Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
File: byDBquA8J08ClCjuoKRCQgjU8-0.mft (raw, json)
Hash identifier: DgEPF79sFxTfUroumZTQzrBFo+7FAFnGDLQ3xdOIDSE=
Subject key identifier: 66:70:66:E6:18:38:8C:34:BB:F8:01:AB:66:4D:08:54:83:03:E2:1F
Authority key identifier: 6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
Certificate issuer: /CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Certificate serial: 01974BFB0F350BE0985A04ABEE6D707EE028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 20:00:33 +0000
Manifest this update: Sat 07 Jun 2025 20:00:33 +0000
Manifest next update: Sun 08 Jun 2025 20:00:33 +0000
Files and hashes: 1: QR-XfIkw00mD51XnwCvsG-9T89w.roa (hash: a0XDBbD/tQURYMLpVooHaNMf9NXfcD/rGt0gapo+gwA=)
2: byDBquA8J08ClCjuoKRCQgjU8-0.crl (hash: WfmOQMpH3WaXeqyzH5FrbRPqx0AJeX8WJU0ccXzNwDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:0f:35:0b:e0:98:5a:04:ab:ee:6d:70:7e:e0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Validity
Not Before: Jun 7 20:00:33 2025 GMT
Not After : Jun 8 20:00:33 2025 GMT
Subject: CN=667066e618388c34bbf801ab664d08548303e21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6a:3a:91:47:c7:18:fa:03:49:f8:96:2d:0a:
c2:92:a0:33:9c:9b:41:8e:9a:f5:68:58:72:1c:43:
4f:71:50:59:7f:d8:1a:f3:b4:4c:1e:e6:31:43:86:
98:f8:60:8b:66:74:8b:a9:a4:df:c9:ea:16:68:2b:
6d:ca:b8:b5:20:04:8b:39:3d:cf:ca:ad:ed:cf:f8:
f2:b0:04:0a:55:60:d0:53:a2:e7:60:f6:76:c9:b0:
7a:86:3e:84:67:47:39:9b:ff:4a:b1:9b:44:6d:b7:
07:af:76:89:60:49:c8:32:4a:5d:6b:2d:7c:67:13:
7a:10:aa:20:9f:a7:7e:af:eb:cd:8e:32:45:d3:be:
4d:17:2d:88:59:b7:3f:e1:93:8f:e2:a1:1b:b9:58:
64:8d:da:e7:45:42:a8:c2:b9:94:dd:dd:39:ae:92:
94:23:f3:33:da:f7:75:9d:e1:62:68:07:f2:58:e3:
35:5a:35:03:aa:c0:da:1f:aa:03:8f:3d:39:dd:a5:
ae:ff:c6:0c:fb:e8:61:69:45:27:f5:0a:0a:ae:94:
46:7c:52:9d:b9:7e:89:16:49:77:db:34:98:94:75:
dc:2a:76:ea:34:cb:fb:c7:9e:a9:ba:5b:2c:a6:aa:
c3:3d:b1:ae:a8:64:a4:07:b8:db:06:df:a8:60:36:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:70:66:E6:18:38:8C:34:BB:F8:01:AB:66:4D:08:54:83:03:E2:1F
X509v3 Authority Key Identifier:
keyid:6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fc:7d:02:42:25:fc:38:24:a0:37:b0:fc:2d:1d:f3:b9:e3:
64:02:dc:e8:b8:0c:d3:1a:9f:d8:da:ed:dc:54:32:74:ea:82:
d9:42:27:77:3b:8e:2b:01:c2:d6:21:b4:6c:04:4a:c9:e8:54:
ba:18:dd:57:8e:d0:7d:a3:c7:07:51:71:9a:2f:05:db:83:90:
2b:c8:72:56:10:82:fc:e8:8d:07:18:20:49:56:cc:68:67:5e:
52:a3:f5:06:49:40:e6:0f:e7:71:f7:e3:9f:1c:59:04:19:5f:
4a:a2:64:da:4a:de:6d:c8:63:e1:29:53:ae:36:35:52:7e:60:
fb:3f:eb:45:20:a0:91:d6:63:c9:90:d2:32:74:8a:0c:c1:ed:
14:a7:d0:05:24:a9:c1:f3:8f:71:70:88:fc:76:ba:14:a4:d9:
97:c5:d7:f5:92:36:6e:3a:c4:01:6e:80:34:54:4b:78:5f:39:
7e:39:75:39:c6:5d:d8:95:6e:f3:9f:22:c0:93:7c:85:6d:c9:
86:02:1f:43:2b:41:76:7f:31:88:90:b8:43:aa:74:b2:d8:cc:
12:e7:c9:69:1f:e4:5f:b3:3d:41:0d:56:62:79:85:ce:f7:bf:
48:7e:7d:d5:13:41:34:8c:3e:80:c8:e7:98:a5:93:49:07:74:
87:4d:b6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:47 2025 by rpki-client