Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
File: 57M-njyTL3pULrAhBWzpSx6Ljws.mft (raw, json)
Hash identifier: RJInSvaTSRtoZ8PioAxzIXnkNHYhcEMezZ+XNMJYrGQ=
Subject key identifier: D3:37:16:63:9C:90:7B:23:09:88:4C:CA:69:37:12:94:68:51:14:F9
Authority key identifier: E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
Certificate issuer: /CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Certificate serial: 01975B6E34244D78D5E190CC442F655DEBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 20:00:38 +0000
Manifest this update: Tue 10 Jun 2025 20:00:38 +0000
Manifest next update: Wed 11 Jun 2025 20:00:38 +0000
Files and hashes: 1: 57M-njyTL3pULrAhBWzpSx6Ljws.crl (hash: dgPU8MxMJxRwyD4R+GpxFVpBdc75QQIi+MV7V+yLk2o=)
2: 6Zhe4pOz-rb9TWMRRFPsmtYyKog.roa (hash: kI1Y/0VuhQsjj4DLuvZCMsfABY7cci9OBnCvkDAkun8=)
3: bSnWHcd-6ITx2i-OmG1T8hYUFBQ.roa (hash: 6T/s2wCU61VJFzvpy751/OsAnKk42N0ClHJAb6F+ja8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:6e:34:24:4d:78:d5:e1:90:cc:44:2f:65:5d:eb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b33e9e3c932f7a542eb021056ce94b1e8b8f0b
Validity
Not Before: Jun 10 20:00:38 2025 GMT
Not After : Jun 11 20:00:38 2025 GMT
Subject: CN=d33716639c907b2309884cca69371294685114f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0e:a4:e5:05:e6:be:bb:d4:34:6b:0e:1a:69:
55:4e:68:2d:9f:ae:d4:80:d3:c5:f4:c1:bd:1c:9d:
48:41:3f:96:12:a5:43:c3:85:fc:cd:92:9d:68:f2:
a3:4a:f7:5c:dc:ee:c1:91:fe:cc:12:40:71:ca:b7:
4f:7f:5d:e2:fa:66:1e:b6:a0:23:df:90:02:5b:60:
07:c4:c5:85:65:3c:a6:62:cd:b9:1f:0c:73:d7:3f:
f3:10:85:81:45:5a:5c:7e:68:24:89:a0:c4:cf:22:
3b:9d:99:7e:75:cd:b6:e6:48:27:ef:92:b4:6e:5b:
ec:98:c7:61:23:d1:ca:2b:3e:31:41:1e:06:38:91:
cb:ba:b0:a9:49:dc:67:37:e5:75:f4:14:81:eb:e0:
31:2e:bf:e4:fd:e6:fd:28:7c:e1:fe:0f:97:04:89:
c3:a7:ec:78:cf:c0:e9:ac:8c:85:a3:2a:35:55:82:
03:f6:fd:25:4e:42:d1:bc:9a:b5:71:24:13:b9:e4:
de:39:aa:f8:5d:b2:48:f7:8f:0b:a7:92:11:cd:4c:
6b:95:59:5e:36:70:be:1c:c1:28:6d:ea:e7:2f:d4:
23:59:61:0d:5b:e5:ba:f2:8a:51:4b:5e:3b:34:7c:
30:b5:f2:5e:f2:34:10:c1:51:7f:19:b7:d8:c9:60:
00:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:37:16:63:9C:90:7B:23:09:88:4C:CA:69:37:12:94:68:51:14:F9
X509v3 Authority Key Identifier:
keyid:E7:B3:3E:9E:3C:93:2F:7A:54:2E:B0:21:05:6C:E9:4B:1E:8B:8F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57M-njyTL3pULrAhBWzpSx6Ljws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a5a175-8092-4c63-b038-2c4406b48941/1/57M-njyTL3pULrAhBWzpSx6Ljws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b0:eb:06:35:cf:88:6e:14:bb:3d:01:c3:20:a5:22:74:34:
f7:ab:d3:37:7b:ad:10:d7:9c:b9:0f:84:0e:06:c0:42:cf:f4:
6e:53:ec:3f:d6:ab:ae:5e:df:61:1b:ba:3e:37:47:48:c4:0c:
1a:aa:fe:e8:56:92:52:29:98:72:5e:ab:a6:f2:41:07:f3:6e:
90:f4:78:ae:34:15:95:0c:30:d2:07:9a:17:8a:42:b7:d3:5f:
93:33:83:86:b6:18:81:d4:db:47:e1:87:f0:ec:48:16:74:0e:
52:ee:63:bf:b4:59:28:14:92:7a:dd:88:8a:24:17:52:82:cb:
c4:27:ce:5b:dc:4c:26:7b:f9:18:23:44:7a:21:fc:6a:40:97:
d2:20:e4:c8:0c:20:61:f0:a9:26:f9:fb:de:9c:46:c9:b4:6d:
5d:92:a1:1a:3c:57:0e:84:86:e2:75:37:f9:2a:a8:12:24:74:
f0:af:5e:40:ce:4c:d7:8c:83:42:ca:86:07:2f:06:48:78:29:
6f:6d:53:e1:d2:f6:fe:3e:f6:7b:80:8a:bb:ab:b0:98:1e:27:
f9:79:47:92:53:89:f9:00:0e:6b:f1:0e:d6:2a:8d:23:80:6a:
54:a6:e3:ac:63:17:d8:9e:b0:c3:28:ca:c8:92:74:78:5b:26:
58:58:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:17:18 2025 by rpki-client