Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: JbotZruq+O+bJsXXbHytvkF9x+n7S/ZSE2iYWTjT1P4=
Subject key identifier: 33:6B:50:C3:63:16:BA:CE:8D:D6:0C:44:B8:37:62:FD:AF:F6:9E:2C
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 019749D5CD69C0B45C077C16DA78B9C44E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 10:00:37 +0000
Manifest this update: Sat 07 Jun 2025 10:00:37 +0000
Manifest next update: Sun 08 Jun 2025 10:00:37 +0000
Files and hashes: 1: 5O-Lg4XDVCjsXNfMtLLsnISMRVo.roa (hash: VmXDM+lE33fYX4GAlA3VUKdsqtXyObkMk9hssfXkX7Q=)
2: CY-tvdBWBt7wOg3GB0icUZ8MPCA.roa (hash: Ejbz7aRM11I5vJNNpK3p8qUEl2ngpQB+ME89yYTVcX4=)
3: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: ETZGUG2xSLKrWZR8ajo6xcjurVgep7fZP41wphVgTWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:cd:69:c0:b4:5c:07:7c:16:da:78:b9:c4:4e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Jun 7 10:00:37 2025 GMT
Not After : Jun 8 10:00:37 2025 GMT
Subject: CN=336b50c36316bace8dd60c44b83762fdaff69e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:42:5e:d6:0e:72:75:b1:46:00:b4:75:25:59:
c4:0c:d6:86:a1:c2:92:f8:62:38:ad:4b:06:38:f3:
f1:1e:26:1b:11:66:b0:4f:35:72:c7:40:cc:8f:8d:
b8:1a:da:60:a5:a7:72:9c:ef:2f:c5:b7:d3:2e:2f:
2b:86:31:69:4f:ea:9e:45:80:1e:82:8a:e3:f8:89:
b2:33:a1:29:fa:c0:2a:af:7d:95:7d:8a:7d:1c:97:
cf:d7:13:60:40:0a:17:07:d3:9e:5b:eb:c1:76:39:
0a:ce:3d:34:b0:5c:ab:b9:39:25:2d:e5:d6:56:b1:
2d:0c:46:fe:c7:7e:d2:ba:31:5e:2c:d2:ff:a7:2b:
68:3c:63:84:5d:2d:f6:af:2b:d3:64:98:2a:e5:4e:
61:14:f5:e5:fa:03:c5:2d:e4:7e:f2:23:31:f6:7a:
1b:03:43:b9:9b:47:7b:e7:6b:65:ea:50:36:12:61:
67:2e:70:71:ac:b0:71:1a:a7:b7:df:0f:0f:07:36:
4e:90:3c:5a:a7:7d:56:0c:99:b0:b6:b1:13:fe:8f:
4e:a3:79:b1:1e:e7:3f:30:19:7a:77:be:93:f8:a2:
5a:34:02:5a:5d:74:b8:da:c2:4f:5c:e7:bb:70:a3:
98:18:1a:a1:1e:5e:df:8e:f1:3a:3a:0c:bf:b0:2e:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6B:50:C3:63:16:BA:CE:8D:D6:0C:44:B8:37:62:FD:AF:F6:9E:2C
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7f:63:c0:06:d2:90:43:95:2c:a4:97:08:50:f9:1f:eb:7d:
63:8b:4b:62:59:a8:c5:d0:c8:ed:26:05:cf:9c:0b:d5:96:3c:
00:f0:da:be:76:fb:df:59:5c:34:35:25:24:d5:7d:8b:2c:ad:
a0:ff:df:41:94:10:f4:8a:7e:7a:b5:ea:0f:de:d1:20:eb:18:
df:64:e9:29:c5:57:1b:8c:f9:3b:46:ad:19:4b:30:03:91:f1:
90:ee:06:f4:e2:b7:d2:dc:2d:a0:d5:fb:a3:ae:a3:0b:18:d3:
27:f7:6d:5f:bf:8f:88:ac:43:53:90:76:d3:18:bc:f9:e1:cf:
ca:35:41:54:f5:6f:31:f1:93:2d:08:3e:35:cc:c4:e4:8a:25:
89:4d:01:ad:4f:f8:d5:17:cc:21:d5:31:0c:b7:82:82:b9:ec:
6e:93:d7:a0:d2:5b:bb:13:ae:30:9c:c8:8f:4f:f5:b5:92:2b:
ee:e6:96:46:7d:14:c4:77:59:dc:65:7f:40:dd:b0:17:93:de:
87:95:4e:25:4c:eb:09:20:49:5a:4d:74:5e:7a:8a:8e:83:3e:
64:be:01:3a:0b:fb:d5:4d:53:d1:38:01:f8:67:90:22:0c:e9:
cc:4f:82:28:99:d6:76:e8:d9:7e:19:f4:fd:54:4d:10:2e:04:
33:b1:b2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:43:25 2025 by rpki-client