Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: neVvZ3ObMK0xpP1RCOzT6lVrmof3wpB0hfYQNwxolcQ=
Subject key identifier: 23:D3:6E:35:57:E4:57:E3:2E:1E:C6:41:4C:CB:64:71:F9:B8:7C:DB
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 019748F9E5477AD9FED195587DB5921EDCF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:00:26 +0000
Manifest this update: Sat 07 Jun 2025 06:00:26 +0000
Manifest next update: Sun 08 Jun 2025 06:00:26 +0000
Files and hashes: 1: 0LP5ahEEWvnMaK30aMTVzU6uXkA.roa (hash: lB/VdYravFr8twO2oC/vGE6G8jo6civSr7gweO3k+0U=)
2: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: sX9ws0+DYKo5/fX6N9g8tUB+/DYATr9gFzbDD65V0b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:e5:47:7a:d9:fe:d1:95:58:7d:b5:92:1e:dc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Jun 7 06:00:26 2025 GMT
Not After : Jun 8 06:00:26 2025 GMT
Subject: CN=23d36e3557e457e32e1ec6414ccb6471f9b87cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:38:d4:de:84:a2:94:a3:71:d5:25:18:05:d1:
8e:06:d0:54:17:70:c0:e1:42:59:a1:51:96:10:13:
65:18:ba:c7:a0:26:2c:8f:8c:00:41:9f:fa:07:94:
2f:27:ef:d3:a0:c8:67:0d:a0:a2:e8:7b:a2:06:98:
90:e4:2a:ad:9d:6b:95:18:8f:42:da:37:01:59:fe:
c3:ac:ae:90:b1:15:45:0c:18:81:a8:e6:6a:5e:97:
ee:41:97:ce:d6:69:63:f9:32:7e:aa:11:e3:72:be:
39:76:63:fe:92:f5:c7:f0:ea:75:23:aa:61:72:02:
f7:2e:ab:bc:05:8f:b4:a0:4f:76:7d:cb:65:cf:10:
2e:3d:4f:dd:aa:eb:5c:68:98:a1:a7:ec:66:5f:6d:
f4:c2:96:24:25:58:9c:32:aa:05:78:51:0a:4a:f1:
bf:51:87:12:33:0c:ea:30:81:88:1c:20:92:ce:cf:
9e:61:67:ba:ee:01:7e:34:1f:01:a5:1c:bf:cd:8d:
fd:35:84:d0:77:a1:c3:d4:97:92:a2:80:13:c2:af:
8f:f1:cd:f6:89:66:e5:8b:80:41:40:47:a1:88:03:
54:ae:d7:3d:52:02:f2:4a:86:95:ca:a8:de:79:70:
6b:8b:70:c1:f6:c3:8a:3b:67:6f:76:f2:b4:9b:99:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D3:6E:35:57:E4:57:E3:2E:1E:C6:41:4C:CB:64:71:F9:B8:7C:DB
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f4:38:80:e7:d7:56:b7:2a:33:48:d7:47:64:3c:9b:3a:b0:
8e:96:dd:31:1f:b2:71:6a:08:90:e8:5c:d5:11:91:a3:d7:c5:
82:d9:fd:b3:57:56:b2:9f:03:71:8b:4a:1a:cc:72:78:39:94:
85:cf:b3:a1:6f:6b:df:f4:b5:ed:29:55:a8:d5:cf:e2:5b:1b:
4f:72:cf:89:0e:ac:9f:a0:a1:be:c7:4b:de:6b:97:37:c9:53:
3e:ca:2b:3f:b0:eb:c6:1d:64:f1:a4:28:46:d8:8e:3f:a2:6a:
e8:ad:75:cb:1c:54:ff:a7:45:2d:54:91:d7:3b:8c:12:72:bf:
9f:ca:39:e8:ed:e5:bb:4f:a4:9f:6a:cf:98:0f:64:af:68:74:
a6:28:3f:2a:d4:4d:3b:0c:78:ac:eb:b9:11:b9:c1:bd:12:35:
d6:81:cc:73:59:77:55:2e:2e:e5:8c:49:ac:1c:25:1f:90:da:
e7:28:48:74:77:00:c9:6d:8b:10:c3:7d:3a:82:55:1a:86:49:
8c:cd:c5:8c:e6:5a:6f:9e:49:25:35:93:a6:fd:7e:f5:43:66:
21:e1:62:61:44:59:ff:2c:11:1a:35:1e:c2:a3:f4:98:7a:f4:
93:43:ff:f2:0a:fe:16:22:75:41:f8:e3:18:97:86:bc:6c:34:
06:db:37:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:00:16 2025 by rpki-client