Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
File: j-7pSg47IoCXZK7h4o8Hj61ja8M.mft (raw, json)
Hash identifier: b/86zyZqAmKEX247I7PTclHNMopnqcbWpzOhgQSXVBA=
Subject key identifier: 04:4B:1D:E5:CC:BC:50:F7:DE:3F:23:8D:8F:1E:1B:23:CE:7B:72:54
Authority key identifier: 8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
Certificate issuer: /CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Certificate serial: 01974D0D87C358D22679801033714143BF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 01:00:21 +0000
Manifest this update: Sun 08 Jun 2025 01:00:21 +0000
Manifest next update: Mon 09 Jun 2025 01:00:21 +0000
Files and hashes: 1: j-7pSg47IoCXZK7h4o8Hj61ja8M.crl (hash: cHZn8tubvAJkKdoAGFWLCO7A1/irlgKTw7dbVCjEm2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:87:c3:58:d2:26:79:80:10:33:71:41:43:bf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Validity
Not Before: Jun 8 01:00:21 2025 GMT
Not After : Jun 9 01:00:21 2025 GMT
Subject: CN=044b1de5ccbc50f7de3f238d8f1e1b23ce7b7254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:b3:26:14:9a:8c:32:fe:dd:58:af:5c:87:
59:3d:a8:f1:d9:41:e0:cd:39:37:3b:1a:47:15:68:
bd:fa:ee:1e:f7:d7:b5:c6:d3:4d:a9:68:86:a5:e3:
ea:f7:cf:85:86:0f:a5:26:60:c3:7e:e4:ed:3a:65:
03:7e:a3:92:98:63:55:43:78:65:db:b9:e3:a9:77:
e0:96:da:43:46:23:8d:c6:35:97:8b:35:e2:68:86:
93:00:ea:2b:0e:70:1c:2b:aa:fe:a9:0f:49:da:77:
f0:7d:fe:a5:1a:de:88:1d:64:3e:dd:8e:ce:5d:89:
da:a7:21:cb:8b:78:ee:3e:83:94:89:a4:8a:4f:91:
2b:d0:6d:13:e9:af:c3:91:10:10:ae:7c:03:b9:7d:
d0:d2:98:be:e0:4d:84:82:52:97:0a:cf:9c:23:bd:
95:f0:00:3a:89:d8:d5:30:ed:dd:f1:06:89:14:b3:
1b:a6:6a:a4:6b:17:55:9b:5e:81:c4:29:77:3c:9e:
5b:7f:a5:5b:9b:40:ed:be:05:fa:99:c4:1d:16:27:
2a:a7:29:14:c8:f2:a7:bf:14:89:ae:e8:fa:96:55:
b2:00:71:aa:a5:79:1f:36:d8:df:dd:12:a2:49:5e:
d1:68:d4:ba:0e:1f:b0:e8:af:81:c6:53:59:58:f8:
34:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:1D:E5:CC:BC:50:F7:DE:3F:23:8D:8F:1E:1B:23:CE:7B:72:54
X509v3 Authority Key Identifier:
keyid:8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:67:a2:b4:db:5b:47:d6:59:2a:a9:03:bb:49:8b:dc:19:db:
a3:a7:0d:3a:4c:31:92:63:f9:40:13:34:09:66:21:78:5b:ef:
35:0b:2f:28:19:67:2e:3f:4d:d6:28:13:85:2d:cc:3a:af:dc:
06:d3:4b:81:2f:18:f0:90:6f:b8:46:71:06:d5:73:4a:f5:2b:
6f:73:aa:56:9a:48:7d:9b:d8:72:e3:16:63:1c:8e:db:90:9e:
ab:dc:c2:4a:52:ba:de:7a:d9:a4:04:6e:c6:4d:38:b9:bb:f2:
82:19:c9:ed:ce:5c:65:bf:32:c8:0a:6f:9b:c1:c9:bf:28:ba:
35:5c:30:e2:66:b0:b7:17:d7:ec:96:39:fa:d6:52:9f:44:66:
7d:94:dd:e0:a8:de:9e:eb:41:33:44:90:e3:35:84:40:9d:ce:
2c:03:21:68:24:ef:90:ac:d5:96:a3:91:e3:40:c2:38:a3:3b:
16:38:da:45:ad:13:9f:4a:a4:41:b4:d1:52:76:84:46:b0:fe:
5d:25:f1:55:d9:47:46:03:94:3f:f5:7d:55:07:5d:17:a3:e6:
d0:aa:26:f5:b6:ba:c3:c6:03:e0:06:3b:8d:48:37:17:3e:61:
45:10:6a:98:bc:6b:16:eb:34:e4:57:b8:74:ce:ad:cb:71:b7:
22:81:3d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:00:04 2025 by rpki-client