
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier: +xVF7zj0djB9ZTF+0KZFBYax8dQmRsrdhEHnJVDiaZI=
Subject key identifier: 4A:E9:24:64:34:9C:93:6A:B1:08:38:CB:8D:F0:A0:E0:2A:28:8F:E8
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 01974B1FAEA443B3F9A882321EC188E92384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number: 0AD8
Signing time: Sat 07 Jun 2025 16:00:56 +0000
Manifest this update: Sat 07 Jun 2025 16:00:56 +0000
Manifest next update: Sun 08 Jun 2025 16:00:56 +0000
Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: te0SMlQeWVNSMa7MthL+sHe2f7UIyEKUBAOvGScnjHI=)
2: sQ3JYG1qE-VbpJkkUv7gjERWISw.roa (hash: Eu9amXI9PIYJvHJFlrP4Ds55UyoCv7usyPM4xlXYBx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:ae:a4:43:b3:f9:a8:82:32:1e:c1:88:e9:23:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Jun 7 16:00:56 2025 GMT
Not After : Jun 8 16:00:56 2025 GMT
Subject: CN=4ae92464349c936ab10838cb8df0a0e02a288fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:63:08:d3:dd:42:59:cb:6e:e3:c4:e2:59:38:
fe:a2:5d:71:94:ce:7e:83:31:bb:c9:d5:24:12:b3:
a9:31:a4:9f:b4:3d:2b:48:ff:1c:f2:e8:85:43:e1:
f9:d7:0b:72:18:17:9c:b0:dc:d3:de:2b:fa:c6:29:
99:9d:68:ba:c9:df:9f:fb:b1:47:92:4a:a5:f3:8e:
50:38:ca:37:3e:1d:33:2c:6c:9d:4c:91:10:9f:f9:
16:a5:f5:35:19:e4:65:e1:b4:73:22:6b:f8:88:62:
26:45:61:46:a9:0c:f0:d1:5c:95:11:99:68:47:67:
6a:a3:1f:d1:51:3a:45:e1:81:70:7d:74:f3:54:d2:
4d:c7:3d:2c:03:a6:35:da:e3:ae:a2:e0:87:29:93:
70:88:6c:76:78:9b:a2:86:d2:4b:ae:c9:f4:fd:87:
fc:3c:90:9b:70:d7:81:ed:e6:ed:72:5f:17:0d:4a:
30:0f:e4:95:67:1a:52:20:18:dd:95:cf:00:cb:e0:
45:4d:06:42:81:e2:fc:36:b5:19:dd:67:cf:45:4b:
e6:12:37:2c:38:ea:18:56:b6:58:87:c4:c7:91:c5:
f6:f6:ee:80:4d:4d:de:49:dd:c4:d9:50:b9:38:b8:
04:c1:7d:a5:12:d1:f5:6e:31:0c:5c:d3:6b:3b:b9:
2d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E9:24:64:34:9C:93:6A:B1:08:38:CB:8D:F0:A0:E0:2A:28:8F:E8
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8f:ca:73:bf:f6:20:b0:d5:3e:6f:3f:83:b1:db:7f:c7:ef:
f9:03:0f:ff:7b:23:87:20:c3:fb:a3:71:c8:a4:cc:bb:bc:94:
d3:c4:cf:c2:69:f0:23:a5:8a:17:2b:ec:88:15:ac:36:bd:52:
f5:68:42:24:10:3f:bd:15:19:a3:5e:48:45:42:02:27:84:a3:
f9:f0:7f:60:80:17:5f:94:cb:e6:bd:26:71:44:c7:4c:5f:ad:
0b:26:5b:ea:8e:d8:28:9c:35:2d:75:d9:4a:be:a0:f6:f6:51:
97:37:3b:81:0f:a6:f1:24:03:16:0d:30:ed:36:f3:03:7d:aa:
91:d2:8c:92:42:ec:1d:b1:62:b9:9d:97:69:cb:28:6b:8d:67:
10:c1:8c:a2:2a:0a:44:55:a0:11:29:11:41:7b:87:1a:b4:00:
ed:e8:ba:cd:9b:04:4c:42:68:3d:79:ba:16:2a:2a:2a:52:ae:
f7:5a:79:3c:42:8f:7f:9d:96:8c:80:9f:17:8a:21:55:e7:84:
87:e4:23:1d:41:76:3a:fe:d7:51:b1:37:22:9a:1b:b3:72:43:
04:56:16:a6:58:ba:e4:34:12:56:ab:ec:52:ed:c0:43:1a:43:
59:ea:2f:de:34:45:a3:dc:70:ea:96:bb:a1:c5:df:d9:ee:58:
cf:82:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:51:41 2025 by rpki-client