Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
File: SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft (raw, json)
Hash identifier: x1/B+uXxfQ1g2BRr0/Zt4r2Ukv1A0lR3RJXh22ResYg=
Subject key identifier: 8A:64:EC:94:7A:7E:2E:09:DB:D7:40:EA:09:E9:46:C5:32:55:05:EB
Authority key identifier: 4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
Certificate issuer: /CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Certificate serial: 01974BC414ACDBA7790001EA44E5A2DBEE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 19:00:30 +0000
Manifest this update: Sat 07 Jun 2025 19:00:30 +0000
Manifest next update: Sun 08 Jun 2025 19:00:30 +0000
Files and hashes: 1: KUfFcY4n_r75t21wBTn8NHwpPWo.roa (hash: Vj4b0HHRAbzzjfGSfe71X4pK6wA9f27I+UmGi3mJNYI=)
2: SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl (hash: c/BwILg8DAxJMXl3CG7HIkNJk0DFjjd5fmgA1U1QUa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:14:ac:db:a7:79:00:01:ea:44:e5:a2:db:ee:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2027dbb89427a8e031b90962e26e44affa5a95
Validity
Not Before: Jun 7 19:00:30 2025 GMT
Not After : Jun 8 19:00:30 2025 GMT
Subject: CN=8a64ec947a7e2e09dbd740ea09e946c5325505eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:84:91:64:b1:f3:45:0d:0d:fd:60:c0:44:
06:cb:00:2d:77:e8:62:6f:f4:26:03:d4:05:f3:fd:
a4:6e:82:37:d3:77:38:b5:76:b1:4a:56:0f:91:13:
c4:3e:6a:d1:cf:ef:a4:a0:e9:65:af:3d:dc:83:50:
b8:78:f1:5f:55:63:89:9e:bf:27:be:f7:91:a5:28:
5a:08:b7:71:82:75:bf:ae:cf:3f:8c:a9:53:3f:44:
6a:87:0a:64:57:be:a4:ab:3d:4b:10:fe:62:46:06:
37:2f:7d:86:25:43:30:a6:a8:eb:fa:90:ae:5a:6d:
e3:3d:22:b5:17:2a:4a:a3:40:14:f4:35:be:b2:4d:
6a:c7:71:cc:d8:00:e7:c0:35:64:84:26:be:1b:d3:
58:b0:e1:f1:a9:24:94:ea:62:8b:2b:2e:39:c0:6e:
e7:05:40:f9:7b:a1:59:5e:10:a0:9e:1f:8a:56:ba:
0d:b4:cc:6f:95:60:43:31:cb:2d:28:19:75:ba:d0:
ff:e9:61:b9:1c:21:b7:8d:78:1b:9b:ad:be:6c:75:
60:84:33:2b:3e:c0:c1:83:f6:ea:28:3d:55:38:dd:
a9:10:01:eb:3b:27:d6:83:d2:54:a2:45:45:b2:99:
15:75:b2:37:77:86:b1:96:ba:2a:75:ee:04:ad:e1:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:64:EC:94:7A:7E:2E:09:DB:D7:40:EA:09:E9:46:C5:32:55:05:EB
X509v3 Authority Key Identifier:
keyid:4A:20:27:DB:B8:94:27:A8:E0:31:B9:09:62:E2:6E:44:AF:FA:5A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiAn27iUJ6jgMbkJYuJuRK_6WpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/4711a1-4d25-47e6-acf7-b0712ab0b077/1/SiAn27iUJ6jgMbkJYuJuRK_6WpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f3:f7:a3:16:2f:2b:54:9c:58:a4:d8:a3:c5:3d:f2:b0:0c:
f0:17:c1:e7:54:2e:42:09:4d:ea:c2:24:11:f5:4e:ad:4d:24:
93:19:c4:1a:b1:cc:ba:a0:5b:af:c4:e4:b8:86:5c:7e:a4:05:
ff:df:da:82:bc:cf:c3:61:21:af:3a:60:1e:90:0a:86:95:53:
d9:10:33:b2:af:d9:fd:a0:28:76:49:65:c4:82:ab:46:f6:4d:
f6:6b:0b:2b:e8:80:58:3d:16:c6:ef:ea:0c:e4:33:4e:2d:b7:
1c:b4:b8:ab:7d:03:b6:bb:09:dd:30:81:58:0a:74:88:e4:55:
ee:6f:e0:87:4d:3e:e2:3f:a9:ab:c9:f2:19:15:25:64:a6:86:
9a:71:e1:f6:6d:86:55:b5:52:60:04:54:44:23:bc:33:ba:07:
ab:1e:bf:3c:20:09:37:64:79:45:e7:51:f7:7d:b2:05:98:d5:
32:4b:27:23:34:00:58:1f:15:09:8c:ae:17:72:2c:f4:70:b1:
aa:20:5b:e5:de:02:f7:64:94:13:73:94:1b:07:61:dc:a2:b4:
7c:61:d9:2c:7c:3a:d6:2b:8c:33:d4:69:89:72:ce:58:5c:fd:
e5:62:0d:5b:22:25:3c:06:e1:82:f7:ce:6c:a6:d7:df:df:a4:
d1:1b:da:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:40:24 2025 by rpki-client