Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: S47vbGiz6FRdlwQBjFwWVk8QA4+e00O1gdbZrjA2YHk=
Subject key identifier: 00:C0:F0:01:56:37:DE:E4:95:03:28:F2:83:5D:F9:2D:E6:3B:5C:D7
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 01974C31EFD5CB4A8D0983B56F01CCEB5CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 21:00:30 +0000
Manifest this update: Sat 07 Jun 2025 21:00:30 +0000
Manifest next update: Sun 08 Jun 2025 21:00:30 +0000
Files and hashes: 1: PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa (hash: 9xAG/+lXKPXOcRJWGmtvJdS/t7KdmtbF4dJ5vzXbJTA=)
2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: 2Y+QJqwpNinCLGzeqMnBddR64XiBzXvH850myPKE1TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:31:ef:d5:cb:4a:8d:09:83:b5:6f:01:cc:eb:5c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Jun 7 21:00:30 2025 GMT
Not After : Jun 8 21:00:30 2025 GMT
Subject: CN=00c0f0015637dee4950328f2835df92de63b5cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:96:9b:58:bb:9b:2f:54:1a:9e:9f:84:fc:
5d:b3:41:77:86:91:58:1f:43:52:d5:95:dd:3d:7c:
a1:56:25:62:a2:eb:be:bd:5b:49:9f:10:de:a3:9d:
ec:b6:af:b2:80:2c:8b:8d:0c:59:6e:54:a1:af:34:
8b:42:6a:62:46:28:28:5c:d4:18:dc:dc:51:71:2b:
f9:0c:a6:d3:65:fb:49:fb:bb:9d:95:78:c0:e8:cf:
68:fc:de:e0:4b:62:64:be:c2:00:17:ec:4a:1a:9a:
25:96:63:02:ca:2c:d3:ca:a1:d1:6c:7b:82:9b:0f:
a4:a5:94:20:90:d1:4b:9b:bd:76:0e:53:11:0c:bc:
ea:8d:3b:32:f0:31:9c:74:a2:4c:3e:31:53:32:54:
f1:06:03:19:e6:b2:a9:8d:a2:c2:4b:60:66:20:74:
1c:05:68:ed:25:9e:25:ea:f5:21:62:b7:c3:74:60:
27:03:8c:e5:50:f5:0c:44:d8:0c:5a:dc:7a:27:3b:
d0:5f:5e:a6:df:a0:87:b3:4c:62:75:44:8a:81:be:
35:b6:0f:c7:eb:26:66:07:3f:d4:9f:63:e2:3c:76:
a0:fe:42:0c:7d:1c:14:27:8b:22:59:e1:a4:a7:48:
89:6a:9c:c5:f8:39:e7:66:08:8b:a7:3b:99:39:d8:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C0:F0:01:56:37:DE:E4:95:03:28:F2:83:5D:F9:2D:E6:3B:5C:D7
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:20:bc:fc:66:6a:8e:28:86:79:a0:9c:ae:af:87:9e:c9:d7:
4e:f2:1e:9d:0d:a4:37:26:c7:3d:74:34:a7:ac:8b:dd:2c:c0:
3c:11:e5:60:ac:3b:b6:d1:0b:4b:d4:e8:f2:40:f7:5d:05:2e:
bb:f4:f3:aa:ea:75:c7:a7:80:84:fa:d1:24:b8:a2:22:9b:e0:
45:d5:94:0c:c4:c5:92:a5:8b:2e:72:c7:dc:0c:b3:d5:8f:f5:
6c:72:3f:4c:9a:c5:2b:43:81:f2:06:3c:f8:b4:9b:b4:aa:e6:
a0:04:bf:5d:03:19:85:7c:0d:98:d6:18:cd:20:1a:3a:1d:cf:
1e:a3:a2:30:29:9a:3c:ea:d7:aa:9e:5b:c2:bd:d2:17:7c:27:
a2:29:6c:60:a1:61:11:07:82:e8:e2:c3:ac:23:2d:8c:c9:78:
4e:f4:e7:2e:2f:e2:8b:99:e8:02:30:d4:88:09:f5:3b:bc:e7:
af:1f:6d:c7:cb:d6:65:41:5d:fa:27:ca:59:7a:41:c1:8f:78:
71:e6:ba:3b:01:9c:a6:8e:d3:43:9d:58:94:32:8a:19:ea:5d:
e7:1a:d1:c3:d2:d9:cd:0c:c9:54:ff:6a:f8:94:d4:24:a0:18:
49:3c:0b:60:94:54:d8:8a:8f:01:98:b2:3d:d4:74:cb:99:d3:
5d:be:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:25:08 2025 by rpki-client