Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: fmsvcnt+dHqYA8MgPCLvUUuDtZBqqDl0u4y6wLSkeIg=
Subject key identifier: E0:89:5C:75:B3:76:61:99:13:98:85:C1:26:3D:0A:53:32:B0:15:5D
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 0197488D2410F7BDE7DE7EFC8508E556F897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 04:01:38 +0000
Manifest this update: Sat 07 Jun 2025 04:01:38 +0000
Manifest next update: Sun 08 Jun 2025 04:01:38 +0000
Files and hashes: 1: 58PUT6ysZxKBONG9sTIOc1qL5Ls.roa (hash: n7460GeFmYRqG1aJJrfKZDL2a6FFJmjROlobClHOM2Y=)
2: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (hash: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=)
3: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: j/zKmIGJuHJEJB1oDBEDmzyr5g0z/QSOfzqiQb/Tg5Y=)
4: L5CVIsoItTTVw443IuKRnX_6ofc.roa (hash: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:24:10:f7:bd:e7:de:7e:fc:85:08:e5:56:f8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Jun 7 04:01:38 2025 GMT
Not After : Jun 8 04:01:38 2025 GMT
Subject: CN=e0895c75b3766199139885c1263d0a5332b0155d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:8c:fd:83:99:e1:7c:e0:4a:47:13:4e:f4:
e0:9c:b3:42:c2:22:ca:a6:61:a5:f1:f2:35:b7:26:
83:29:ad:40:43:27:55:02:3d:b5:f4:52:39:fa:d9:
3e:9e:a6:f0:96:c3:41:5d:1e:e4:b4:38:bc:de:f6:
2a:02:ea:01:9d:75:cb:c9:78:10:55:13:c9:90:63:
94:69:40:dd:a0:c6:02:9c:45:9e:48:1c:3c:08:b0:
0f:05:a4:f3:21:48:0d:36:2d:db:58:f2:d5:4b:4c:
fb:65:13:b9:1e:fb:8e:14:4a:53:84:cd:33:a9:73:
74:27:95:c9:52:13:a5:04:0f:a2:cb:30:65:17:76:
ec:38:91:16:ea:7c:9d:b4:75:f5:be:43:9d:99:ef:
c0:5a:f8:d2:4c:42:8d:48:6d:5c:de:c7:21:fa:dd:
c5:35:c5:c5:2c:11:3f:6f:e7:3b:0e:8a:db:90:c8:
dd:15:8d:b1:e6:fe:76:86:66:0c:7c:66:11:02:68:
a2:e5:4d:33:c6:fd:67:15:96:e2:ba:0e:e3:df:9d:
e3:ea:63:b5:11:a6:f9:0e:56:62:67:0f:19:e8:22:
8b:1f:5a:e9:e4:b9:ed:e9:0d:07:13:36:4c:29:a3:
28:71:b7:7e:69:a6:59:cf:0c:21:a1:1a:33:22:0a:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:89:5C:75:B3:76:61:99:13:98:85:C1:26:3D:0A:53:32:B0:15:5D
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fe:16:ed:15:7c:0c:21:5e:ff:1c:93:2a:9f:88:c2:3a:02:
ad:2f:26:0d:4a:a4:cd:0e:c1:43:da:7e:09:ae:19:a7:3c:d7:
5e:45:ee:54:2f:7d:bd:06:66:e0:30:62:41:fe:64:6b:2d:26:
a5:d7:93:c4:2f:f8:78:29:93:f2:2c:42:b1:d6:93:70:52:ff:
2e:cb:1f:18:a4:d9:72:70:00:b9:00:2d:c8:80:f2:d6:0e:e2:
27:45:4b:5b:76:fd:f8:a5:c6:cd:a7:39:82:fd:d1:98:68:95:
09:66:65:1a:45:e4:ce:55:40:36:e6:53:55:d5:91:e6:d4:fb:
5b:ee:f7:23:e0:40:d6:1e:e8:6e:22:e7:cc:c9:b1:df:07:b3:
2a:cd:69:81:b0:93:e4:bc:5f:cf:0d:dd:75:08:fc:f9:4f:84:
ba:00:0b:a8:fa:ac:18:79:9d:6c:04:72:d3:5e:ad:29:8a:0e:
d6:37:8a:da:77:e1:37:52:e6:0a:83:47:3d:f2:cf:81:e0:46:
7a:4b:e2:3e:03:78:7b:5b:ae:e9:dd:b3:e8:39:0c:32:1a:6a:
66:e5:af:14:62:39:61:d5:06:c5:fe:08:fb:42:c9:88:47:ea:
5e:01:aa:c2:92:05:81:b4:c8:09:16:75:fc:ff:36:a5:44:50:
a1:42:7b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:08:41 2025 by rpki-client