Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: IyVK8bOtY9wcDS73Xsg9WVir4yQNYI6CitHOMuBDZZk=
Subject key identifier: 12:E9:CD:1F:40:EB:C7:49:83:BF:17:AD:80:98:26:44:30:5C:BA:0F
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 019748C2EA5562A6085F08C8F156B5EFCA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 05:00:22 +0000
Manifest this update: Sat 07 Jun 2025 05:00:22 +0000
Manifest next update: Sun 08 Jun 2025 05:00:22 +0000
Files and hashes: 1: 3y9VMN9BUcZB2fmchyviGBmGtxw.roa (hash: WvArAvEQlUAHpEjB63U5q0z8PqLe+6GgRYCWBvbd2yM=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: iWJonrzT90LXjeL08bLqxxScy1LZpjc6KJEDfJvmWms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:ea:55:62:a6:08:5f:08:c8:f1:56:b5:ef:ca:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Jun 7 05:00:22 2025 GMT
Not After : Jun 8 05:00:22 2025 GMT
Subject: CN=12e9cd1f40ebc74983bf17ad80982644305cba0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:f6:73:b7:dd:06:b3:e0:e1:9b:f0:b7:17:
83:0b:55:d1:a4:7e:b8:3b:c4:d4:80:c1:95:7b:1a:
5e:a2:74:92:07:01:ae:d4:60:d4:c5:75:09:48:19:
f5:91:b2:1f:c0:68:4f:d4:2b:c9:22:9f:d8:af:03:
f5:58:bd:2a:3a:34:44:42:41:9d:10:f8:bb:90:8f:
52:2f:77:2e:ed:7f:57:3a:dd:58:89:f7:13:96:bc:
a6:86:15:ff:e0:66:b6:81:3e:f5:1e:05:eb:04:05:
9f:6a:fb:98:ce:9b:15:00:fd:e1:ac:f3:f4:e3:97:
22:a4:56:e0:6b:63:ca:d4:0a:1f:ac:25:f2:8e:22:
97:67:cb:e0:81:a9:df:72:9a:96:d9:97:81:02:6a:
b1:1e:0f:eb:6a:99:5d:dd:eb:77:20:08:4b:f5:57:
ed:1b:f2:6e:fa:b8:2e:8a:4f:29:2c:5d:3e:da:95:
74:9a:12:29:c6:7b:76:63:af:8d:f0:7b:38:05:94:
b7:9f:f7:92:ca:cd:08:87:27:50:81:a1:5b:3b:7e:
6e:42:ef:e3:5a:b9:6b:f3:b3:43:d3:f1:cd:0e:e7:
a8:50:2a:58:70:4b:36:9a:39:d0:64:92:c8:75:9d:
67:1b:a9:37:5d:91:08:5e:e1:62:d5:30:b5:f9:b7:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E9:CD:1F:40:EB:C7:49:83:BF:17:AD:80:98:26:44:30:5C:BA:0F
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e2:47:e4:49:db:2e:44:be:40:7a:be:b2:7e:67:ea:6c:49:
f3:76:83:67:ec:ae:3e:af:8d:d5:75:14:4b:18:33:4d:ab:0a:
4c:3b:17:c5:8e:ba:c0:08:f2:8d:68:88:f2:95:85:8e:e7:5b:
4f:11:26:89:26:11:3d:35:e8:15:99:50:f6:16:76:92:af:35:
2a:fc:76:d7:da:e6:47:e8:06:41:c8:0d:8f:b8:7b:98:01:2c:
14:a7:db:c8:74:a1:b6:b3:f7:6f:2b:15:fd:80:2b:d7:33:f0:
1f:dc:e4:7f:37:87:ff:97:44:41:fa:e1:c4:0a:65:a5:26:b4:
65:7a:89:63:1d:e3:a2:8d:87:33:3a:17:2a:e0:57:b8:c5:30:
ad:6c:3d:f8:5a:77:62:5a:b7:7b:aa:55:fe:16:76:de:45:1e:
70:ba:42:f7:c1:4b:19:c4:80:7f:bd:c7:d7:92:ae:d7:f9:b5:
ce:aa:ba:a8:ed:36:06:3b:08:64:74:18:db:8b:32:5a:25:7a:
cd:15:7b:53:2e:4c:d2:c7:19:8d:18:70:09:ff:cd:fe:6f:80:
88:53:d9:55:ad:43:08:3d:e0:d3:27:0c:88:f0:b8:a9:70:20:
fd:72:91:72:b1:db:af:6a:14:b8:fe:cc:91:5a:92:3c:73:14:
e8:73:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:10 2025 by rpki-client