Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier: DugyPw+HGWWBYJAi/KBNrTdJwdd+DvZL/0pHWpxme1k=
Subject key identifier: C2:3E:95:F5:5B:4F:F7:71:76:19:DD:FD:05:44:02:35:2F:82:FE:E1
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial: 01974C69B74867930DE8D01F3A53347F4A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 22:01:25 +0000
Manifest this update: Sat 07 Jun 2025 22:01:25 +0000
Manifest next update: Sun 08 Jun 2025 22:01:25 +0000
Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: xaMpriy5DA8FrEdXSiQrMQzSNqgaVcP7f3aaXhUjrI0=)
2: iBTxA6wf53PMi32aogrQ-jvltRQ.roa (hash: snlLGKpsI87AWFuzw8u8bLZKNZ/ZxpzOPQrEf7Rg3/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:b7:48:67:93:0d:e8:d0:1f:3a:53:34:7f:4a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Validity
Not Before: Jun 7 22:01:25 2025 GMT
Not After : Jun 8 22:01:25 2025 GMT
Subject: CN=c23e95f55b4ff7717619ddfd054402352f82fee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2d:f3:c3:c2:13:0f:17:11:17:92:4d:49:6c:
43:93:46:89:24:3e:87:b4:3f:3c:13:df:f5:61:da:
00:dc:f1:34:fb:f9:46:f0:d4:4a:88:14:e4:b6:d5:
dc:6f:c7:3f:e0:52:95:67:bc:5e:7d:23:ab:8c:61:
26:c1:6a:bd:03:6d:a3:0f:87:62:b4:ac:3c:87:fb:
f2:9d:72:da:7e:53:09:39:e7:0d:bf:25:3e:de:a0:
2c:c6:32:04:eb:1b:a3:5f:df:8f:f5:2b:b8:8d:16:
9d:32:b3:1b:8f:65:5d:de:05:1c:01:8b:66:97:59:
64:bc:cb:35:66:92:6e:19:3c:58:1a:ee:0e:3c:68:
27:a3:88:8b:0b:08:9f:60:30:39:ae:71:0c:c7:c4:
de:d1:9d:05:c3:77:ea:b7:ba:91:38:52:4a:35:5c:
f1:c4:46:9d:c9:bc:17:ed:c9:11:5b:c3:79:e7:6b:
3a:9a:a1:77:29:22:35:cb:73:e1:13:25:dc:b8:d1:
00:ef:f3:33:16:31:78:f7:97:c2:18:5d:43:9a:64:
ba:59:70:5f:3e:82:1c:1e:ea:46:fd:27:d7:47:65:
f3:d4:76:81:8c:ba:90:7f:01:1d:57:8a:c3:51:68:
05:a4:80:e0:73:7d:07:68:c5:76:58:fa:ec:05:b3:
21:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3E:95:F5:5B:4F:F7:71:76:19:DD:FD:05:44:02:35:2F:82:FE:E1
X509v3 Authority Key Identifier:
keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5a:07:af:4f:36:63:0f:57:c3:d9:ac:fc:78:dd:26:bd:15:
b3:ac:15:d7:55:05:00:8c:95:0b:76:f9:1c:ef:7e:ba:87:6b:
a3:4e:27:2b:bc:c1:67:44:1d:41:c5:9c:da:24:74:5f:06:57:
df:e4:d2:e1:a8:38:a8:68:fe:be:95:ce:7f:66:65:a0:0d:05:
75:dc:aa:f8:4c:d3:c6:5d:ed:f1:2c:5c:0e:12:69:be:c7:09:
74:29:4e:d8:44:b6:5e:69:b3:3e:33:7c:89:96:79:aa:19:c7:
73:99:78:7e:d5:da:65:cd:93:b6:fa:9d:29:0d:62:1e:fb:73:
f3:bb:7d:ae:61:13:7e:2e:86:8c:a6:11:bd:e7:5d:53:13:71:
0b:9c:5e:46:98:b8:53:44:c6:23:86:96:8c:28:e1:e8:e6:11:
bf:c4:59:92:22:52:0a:d1:51:32:45:11:a6:c8:77:53:a0:33:
d7:1b:28:93:8a:d3:a0:c5:ab:50:75:c1:38:cd:e3:9f:65:1b:
cb:b0:5c:45:d9:e9:b6:13:17:d5:e5:e6:12:82:c0:9b:fb:3b:
af:71:66:45:83:a5:09:f1:38:c7:6a:d8:10:da:8d:5e:cb:51:
bb:7c:3c:16:77:8b:94:7c:c7:be:a1:6f:b8:98:fc:09:3d:b2:
64:a4:56:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:14:12 2025 by rpki-client