Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: fbGGokVqNZBHoEqEN8zGHEzX/4xLiaDq6CB7zkVk2Sk=
Subject key identifier: 7F:87:5A:30:6E:2C:92:23:1A:D0:96:27:F2:42:5D:2A:B1:5E:08:98
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 01974D0DF2FF0A052D5E14EFAA901C338DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 01:00:49 +0000
Manifest this update: Sun 08 Jun 2025 01:00:49 +0000
Manifest next update: Mon 09 Jun 2025 01:00:49 +0000
Files and hashes: 1: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: zV/4iYj9kjc+BWZFyYAix7f6Anafa5db8hrQwWvUnpo=)
2: yPrWz37IXjB7ODdHPO3TzqpY_oY.roa (hash: 34zVN/3obTpRgYhbmY7ABdm+4sQRJRCWRUdOZLf3tEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:f2:ff:0a:05:2d:5e:14:ef:aa:90:1c:33:8d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Jun 8 01:00:49 2025 GMT
Not After : Jun 9 01:00:49 2025 GMT
Subject: CN=7f875a306e2c92231ad09627f2425d2ab15e0898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:2e:be:bb:08:d2:2d:03:7a:9a:5a:53:d6:
ad:bd:5a:91:40:d8:94:49:ea:12:dd:8a:be:f4:c5:
d5:56:3c:c0:f4:4b:de:bd:fb:be:37:f3:af:d7:9e:
b6:ac:91:cc:6f:28:88:02:20:c7:d2:76:6b:41:62:
0a:3b:9f:11:3d:73:0d:32:f1:c3:13:13:63:94:33:
4d:93:c2:31:a8:4c:cb:dd:44:d3:10:3c:4f:a0:96:
21:a0:cd:0b:28:bd:87:9b:3c:8e:33:29:0e:52:ad:
fa:c3:1a:ac:c5:e4:9c:29:0c:db:49:8c:50:ba:67:
07:23:02:39:43:b1:de:32:b6:ef:e0:87:e7:08:c3:
68:c9:d4:ef:23:c8:51:4c:d2:7e:bc:4a:68:1a:17:
79:78:a8:6c:ac:4a:e3:e6:c2:9c:01:a7:d6:d0:a8:
8e:26:f9:c6:0a:d4:d7:cd:be:39:69:a9:c5:cf:c6:
91:b5:18:40:96:08:64:1c:9e:c7:4c:25:91:ad:b6:
ce:ca:fb:21:96:33:a1:4d:4e:57:a0:e7:29:32:bf:
5c:f8:f3:2b:cc:23:f5:3e:70:c5:0f:c0:67:ea:ee:
0d:d5:0e:a6:10:81:6e:ec:c3:96:2a:a2:bf:01:ab:
a6:79:c7:9d:91:85:df:3b:1a:e5:dc:21:6e:82:30:
e1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:87:5A:30:6E:2C:92:23:1A:D0:96:27:F2:42:5D:2A:B1:5E:08:98
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:27:69:3d:74:01:90:6b:9f:20:f4:96:11:e5:c8:7c:bc:8b:
80:bd:c0:f1:c9:23:04:81:2c:b1:de:12:e8:cc:d0:bb:07:29:
53:44:ca:10:47:b0:6b:90:39:af:b0:03:e4:94:70:e9:97:7b:
32:82:fe:28:f9:12:8e:04:41:8f:bd:0b:7a:d4:dc:7a:23:9f:
06:80:d0:92:9d:59:0a:72:be:45:15:ee:ae:13:cf:29:17:df:
2f:8b:50:ab:bf:49:57:2e:bc:11:5f:c7:ca:44:bb:32:40:bb:
6c:4f:13:a5:0b:9b:cf:ad:54:d0:4f:5e:a6:d2:bf:2e:96:a7:
c1:df:c9:79:df:22:6a:b8:15:7e:ad:2b:65:d6:99:37:99:e8:
48:f4:da:38:2b:ab:30:c3:01:67:09:6e:0f:53:bd:85:34:1d:
a2:2b:b3:bc:8b:8f:5c:96:72:7b:2a:63:f8:89:36:4f:93:0f:
1c:b9:b7:9b:9d:7d:b8:93:23:1a:ce:80:60:2a:cd:73:67:8f:
a7:b0:a8:77:d2:5f:98:1d:ff:a3:fd:5b:21:25:e7:a9:99:e7:
e3:1d:6a:37:eb:d6:0c:c5:60:c4:d3:b8:a7:68:d0:c6:ae:a7:
62:37:22:ba:a6:a4:3a:15:8b:37:71:71:ca:49:ea:12:0e:c6:
dd:bb:c0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:13:29 2025 by rpki-client