Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: fg2tdRj6uX0D+MroeTSeGhacyp/VTm4/1peZ0dA6C6g=
Subject key identifier: 48:DA:2E:6A:0A:F7:09:47:E9:B2:E1:9B:BA:6F:89:CB:A9:AB:1D:68
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 019749D62019DDED4AF2FBFEC784CD6B93BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 10:00:58 +0000
Manifest this update: Sat 07 Jun 2025 10:00:58 +0000
Manifest next update: Sun 08 Jun 2025 10:00:58 +0000
Files and hashes: 1: 8ydVbA0sRc2KQJCu7PF_TgB9YOc.roa (hash: ldViVOYSsfn20bEs9Oqh1Yf20Me7yZtpfiOBMHbpOTM=)
2: F-qMZsrYFuWs3mqxVuy5Uc_QajI.roa (hash: 8P5DrUp/opHUhrTa0qnhwTNZG/EzRMCLBAaUpNYWajY=)
3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: 0LTrzedVjT7XY/gDYO2LSQqyv4LgxLtZsE0Mjqp+Evk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:20:19:dd:ed:4a:f2:fb:fe:c7:84:cd:6b:93:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Jun 7 10:00:58 2025 GMT
Not After : Jun 8 10:00:58 2025 GMT
Subject: CN=48da2e6a0af70947e9b2e19bba6f89cba9ab1d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:7f:f6:f3:fe:8b:3c:59:80:b6:a6:7b:ac:
80:a4:9a:e7:8d:2b:5b:3c:8f:1f:2e:51:76:2d:aa:
c4:7a:69:2c:d3:8a:07:ce:68:f6:6d:2b:c7:98:d7:
2e:96:11:f1:4d:00:0d:ef:ef:d2:b5:88:36:d1:f0:
1c:9b:a1:99:78:2e:d9:9d:62:74:8c:26:ed:ea:22:
5a:c5:60:d9:f2:28:56:2b:ea:b7:13:5c:44:da:d6:
ab:e3:28:e3:e8:74:79:7b:a2:f3:24:08:12:3b:10:
ef:ba:53:06:70:d8:f5:b5:0c:d5:70:7c:24:63:c9:
4f:0d:da:6b:25:67:e5:4a:a3:d3:16:ad:82:ad:6b:
3d:7c:8d:55:00:b7:d2:b2:84:77:90:87:b8:50:b8:
f2:71:81:da:9d:34:1b:d4:e1:0d:dd:6d:8c:60:00:
d0:aa:65:54:1e:25:65:20:bc:89:13:79:45:5e:9a:
df:c4:45:52:8f:16:5b:1d:49:a1:23:b7:b5:76:20:
10:b3:42:5e:90:36:64:b5:e8:7b:4b:64:f1:03:55:
18:85:7a:92:e4:51:ba:45:ee:08:81:92:47:6a:f9:
78:1f:a0:21:bc:0a:c9:1d:27:68:b4:1f:2b:8e:7f:
f2:49:dc:bb:3e:7b:6d:0e:16:4a:ec:99:a3:2b:88:
26:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DA:2E:6A:0A:F7:09:47:E9:B2:E1:9B:BA:6F:89:CB:A9:AB:1D:68
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:82:2f:51:8a:0b:59:89:34:ea:d4:e7:68:e6:e7:7d:e3:79:
be:fe:ea:4f:83:36:df:fa:35:33:25:35:41:42:fe:b9:44:5b:
3d:0f:fb:09:a0:90:fb:fe:85:2b:45:6a:1e:89:f8:fa:3e:c9:
e8:91:1b:99:62:84:60:47:a2:b5:de:61:5f:d3:60:4f:b2:da:
ac:c5:c1:15:19:02:45:db:7e:21:25:bc:04:df:d2:ca:b0:f2:
15:f2:6d:e2:5e:6a:4c:8c:8a:de:86:41:7c:f9:14:11:48:5f:
8d:70:96:24:f9:79:54:bc:56:ed:bf:1d:f2:e1:f2:7f:59:d4:
f9:a0:c4:a1:f4:91:e6:d6:37:be:e0:93:d8:cc:ec:36:88:d6:
3d:17:17:a3:80:03:4d:5c:3e:a8:80:78:b4:64:84:43:10:f1:
4f:af:77:24:10:14:5e:f8:45:33:97:c0:f4:72:a8:57:41:0f:
73:bd:e2:cc:57:07:95:90:fc:85:bc:a6:cc:af:38:ab:db:99:
05:ff:3d:33:ba:80:06:ed:25:b8:74:c0:f1:ef:ea:79:f3:a0:
cb:a0:24:ac:3a:25:00:54:c1:96:4b:43:2d:85:01:1a:29:5e:
d3:4d:1d:09:ea:2c:9f:21:c1:f4:ce:83:d2:25:61:0e:b0:85:
1f:65:0b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:14:12 2025 by rpki-client