Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: ctn/kkaR22sc6D251bW7LEApYd814VdhPvW+q3kzxOA=
Subject key identifier: EA:86:2F:1D:FF:68:B0:7B:A7:CA:88:E0:83:B9:A7:06:18:00:4C:CF
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 019749315B0EDF5889C6D1DFEF8F16E4153A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 07:01:00 +0000
Manifest this update: Sat 07 Jun 2025 07:01:00 +0000
Manifest next update: Sun 08 Jun 2025 07:01:00 +0000
Files and hashes: 1: 7a7WUL8xvDPo2P-5omM4jYtGU5Y.roa (hash: UostfHkB3oR0Iku8D5pESC2eAmHKknmIvGYXu5RiVk8=)
2: E72VdoRs1WH4lPVFyfKcgtxOU8Q.roa (hash: LmX4spgkKMlRcTCE+F8dcGQpsB1FUNFcfYjRwXtYks0=)
3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: spBaq/rNc+cnk2Bedi5jOdavOgThr3slBMBLyqN954I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:5b:0e:df:58:89:c6:d1:df:ef:8f:16:e4:15:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Jun 7 07:01:00 2025 GMT
Not After : Jun 8 07:01:00 2025 GMT
Subject: CN=ea862f1dff68b07ba7ca88e083b9a70618004ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:dc:04:ad:59:fd:a7:d1:f5:2c:bf:6e:44:a7:
75:ef:4e:1e:fc:d3:0b:89:04:69:4c:fb:7e:34:69:
b8:c7:d7:fe:ea:f0:27:47:44:b8:5e:53:4b:9d:71:
83:b9:72:0d:1c:f6:62:a8:df:2d:b7:9d:01:f4:7c:
00:01:74:c5:ca:db:2d:7e:2a:81:d9:2b:ec:2e:1f:
a3:ee:e9:d8:c2:23:e0:41:af:46:ed:1a:07:2e:80:
79:fc:6b:4b:aa:fa:95:21:3a:a3:47:b8:54:dc:01:
71:3e:8d:f6:c9:15:f7:14:4c:94:5b:4e:8c:c0:95:
ae:e6:78:17:3f:c9:76:8b:60:c5:05:18:ee:6c:eb:
c6:d0:dd:88:46:4d:d0:e9:26:1c:4a:76:4a:39:8c:
01:99:94:e8:cb:90:9c:6a:c4:37:77:22:88:12:70:
65:b4:41:5e:7a:c5:02:ec:cc:87:02:ae:fe:16:12:
de:6c:9e:18:f3:55:17:8c:3c:80:61:a1:4e:3f:c6:
fa:6f:33:29:5b:4e:4d:89:8c:75:a6:30:fb:21:69:
08:e0:b8:a8:2a:eb:d8:20:9d:53:1c:27:47:37:e6:
26:3c:77:f5:b2:f3:22:6c:a0:a4:d3:16:6a:2f:2f:
be:ab:37:82:75:e2:d9:be:c0:e4:ee:18:3a:3b:7b:
25:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:86:2F:1D:FF:68:B0:7B:A7:CA:88:E0:83:B9:A7:06:18:00:4C:CF
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:59:83:2b:e6:fe:7e:59:cb:1f:dc:94:8a:0d:24:a5:be:bf:
1f:21:0c:d2:2f:31:0d:f3:5f:3f:5e:30:ad:96:82:da:ff:b5:
33:c9:0f:f3:ce:10:3e:b5:98:2a:e0:d0:a6:33:37:fc:4b:ea:
af:65:d4:4a:61:fa:1e:a9:63:aa:ac:9e:37:0c:04:db:a1:1e:
d5:f6:ab:b8:14:de:a1:02:fb:96:57:69:5b:0f:2c:c9:6f:55:
8e:87:f6:e4:37:a1:f3:8d:9f:3e:87:01:77:b0:bc:8f:2d:8a:
bb:bf:db:30:b2:30:f6:05:bc:f3:59:81:bc:94:3f:b1:3d:7c:
86:9b:df:13:d8:87:32:ef:d2:d8:ed:bf:96:88:e3:e4:29:75:
16:07:74:01:c6:73:c6:47:8f:c0:6e:15:b6:42:c7:61:e4:62:
33:35:c2:c9:fd:a4:d2:9c:d0:c3:31:fb:a3:53:51:fa:f8:8a:
18:2d:66:7b:52:ab:d8:9a:e5:55:56:40:87:90:f5:57:d3:bf:
54:d8:40:2b:7e:58:0c:2e:50:a2:df:36:5e:c1:2a:6e:0c:e6:
a0:6d:a8:c4:95:59:c2:2b:b3:94:2a:1d:18:82:d0:d7:a2:4a:
22:f7:c1:15:4d:7f:a5:48:ca:85:be:05:00:f5:3c:4e:a0:6c:
ee:56:26:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:51 2025 by rpki-client