Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
File: c271cwBQxyD4x5BGbri4pI7750k.mft (raw, json)
Hash identifier: FBRgULspie8G3fwS10D9C7Eb0ODcDojIJsyztwxZzNw=
Subject key identifier: 70:6B:2F:E4:FD:7D:2D:F9:BC:56:5E:76:5C:21:6F:EB:93:36:93:5E
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 019749686605C2AF981809B4981BB6F0F4A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 08:01:07 +0000
Manifest this update: Sat 07 Jun 2025 08:01:07 +0000
Manifest next update: Sun 08 Jun 2025 08:01:07 +0000
Files and hashes: 1: U_EXFi0_K3LJzzOGjdd59sx5hhk.roa (hash: InLExGG/VRrfIxx+5P3BkdCZ9LeR0AfhLMm27/EtRM8=)
2: c271cwBQxyD4x5BGbri4pI7750k.crl (hash: 4IMaVoDZBED8O2JCp6ycEC6UbRKDlRt6zYMR3vJdEyc=)
3: fpEtFF5tn_F6AS7ORtQk_79zOLM.roa (hash: ecIVoFs7h4RkV6LSwkMSO/FMl9ZMbuW6Wd5+RjOOYhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:66:05:c2:af:98:18:09:b4:98:1b:b6:f0:f4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Jun 7 08:01:07 2025 GMT
Not After : Jun 8 08:01:07 2025 GMT
Subject: CN=706b2fe4fd7d2df9bc565e765c216feb9336935e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:99:47:e8:0d:f5:01:27:c1:90:74:72:fe:6c:
1b:ea:be:fa:a3:ca:a5:56:e4:1c:06:dc:50:48:f9:
88:96:b9:e2:c7:4f:2c:21:27:d5:91:e6:d5:89:88:
e3:54:13:12:a3:ce:a1:9d:c0:8e:cc:1a:af:94:cd:
28:a4:94:67:17:03:78:83:b0:72:be:c8:bb:6f:21:
95:7a:db:75:72:91:8b:9b:52:88:93:d9:95:11:d4:
87:70:b4:da:ad:21:79:52:17:6a:55:96:81:40:c2:
e4:bf:2b:a6:dc:8f:1f:fb:d1:ca:5a:db:d2:9c:f7:
4c:2c:f3:63:db:88:18:2a:95:d8:f4:8d:86:ae:fa:
82:f7:ec:3a:bf:1b:0e:8b:a4:e4:3a:a3:03:07:6b:
90:06:3f:56:ea:ee:f8:f0:0c:85:32:62:14:0c:5b:
bd:e3:7e:f6:e6:3c:9b:01:6f:38:9f:86:0e:78:22:
90:47:3b:7c:d4:dc:82:2c:3e:38:68:4d:d5:3a:ae:
ff:32:0c:53:17:7a:6b:d6:19:22:b1:d0:a1:89:6d:
37:a9:89:45:54:8b:a3:bc:49:76:48:46:8d:3d:01:
15:5c:fe:49:75:a6:a1:c6:4f:39:9f:2a:e5:42:88:
4e:fa:03:7f:62:c7:11:6a:65:5c:74:98:0f:c5:7a:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:2F:E4:FD:7D:2D:F9:BC:56:5E:76:5C:21:6F:EB:93:36:93:5E
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d4:39:6a:e5:54:de:a5:25:36:cb:f3:16:16:8d:89:5f:2e:
90:84:ad:5f:bc:01:08:29:d8:04:2d:81:5e:1d:9b:93:db:5a:
51:8f:23:57:18:c8:89:26:59:55:22:91:c5:46:3b:fe:21:d3:
c0:d4:d1:b8:6c:65:4b:a7:2e:80:13:b1:02:cd:9a:cd:7a:f7:
8a:f7:2c:56:c3:d8:20:69:c0:7b:7d:b2:4a:b7:6a:08:e4:ec:
59:08:ec:58:d8:b2:ba:98:f4:64:86:72:24:b9:9c:fc:32:dc:
6a:22:0b:0e:3a:a8:a3:39:c8:2b:23:b2:54:86:c8:d1:09:ac:
2b:e0:46:cd:df:29:80:c2:b7:c4:8a:7a:22:63:4f:85:c7:5b:
ea:81:b2:e9:82:88:71:b8:a6:cb:94:7c:a3:05:c2:c6:eb:c7:
70:12:8d:70:70:2a:ce:20:98:a1:a5:29:37:69:08:75:c8:66:
c2:d9:b9:34:94:37:13:79:09:1e:de:e6:66:4f:ba:ab:6c:de:
e9:a6:41:ae:ef:14:e6:39:4a:65:d1:2b:59:19:0a:32:21:10:
cc:6c:09:09:ad:b1:53:b8:a4:a9:8a:12:5f:ff:5e:5a:3d:f1:
80:16:c9:fa:06:69:70:58:c5:04:ac:2a:89:5a:cc:77:87:9a:
18:f0:1a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:55 2025 by rpki-client