Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
File: 13eUOzQRiOnNLpPeKIsz_-BBx9I.mft (raw, json)
Hash identifier: vKWHwsFzKPvAMbcFNs6X4O++e6VvAkGwH5iAzX0NmcE=
Subject key identifier: 7F:C6:DC:87:DD:3B:AC:4F:DF:0B:13:D1:BC:81:68:5A:C8:F2:F8:94
Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Certificate serial: 01974A7B21F944C7B2659F9571D2B36AC4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 13:01:12 +0000
Manifest this update: Sat 07 Jun 2025 13:01:12 +0000
Manifest next update: Sun 08 Jun 2025 13:01:12 +0000
Files and hashes: 1: 13eUOzQRiOnNLpPeKIsz_-BBx9I.crl (hash: jeiSnG5uwuecmlh9eqRbF8P+rGwcVcPPLkoMGDWt2xk=)
2: f0gof4jxw94Oa83YFTdbTbKjLPk.roa (hash: TTuzPsw9kpuOO/S82uUhytdELCayKcLt12jYeRdVVIg=)
3: fI_1hDVc0AIsq5nMQmL9xfz1kXA.roa (hash: 89mtvnCyTjJUBdmS9eZxdF32JISfZjUl73RykEZkqVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:21:f9:44:c7:b2:65:9f:95:71:d2:b3:6a:c4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2
Validity
Not Before: Jun 7 13:01:12 2025 GMT
Not After : Jun 8 13:01:12 2025 GMT
Subject: CN=7fc6dc87dd3bac4fdf0b13d1bc81685ac8f2f894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b8:c2:04:a5:c1:09:da:b2:06:4e:6b:15:fb:
d7:e1:26:7c:42:fd:09:0e:fe:36:f4:1e:e8:52:03:
82:d0:67:c3:f1:ad:a4:f2:ff:30:39:25:76:fa:61:
b3:8b:3e:b8:50:c7:c4:b6:28:d0:3c:8e:5a:20:92:
5c:02:d8:d6:12:0b:c0:b5:3d:6d:9a:28:15:24:ec:
83:e1:9c:ca:0c:ab:6f:7e:5a:e1:9e:5c:e0:f9:ad:
15:f9:7b:d7:42:f7:2e:2f:7c:70:71:d8:ff:e5:65:
7b:28:f3:cc:ab:91:fc:8f:82:75:0d:5c:87:bc:0b:
5a:39:65:f0:e9:66:67:bd:a4:76:3e:44:d0:01:46:
6c:32:df:a8:ed:e8:f8:04:39:53:99:51:62:87:cd:
77:e3:31:51:30:71:24:d4:38:71:10:33:e9:b6:b8:
19:41:fa:42:e7:ac:0c:62:24:a1:44:20:43:7b:e5:
8b:01:2d:b1:84:27:df:43:3f:f5:39:c9:b0:6b:2a:
5b:55:eb:98:09:77:74:6b:a7:a8:57:3e:00:9d:5f:
81:d3:5c:6b:34:74:84:6f:ac:48:c1:ac:bd:13:dc:
69:b5:ba:9a:5e:56:5d:c8:a0:f1:b8:cf:15:f7:b7:
0a:34:94:a4:85:aa:cd:c7:ed:e8:87:99:ae:fe:cb:
74:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C6:DC:87:DD:3B:AC:4F:DF:0B:13:D1:BC:81:68:5A:C8:F2:F8:94
X509v3 Authority Key Identifier:
keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3f:46:34:19:b2:19:6b:16:c9:88:d2:09:ef:d8:13:2b:8d:
a1:fb:7c:76:5f:66:5e:76:78:9b:f2:b7:ef:54:3a:95:5d:a3:
6c:9b:91:91:9c:15:c1:0d:18:1b:45:fe:0d:95:81:9b:fe:50:
e2:b1:48:e9:c4:e6:6b:ec:b9:d8:4c:71:07:1a:31:58:c8:59:
fc:4f:5a:ca:a8:f6:57:ac:c1:32:8c:d4:b6:95:8c:05:7b:4b:
dc:1e:ce:c1:f2:42:a1:18:97:f7:05:9a:93:98:1f:f0:38:53:
ee:e4:37:00:87:14:7c:c8:aa:29:03:fb:67:46:46:3c:cc:f8:
e7:e3:05:6a:1a:ab:36:d3:ba:86:0d:90:d4:8e:81:d9:e9:06:
a0:c8:ab:26:d4:73:ac:db:05:57:72:f2:79:85:3b:c6:65:52:
f2:85:da:5f:b9:c1:9f:6c:2a:32:22:32:a4:ee:c8:af:ff:40:
bf:97:ef:ae:03:7e:7a:40:47:58:50:1c:f3:4b:6c:45:e3:43:
d4:fe:67:b1:c7:eb:54:43:96:f7:94:9a:df:84:2c:36:3c:60:
26:81:06:b5:4b:94:f1:6c:4c:ea:66:de:d5:b9:ec:35:9a:93:
07:e5:dd:89:dc:16:7f:b0:1c:2c:1e:15:2a:09:56:59:46:79:
0f:db:aa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:01 2025 by rpki-client