Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
File: v2SXmq7U54jkUQ7fi2lr2WysdzI.mft (raw, json)
Hash identifier: KmJ+XAyIbf1/qCpTDiW5GC4ylwwBs+5kpbimw2peVSE=
Subject key identifier: 0E:E7:F9:E4:0B:DF:AF:1F:56:2F:FA:29:6B:5B:E6:F2:B5:4F:09:17
Authority key identifier: BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
Certificate issuer: /CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Certificate serial: 019748C36C49526E327432D911C25FDF25E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 05:00:56 +0000
Manifest this update: Sat 07 Jun 2025 05:00:56 +0000
Manifest next update: Sun 08 Jun 2025 05:00:56 +0000
Files and hashes: 1: 5Gr2PKrQucQP8LHQL3W9WQyLZws.roa (hash: kX33qTBwgcLJcP02UZ6CIBiA/b6h+JlM7lkLX4HUf9k=)
2: v2SXmq7U54jkUQ7fi2lr2WysdzI.crl (hash: kSEiHZJffI7olHgd2vctsDlpmX9bsT8iWxR+4b1xeQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:6c:49:52:6e:32:74:32:d9:11:c2:5f:df:25:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf64979aaed4e788e4510edf8b696bd96cac7732
Validity
Not Before: Jun 7 05:00:56 2025 GMT
Not After : Jun 8 05:00:56 2025 GMT
Subject: CN=0ee7f9e40bdfaf1f562ffa296b5be6f2b54f0917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:65:36:49:cf:f1:5f:01:3b:72:6a:a1:f9:
a6:06:4a:50:18:95:20:8b:64:b3:c9:5a:cc:81:93:
ab:61:0c:5f:de:cc:b5:af:97:d9:55:5d:7e:5f:85:
aa:94:3a:3c:47:d4:66:ce:00:a1:ad:87:b8:d6:fd:
66:fd:ca:86:9b:f7:4e:e7:5f:c5:92:7c:1e:e9:4c:
36:49:2d:39:2d:83:01:25:0f:88:05:66:54:cf:f6:
cb:53:fd:1c:e5:af:78:93:75:7d:1b:b3:9b:ac:17:
5a:50:9f:b4:2f:3a:f6:e0:71:7c:c5:2b:43:d7:3f:
14:ab:93:b0:e9:92:d5:30:f5:74:43:6b:c8:01:fe:
aa:00:ea:f5:0b:e5:0c:4a:93:94:67:24:4c:ba:9b:
10:39:7e:04:01:bf:26:1d:34:af:ef:d6:c2:5e:79:
74:f1:3b:80:9b:ca:67:f0:78:d5:e4:2a:bb:e7:97:
dc:94:06:46:fa:0f:8a:93:e1:11:49:6c:a6:59:4d:
87:1b:e4:10:ce:44:25:f7:89:9e:2f:f1:c7:d1:2f:
ca:5c:4d:7f:f1:c0:97:35:d1:b7:5f:24:af:28:25:
d7:bd:2e:32:5e:e8:4c:8d:87:25:af:36:38:a7:89:
4e:5b:9e:89:95:7f:9d:1f:68:28:76:f7:e9:1f:c4:
97:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E7:F9:E4:0B:DF:AF:1F:56:2F:FA:29:6B:5B:E6:F2:B5:4F:09:17
X509v3 Authority Key Identifier:
keyid:BF:64:97:9A:AE:D4:E7:88:E4:51:0E:DF:8B:69:6B:D9:6C:AC:77:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2SXmq7U54jkUQ7fi2lr2WysdzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f7892-7f7d-49db-a912-133f85994b1b/1/v2SXmq7U54jkUQ7fi2lr2WysdzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:83:b3:b6:f0:ae:3f:8a:94:60:ea:61:b3:31:57:e6:91:f3:
af:4f:22:2c:7c:68:50:8b:e7:ac:56:66:31:a8:fb:5d:22:f0:
b7:20:bc:bb:27:25:7e:7c:45:fa:a8:5e:a2:f5:08:71:03:7a:
10:ee:a4:dc:de:59:8d:73:73:c5:80:21:26:5b:af:59:35:3a:
ee:92:75:b3:22:17:10:0a:29:9b:d9:a0:66:a7:6c:4b:65:3a:
cf:fa:7f:80:66:d5:72:bb:08:97:cf:b4:7e:d1:54:ff:e2:36:
ff:8a:57:df:4e:cf:0e:6e:35:26:33:d8:ad:37:f0:2f:b5:47:
c1:cd:55:be:33:b3:38:83:d4:46:10:e0:92:bf:3d:48:1f:31:
b7:df:43:5c:93:cc:ae:c9:ab:c6:a0:44:53:84:b0:6b:e7:c3:
07:fc:5c:ab:15:0a:52:ab:85:38:1c:99:51:93:16:00:5a:c3:
2e:a3:f1:f9:34:a5:d1:c2:47:ba:09:49:0a:5f:7f:26:69:eb:
7b:8f:c2:47:51:03:b1:63:92:c9:82:a7:bb:b4:28:6e:32:98:
70:25:2a:1c:8e:14:7e:14:ee:e9:1b:07:b0:64:29:90:a1:cb:
4f:ba:ce:b9:65:c3:70:8e:68:16:a1:58:6f:71:25:80:d1:54:
d9:4b:ed:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:11:25 2025 by rpki-client