Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
File: 08DVsQa4GpKSTqK8UTn7te4Rht0.mft (raw, json)
Hash identifier: HAFnknCx89R8xoKHf3Bc6+wcB4l7gc0wSwBp5YFadkU=
Subject key identifier: 67:A4:F6:D1:04:38:1D:75:78:08:05:A8:54:EE:27:CE:9F:62:46:87
Authority key identifier: D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
Certificate issuer: /CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Certificate serial: 0197488D4805D72C34F33C6333CED8B91507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 04:01:47 +0000
Manifest this update: Sat 07 Jun 2025 04:01:47 +0000
Manifest next update: Sun 08 Jun 2025 04:01:47 +0000
Files and hashes: 1: 08DVsQa4GpKSTqK8UTn7te4Rht0.crl (hash: CnTk8lCOEXaPHSmmkwwIzsE1qMu5JVYCQC3yeGrgcyQ=)
2: vhpsA1QTyqlbOgTgwwiSOvjLosU.roa (hash: oOzCVm5vsYLrY+U1GpoNLtBM7Fbrqb31l0clRbwWzyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:48:05:d7:2c:34:f3:3c:63:33:ce:d8:b9:15:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c0d5b106b81a92924ea2bc5139fbb5ee1186dd
Validity
Not Before: Jun 7 04:01:47 2025 GMT
Not After : Jun 8 04:01:47 2025 GMT
Subject: CN=67a4f6d104381d75780805a854ee27ce9f624687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:31:e0:81:01:f6:2d:55:e3:91:17:22:f6:ee:
8b:47:75:1e:9e:6a:4e:27:96:97:32:35:3b:ef:70:
ea:a5:12:2a:1d:1f:bc:15:a1:50:ec:6a:78:b9:e2:
85:79:9f:7c:c5:b9:c4:91:24:86:c0:9f:9f:60:9a:
f4:e7:87:6c:0c:0d:05:f3:e8:bd:94:f1:42:a9:80:
b0:f5:0d:0d:8f:77:39:ad:98:56:c7:9b:9a:1b:0d:
8d:b5:bc:45:d9:cc:72:f6:ad:2e:e1:2d:c4:88:40:
84:03:f9:1b:a0:0a:53:80:58:20:b2:9c:01:f4:5a:
cc:37:d8:ef:3b:d8:ac:a6:96:82:e5:0c:37:b5:d2:
cc:d8:9e:75:b3:4c:2f:cb:fa:52:53:a0:96:b2:93:
84:dd:01:2a:3a:00:46:1e:74:5f:3b:81:e0:fd:8d:
93:8f:8e:77:00:e0:09:68:a3:5f:54:89:b2:a3:32:
62:e2:6e:93:dd:c1:5a:3a:99:b6:7d:fc:80:5f:4c:
ae:5b:17:b1:83:ee:e6:68:50:88:41:8c:ea:f0:93:
00:3a:ec:1a:b0:8c:e4:36:60:a4:e6:94:0b:47:ea:
6d:9a:4b:b8:71:dd:a1:25:c8:0f:52:f9:da:1e:04:
bb:93:47:0a:8e:66:9d:eb:cd:ae:4e:0b:73:2d:13:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A4:F6:D1:04:38:1D:75:78:08:05:A8:54:EE:27:CE:9F:62:46:87
X509v3 Authority Key Identifier:
keyid:D3:C0:D5:B1:06:B8:1A:92:92:4E:A2:BC:51:39:FB:B5:EE:11:86:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08DVsQa4GpKSTqK8UTn7te4Rht0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/19f4d4-5c1e-421f-9f56-bc5104a385e2/1/08DVsQa4GpKSTqK8UTn7te4Rht0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0e:f8:ba:31:d4:53:53:9a:46:8d:24:1b:e0:ff:9b:c5:87:
d1:34:2b:25:62:1b:58:48:e3:a6:d1:5a:89:a7:2e:f2:c0:b3:
74:07:e9:e4:90:14:44:fe:c9:4a:49:b7:87:c0:c4:c1:d7:a6:
25:a4:56:de:3a:fb:5c:e9:a9:be:ad:70:27:b1:f2:62:24:be:
8f:09:7d:82:15:5e:08:84:a6:d0:83:2d:8a:b3:e8:e7:6e:1a:
7e:36:9f:6b:3b:13:f1:55:ed:ba:2b:5e:a1:40:47:4e:85:01:
64:82:9f:0d:48:e3:54:0c:14:33:98:2e:e9:2b:2d:3d:7a:9d:
f6:8b:3b:1a:cd:9f:3b:ee:a8:83:9e:d0:40:19:7c:f7:02:e3:
e1:4b:7a:6b:5e:da:a5:13:c8:93:39:03:dc:ba:cc:a6:dc:93:
93:22:45:fb:11:57:8c:3c:4c:67:17:2a:3e:70:75:29:a1:cf:
e4:d1:57:42:b4:e0:7a:3e:14:06:42:d1:1d:58:69:71:95:85:
a3:07:cc:12:94:7a:55:d6:55:30:c8:69:f7:bd:7b:51:27:53:
8a:c2:2d:a7:71:eb:33:e5:c8:d0:de:9f:0b:cb:23:c3:ea:49:
86:40:5b:16:5b:34:f2:79:a8:80:58:69:cd:f3:f2:6f:09:31:
13:45:10:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:55 2025 by rpki-client