Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
File: _ieWxamFRTLp7WONHDmlQcLYlSw.mft (raw, json)
Hash identifier: g4uePtSm9JFyASTAORpS27QcC1wKAVHsiGgZTYIpyfI=
Subject key identifier: 53:06:63:11:57:39:91:43:81:1B:6A:A9:AF:9D:1B:78:CC:65:F4:8E
Authority key identifier: FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
Certificate issuer: /CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Certificate serial: 019748FA07D5633F484B69E9E26F595F4603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 06:00:34 +0000
Manifest this update: Sat 07 Jun 2025 06:00:34 +0000
Manifest next update: Sun 08 Jun 2025 06:00:34 +0000
Files and hashes: 1: _ieWxamFRTLp7WONHDmlQcLYlSw.crl (hash: PEU4fLzyIg2boCRFMl21m40de/u5TCMCXntoRXy+QPQ=)
2: lVgaXBqK9ipwWOL2JmWoEWoiLBY.roa (hash: Oh3cZzMySDT+Ikxg+sUYVfiZZ5GP7qV/BWdrXyebTLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:07:d5:63:3f:48:4b:69:e9:e2:6f:59:5f:46:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Validity
Not Before: Jun 7 06:00:34 2025 GMT
Not After : Jun 8 06:00:34 2025 GMT
Subject: CN=5306631157399143811b6aa9af9d1b78cc65f48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:7e:f5:58:cc:f3:ce:d9:15:29:f8:1c:a2:f6:
93:f8:0d:65:c4:be:8d:e5:c4:72:f6:a3:de:13:c4:
29:bc:7e:19:e2:21:d2:a8:48:aa:a0:50:d1:57:61:
4f:f5:0e:f9:23:93:f4:61:fe:80:3a:04:76:30:d0:
95:a0:5d:97:5c:b2:82:b0:47:35:09:4e:8c:b5:06:
6a:fb:c3:5f:63:40:c5:ec:73:ab:06:62:3a:31:55:
d8:4c:b4:5f:c8:9a:78:54:cc:7f:8c:1d:cf:ca:16:
88:81:b4:7e:72:d0:e7:f3:4c:3c:31:5d:8c:1c:ce:
49:c0:a3:9e:b7:c7:11:e3:c2:32:16:be:82:29:60:
03:c8:ff:82:24:55:d9:a2:82:71:58:f8:34:08:5a:
25:69:06:28:e9:4e:39:00:bc:9d:d3:f5:67:c8:0d:
b7:84:ad:82:e0:01:2d:e2:b5:3d:5b:43:74:ed:f8:
f6:d3:9c:8d:54:dc:cb:ce:f1:56:22:2d:3b:ce:5d:
d8:32:8c:79:27:3a:0d:ec:08:75:8e:11:85:90:40:
40:a5:0c:cb:b5:32:ae:6e:6f:27:22:8b:c2:93:11:
8d:0e:50:79:4d:15:57:35:54:0f:b3:30:94:8d:c9:
ef:4f:0a:dd:3e:b6:dc:63:77:08:5f:bf:70:95:54:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:06:63:11:57:39:91:43:81:1B:6A:A9:AF:9D:1B:78:CC:65:F4:8E
X509v3 Authority Key Identifier:
keyid:FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:96:7d:bc:d6:02:a7:2f:94:d8:9d:02:06:9c:f9:85:25:4b:
30:e4:e6:10:54:eb:b7:5f:4d:14:c0:d0:fc:73:e3:35:fb:c1:
ce:d9:ed:ab:bc:aa:bc:d4:7d:62:ab:e7:cb:3a:a0:10:84:1b:
d3:e9:b7:d7:3c:71:be:1a:9f:4c:ce:18:e2:4c:8b:b0:03:f1:
b5:7d:04:3f:91:93:80:64:f2:cd:02:bb:29:06:be:b5:b8:25:
03:d4:40:0c:05:3a:c4:9c:c9:5b:b6:e3:dd:e3:22:3c:a2:64:
ea:d3:16:4d:13:0b:95:c5:f4:a6:e5:d2:b7:a2:f4:db:40:a1:
75:63:6b:64:c8:e2:60:dc:24:3e:97:78:10:70:e4:f8:32:0f:
5f:fa:bf:6e:d5:c5:73:f9:5e:97:01:70:30:d7:b7:00:f0:25:
b6:2b:50:3c:8a:a9:4d:43:0f:fa:73:e3:26:ac:84:61:a4:b3:
55:ad:37:db:2d:2b:20:4f:56:9a:82:1d:d2:46:71:82:d8:d2:
03:52:62:a1:cc:b4:23:e4:ad:3a:ec:8c:b7:aa:19:e0:9c:0a:
27:07:ee:21:6c:84:f7:d4:1d:7c:79:ff:7c:fc:bc:7f:ab:a7:
8b:40:62:fc:2a:7c:ca:71:e1:a6:9c:b9:a4:0e:db:54:c8:43:
b7:bf:8d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:11:23 2025 by rpki-client