:36:fc:cd:44:d4:94:bf:
e9:0a:65:0b:df:be:5c:4c:07:82:a3:4d:6a:78:66:
69:2c:6f:73:00:76:1b:80:2e:51:51:63:42:be:94:
1b:da:59:7e:11:a7:2f:50:cc:11:c6:8c:67:8b:74:
a3:5d:8b:d5:f2:7d:4d:be:14:55:0c:9d:46:17:bf:
ed:85:f6:b6:2f:cc:1d:47:87:e6:98:3b:cd:66:88:
7b:e4:c7:ac:fd:15:55:4d:ad:2d:74:8a:76:dd:21:
2f:8a:27:1c:f0:66:53:e9:c5:1b:dd:ca:d7:58:d0:
33:ab:26:0c:4c:f6:e8:50:04:74:ad:25:3d:ec:1f:
55:f8:7c:02:f9:dd:07:24:ce:f8:54:c1:60:f4:3b:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F6:24:37:74:0F:33:04:EE:86:74:66:9C:26:90:FD:C7:57:B1:FB
X509v3 Authority Key Identifier:
keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c3:95:28:2f:27:ce:f7:0c:77:c2:59:4e:f9:f8:c4:be:f2:
fc:46:9e:17:23:12:c0:b0:ec:86:ed:d6:ab:c2:ef:b3:da:98:
e6:4b:56:84:86:f9:5f:f7:a8:e2:d5:55:9c:2c:d8:62:0d:6e:
ce:09:60:b6:17:71:69:df:5b:26:57:5d:e2:b8:c4:7b:4f:42:
54:43:30:5b:af:0a:2f:a7:2a:87:dc:60:d1:50:27:4f:f9:e3:
98:ca:43:b4:e4:cb:5b:c5:06:ff:c3:b2:1c:b1:b1:54:1e:a3:
cd:66:9a:91:88:2e:7a:01:50:f3:b1:e7:91:3b:eb:94:4d:f1:
5e:99:dc:43:d1:06:4f:d0:a2:3d:6e:0d:f1:e6:11:e7:23:06:
7a:aa:fc:04:7b:9a:b9:a4:a3:84:46:fe:7d:5a:02:09:13:5c:
ea:96:68:f4:67:14:14:ba:2e:bc:d4:03:aa:f8:b7:ee:4b:db:
e9:c2:8c:08:b5:c4:03:b4:7e:f9:87:a7:f3:10:b3:9e:d4:eb:
d2:32:73:db:a5:ab:99:5e:06:5c:42:8f:01:21:78:c6:23:c6:
aa:a5:b3:21:f6:04:35:e2:79:6b:bf:34:c8:98:5d:a5:72:4e:
1f:11:42:44:52:61:bd:04:5f:a3:c9:7c:cb:a1:59:25:8f:f4:
5b:7a:bb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:06:43 2025 by rpki-client