Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File: R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier: 4c+V7T4mC0ilTyaBxLKSf5f1oCoCCyja+rqhGTTbIRY=
Subject key identifier: C9:6E:DD:9C:A6:64:4C:4B:01:C5:9C:4D:9C:8F:21:37:6C:55:64:6B
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial: 01974DE9F1777BC08604555B73BE4C669437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 05:01:06 +0000
Manifest this update: Sun 08 Jun 2025 05:01:06 +0000
Manifest next update: Mon 09 Jun 2025 05:01:06 +0000
Files and hashes: 1: CFUwFBzQtfgbafFzZOyLhQjWkGM.roa (hash: 97CGeBu3yLbE5oYRJj25Ylb6GhnLEinlvUvhqt045H4=)
2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: hL3xkfgqSJPY/fmKsyrFhIgOtICHchFNuAQxjOrWDYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:f1:77:7b:c0:86:04:55:5b:73:be:4c:66:94:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Validity
Not Before: Jun 8 05:01:06 2025 GMT
Not After : Jun 9 05:01:06 2025 GMT
Subject: CN=c96edd9ca6644c4b01c59c4d9c8f21376c55646b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:17:86:f3:f3:5e:0c:0a:7f:1c:2b:6a:be:
e2:fb:28:f1:34:24:5d:81:69:64:b1:14:57:c6:a4:
4b:61:3d:49:af:d0:b1:05:fe:ac:e6:dd:12:ea:63:
d6:d2:80:d2:52:c8:30:e3:b1:32:75:a3:6d:62:14:
a0:0e:bf:08:6d:f8:6b:6c:cc:38:5a:6a:81:46:15:
4b:45:e9:ea:75:94:5f:00:66:f3:39:fc:f9:11:af:
9a:24:29:17:55:68:74:84:13:36:c3:c7:88:ce:c0:
ef:a9:ac:5c:a3:fd:03:d0:c7:44:3a:81:af:88:5a:
7a:6e:47:91:2a:0c:33:9c:8f:48:0e:ad:6a:bc:70:
d7:d7:32:41:e4:6a:fd:79:cf:21:a7:b1:b7:3d:36:
3c:87:82:e4:b2:27:3a:0f:94:34:a8:20:4b:36:5d:
c4:ea:5f:ef:e5:4d:a0:cf:ec:3e:50:92:0e:fe:2c:
66:a9:82:b7:1c:ae:8e:89:59:42:a7:60:b1:db:82:
b0:27:67:70:4e:ce:de:88:c6:22:1f:6c:40:e5:87:
3d:c2:d4:33:74:8c:c0:10:eb:62:69:b4:be:cc:13:
96:10:23:cd:45:b8:c3:2b:a6:aa:97:3d:b8:31:f7:
98:a5:ea:4e:69:70:8b:9d:c5:ce:65:7e:b1:53:f9:
08:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6E:DD:9C:A6:64:4C:4B:01:C5:9C:4D:9C:8F:21:37:6C:55:64:6B
X509v3 Authority Key Identifier:
keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7a:b7:06:2c:0a:67:fd:85:d0:17:c6:83:91:20:fc:e3:e8:
68:5a:24:75:cf:5d:bb:fb:c0:72:d4:e8:48:55:1f:63:dd:31:
00:8f:ac:40:1e:b7:5a:7a:d8:80:ec:f3:f9:43:d5:33:82:0f:
22:56:15:8c:f0:c7:d3:4e:6f:d6:3a:eb:4d:dc:bd:05:60:c5:
85:6c:d7:98:4c:44:83:5e:de:ad:dd:47:da:3b:6c:ff:16:1e:
aa:94:70:ca:25:92:3d:08:e7:e9:f6:33:c8:3e:91:5c:6b:83:
de:15:a4:4d:ff:b6:2c:e3:af:fe:1c:eb:15:3b:ff:03:53:37:
29:a8:be:d2:6b:d1:25:37:37:76:ec:b6:f1:ba:43:28:1e:5e:
71:86:f3:49:6b:2c:73:18:26:bd:1b:7e:41:0e:1b:49:bf:87:
55:f6:d8:6b:18:58:18:ba:03:7d:b7:f5:88:36:4c:ae:c3:dc:
8f:20:66:32:c1:0b:cc:26:1d:a2:a1:52:8e:ac:d6:57:cc:4e:
9b:43:fd:1d:82:41:ad:e7:27:ce:ac:04:2e:ac:70:d7:a7:9d:
33:38:40:f7:67:e8:b6:8e:5f:50:d4:ab:e6:6b:bf:94:87:70:
2b:05:e6:60:62:bd:2f:34:23:a6:2d:a5:15:d7:25:60:e8:9c:
9a:47:c8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:33:45 2025 by rpki-client