Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File: PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier: Ul+6Hq3Z+C5rlO9l2DcZZpUPxjUeQgT9ZGD/B4P4x2g=
Subject key identifier: 8E:D2:67:32:B2:18:DC:05:A6:1A:32:C1:17:57:81:F8:E4:72:6A:A7
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer: /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial: 019751C66B7305CFD32D3A0CCA7B24D491B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 23:00:47 +0000
Manifest this update: Sun 08 Jun 2025 23:00:47 +0000
Manifest next update: Mon 09 Jun 2025 23:00:47 +0000
Files and hashes: 1: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: SWcTtbIbbflx2m0EuWc8QiyjlT4fa9e5/Iekc1QjOa8=)
2: aATeS7_Zg3KdAOaKx-n1ZvynPH4.roa (hash: BiTKK6ZatcQ+uoSfiABBAw2jPEjkMuOpjqegStTZ06Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:6b:73:05:cf:d3:2d:3a:0c:ca:7b:24:d4:91:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Validity
Not Before: Jun 8 23:00:47 2025 GMT
Not After : Jun 9 23:00:47 2025 GMT
Subject: CN=8ed26732b218dc05a61a32c1175781f8e4726aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:81:f5:14:9e:e7:b4:d4:bd:05:0a:23:e0:1b:
05:79:27:2a:e0:5d:e1:94:b6:07:73:22:ef:2f:da:
17:cd:44:c4:11:1d:c4:4d:36:e1:27:23:37:fa:7b:
44:13:12:e7:3d:d3:9e:3f:d8:f2:3c:73:71:03:7b:
2f:74:85:bf:c6:99:e3:ce:d5:52:32:3d:59:3e:eb:
b1:cd:57:d7:e9:b0:42:15:99:83:c2:48:b5:ad:fd:
32:3c:0d:df:a0:c7:20:84:d9:4e:28:3f:62:62:fa:
d1:01:e7:9b:05:ba:f4:6d:b1:26:ce:2d:3d:56:ab:
4b:08:b1:ff:64:98:45:f6:59:41:c9:68:24:16:af:
2c:01:58:0f:2f:49:e4:de:4d:fe:ca:a8:8f:0c:65:
1c:7a:c0:d3:10:f2:68:90:8c:cd:6e:50:cf:66:eb:
81:0e:d8:b4:27:b4:11:20:f6:15:22:1f:7c:a5:01:
eb:5e:a9:23:27:93:87:10:65:d6:1a:af:ee:a1:52:
f4:48:f6:2f:4f:49:41:03:aa:f0:43:04:e1:92:d3:
35:00:2c:08:3f:1f:44:c6:24:a7:5a:c3:20:6d:01:
30:98:e5:ab:5b:c6:dd:57:1c:39:02:cc:fb:cc:79:
74:67:df:39:35:c6:df:31:ca:fc:b5:1e:a2:28:a6:
9c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D2:67:32:B2:18:DC:05:A6:1A:32:C1:17:57:81:F8:E4:72:6A:A7
X509v3 Authority Key Identifier:
keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f7:62:d2:de:af:0b:9f:64:01:b4:3d:77:7a:73:8d:e3:8f:
e5:99:72:ac:78:64:0c:36:40:de:fc:e8:01:a8:a4:64:0f:24:
58:18:c4:6d:93:70:98:80:7d:87:eb:a0:ee:64:30:ef:26:56:
47:54:81:a4:20:15:c4:73:5e:4b:f3:3a:d0:f0:36:70:c3:f8:
a6:cd:90:17:e0:d8:cd:a5:31:fa:4f:64:66:8c:ce:7f:bd:f2:
1e:9e:dd:4b:41:0b:3a:3c:e9:19:60:d9:59:e5:3c:fa:10:9a:
0c:9a:41:fb:a4:bf:dc:5e:ff:c1:29:50:e0:33:39:bb:fb:db:
aa:c3:98:c6:99:b4:d3:2b:8b:37:cf:f4:ed:67:7b:72:69:65:
3d:d4:52:77:85:a5:3d:72:0e:d2:3c:88:42:3a:c2:e6:bb:72:
80:ff:7e:95:0e:8e:1c:a1:3a:64:7d:50:a9:02:ff:88:62:6a:
b5:63:96:2f:71:c0:05:70:a9:65:a4:c7:84:f2:69:7c:04:cf:
af:55:9f:fa:49:c7:38:4a:fa:c3:7b:17:a4:3b:b5:d2:4b:c4:
ec:94:06:e7:52:44:88:44:3a:1e:05:c6:39:c8:f4:70:c3:3b:
d5:41:fa:dd:ff:5e:41:88:0f:85:fd:2d:f4:5b:d0:41:21:14:
26:fa:1b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:13:31 2025 by rpki-client