Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: 8X60IkKz/o2atheQiY4Bf6zT3KFASQXUSz1qqfNxJfI=
Subject key identifier: A1:B3:AF:E6:AD:70:DC:AB:27:22:4D:13:8A:0B:85:FF:9B:CB:8A:08
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 0197458B6FA83417E8BA3B9B68150F484C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 14:00:55 +0000
Manifest this update: Fri 06 Jun 2025 14:00:55 +0000
Manifest next update: Sat 07 Jun 2025 14:00:55 +0000
Files and hashes: 1: Lddee0yGLa96EV9cff9j1b8lisk.roa (hash: 4wmS8bLLBI0yCHZS6lNJzngX25UoSHi3CPRXK8eiy+g=)
2: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (hash: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: Qcj77A2bMlQSGKvI832yCFn0EqTFt0Sst1lzF9ieeaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:6f:a8:34:17:e8:ba:3b:9b:68:15:0f:48:4c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jun 6 14:00:55 2025 GMT
Not After : Jun 7 14:00:55 2025 GMT
Subject: CN=a1b3afe6ad70dcab27224d138a0b85ff9bcb8a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:64:d5:fc:22:2b:fb:e9:d2:51:38:d7:13:f6:
c3:83:6a:1e:7e:e4:8e:c7:3d:45:43:4d:6a:e6:6c:
fb:ae:63:fa:f1:97:3a:de:bb:79:86:84:46:2d:c5:
bb:38:26:34:5a:38:b7:c4:77:f7:0f:03:ec:e0:fe:
30:a8:3b:35:a7:21:ef:8a:e2:c2:d4:b1:bd:60:40:
22:e2:ad:0d:31:09:fa:88:b0:5c:ae:56:d8:ba:2d:
2e:c2:bc:f9:de:6e:ed:57:5b:ae:ed:82:94:e0:98:
79:10:93:2a:da:60:31:ae:41:22:3b:73:ec:c4:58:
31:45:aa:b8:36:1c:b9:83:9f:ce:b3:67:ae:d4:ec:
98:6d:97:ad:73:3e:66:4b:f9:f3:03:42:50:80:5a:
84:66:9c:6c:62:c4:70:7d:34:bd:be:55:10:03:39:
64:5f:a6:68:e8:c4:26:d4:8a:9a:21:0f:4b:d0:9f:
b0:89:71:ca:ab:70:bc:31:6b:01:ff:9c:4c:54:c6:
3e:06:d4:ae:3e:3b:83:be:fc:73:00:df:77:5b:63:
c8:3b:06:41:bc:a2:cc:b4:86:5e:b5:b1:1b:c3:c5:
95:66:ae:d7:89:2a:57:07:ac:5f:74:77:23:af:91:
ed:4c:ab:f1:1c:c8:2e:49:ed:3a:df:41:bd:db:f3:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B3:AF:E6:AD:70:DC:AB:27:22:4D:13:8A:0B:85:FF:9B:CB:8A:08
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:30:66:08:67:cb:0e:17:47:a2:67:73:9b:ed:70:de:ab:3d:
bc:14:46:ca:2a:d0:f2:c4:a3:fb:20:c5:ae:81:5c:e5:a7:c6:
1b:11:a0:7b:03:04:24:81:bd:55:eb:c4:b6:9c:06:e2:ea:dc:
69:d9:8b:cd:61:40:0f:b2:50:0d:68:86:f5:91:33:2c:7b:aa:
73:5d:aa:a5:e1:46:2b:02:46:03:d1:a6:56:41:80:2a:e5:c9:
a3:fb:71:8a:f7:3e:5e:97:cb:19:5a:0c:f5:59:81:16:9c:6c:
57:f4:4e:ce:21:71:95:43:ec:40:52:b4:0c:d8:c1:f6:57:d4:
ad:48:87:bf:90:aa:34:c1:19:ca:19:18:23:0b:5a:b9:ad:21:
74:ce:3a:51:13:c7:ad:b0:3e:35:35:e0:9d:5a:14:47:aa:70:
15:45:59:0c:7b:cf:0b:0c:4e:48:8d:c6:6f:97:ec:69:7a:0f:
20:6d:8a:0c:2a:22:a0:9e:3d:11:2a:bf:9c:54:37:5f:2e:e3:
93:41:72:36:85:76:4f:70:fd:56:53:78:b0:d4:76:01:1a:c3:
28:e1:c2:08:df:79:69:95:13:46:f4:17:72:3a:66:82:4d:d6:
db:18:ae:16:01:b3:bd:d9:2c:cd:b5:14:76:f9:cf:65:38:79:
db:8d:8d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:36 2025 by rpki-client