Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: d5Huz3uHHuDD4J3vdGdq9VxQp9QCkWY3Ap/KvNXHIJ0=
Subject key identifier: 74:C0:B2:5A:6F:D0:6E:75:62:CC:A0:B9:43:60:BE:01:E9:64:7C:94
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 019745C284DF1A8B692025845F73FE5F882D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 15:01:05 +0000
Manifest this update: Fri 06 Jun 2025 15:01:05 +0000
Manifest next update: Sat 07 Jun 2025 15:01:05 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: +eddZpAuFATJLQdnes2hLv4wYiE1IhREYGGRBFgh7sI=)
2: xXvr5N3cdjjVXwcVtqed053TqTM.roa (hash: RPXbgfGCQVhnjZtFi6ez4KE4+8jSRCf133mSXRnDHCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:84:df:1a:8b:69:20:25:84:5f:73:fe:5f:88:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Jun 6 15:01:05 2025 GMT
Not After : Jun 7 15:01:05 2025 GMT
Subject: CN=74c0b25a6fd06e7562cca0b94360be01e9647c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:5a:35:08:5a:64:12:92:42:61:e1:c5:39:
8a:89:8b:d2:54:05:f5:52:12:bb:52:df:d3:7f:55:
7d:64:c0:d4:ff:7f:ee:ac:ec:cb:02:f1:93:f7:6a:
51:7c:2d:67:21:cd:cf:77:b2:97:cc:a4:93:02:1d:
a5:e9:5d:60:a6:af:20:43:5f:89:83:f2:43:7e:58:
1b:76:ab:a2:4a:46:6c:70:79:54:6b:5e:5a:95:4b:
57:60:04:ed:b1:ea:fd:a9:af:e9:68:f5:02:61:cc:
54:42:d7:28:22:fa:73:6e:5c:d1:c0:70:f0:d5:39:
ae:18:49:40:51:e0:be:9f:9a:00:64:21:4b:69:f6:
af:13:d6:47:bf:aa:f5:ad:e7:b7:cb:c9:98:f1:58:
56:77:59:0b:72:c7:15:fe:f0:14:68:c1:94:ac:8c:
cb:bf:f2:f4:bc:1b:2c:7a:17:7c:4b:26:16:15:f5:
d8:0f:3b:8c:01:46:8b:a7:cc:2a:2f:14:94:38:8b:
d0:63:77:4e:d0:47:31:20:5e:60:52:a8:5a:43:44:
85:28:ad:02:67:1f:83:8e:65:49:1a:89:dd:81:5d:
27:70:8c:4e:93:7c:46:db:f4:33:04:70:91:cb:2c:
93:36:bc:51:d4:18:4e:3c:1b:56:d4:03:6e:b5:e6:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C0:B2:5A:6F:D0:6E:75:62:CC:A0:B9:43:60:BE:01:E9:64:7C:94
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:da:60:dc:66:6e:03:6f:3e:cf:cc:fd:3b:cb:13:91:b4:c7:
15:c4:e9:56:f4:00:06:b2:f1:86:4d:1f:bf:74:6d:0d:7f:79:
dd:fa:25:85:7b:9a:98:6f:13:de:02:5a:61:af:35:7c:7d:1d:
da:52:87:08:29:da:4c:4a:9f:04:12:c8:43:72:48:49:7c:02:
b2:07:ba:c0:a5:bd:c4:db:c1:41:6d:9e:cf:36:ba:27:a1:f4:
d0:4e:70:d8:83:d3:ab:d0:a7:3a:b0:cc:83:1f:24:5e:9e:ef:
56:1d:df:c3:3c:63:7e:94:a3:97:ce:28:06:e8:53:2e:1d:15:
65:aa:7a:d3:fe:97:30:d6:92:e5:48:47:06:6f:55:03:77:7d:
45:7b:34:b4:cd:ab:f1:80:f6:4a:f6:a4:85:aa:41:57:4b:2e:
88:72:38:db:a7:92:db:14:e2:c2:cd:bf:be:58:4f:68:56:91:
33:b1:6b:b2:97:62:85:42:01:d3:d3:97:30:32:30:95:ea:b0:
5a:3e:28:6b:20:ba:d2:64:3e:3c:ec:63:2f:eb:c2:3d:bc:8a:
69:65:64:7f:ee:69:86:6a:e3:cd:c5:07:5c:14:21:27:fc:99:
e7:ff:b1:ac:69:9b:31:e1:79:04:0f:68:d0:c8:02:3b:13:b9:
6d:57:fe:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:02 2025 by rpki-client