Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: qP3dvOqME2sS1cPr2OIIa5nTEVBM7oEh8Y/6rnc+CwI=
Subject key identifier: 9E:1A:59:ED:E8:16:39:93:3E:D1:1D:98:DF:EA:D5:36:9B:52:8B:B3
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 01974A7AA1489587F66190E170405C287912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 13:00:40 +0000
Manifest this update: Sat 07 Jun 2025 13:00:40 +0000
Manifest next update: Sun 08 Jun 2025 13:00:40 +0000
Files and hashes: 1: deIOkmJ8ssMd2RwtI-v-jMre1M8.roa (hash: 1DQjFOIdMCv4n8BARwPWSteFX1+/0FvbC04tqMoZb0Q=)
2: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: z1QqeqDee+PkujcEHxbkraJOww/T1u0cBttwaKmb/bA=)
3: pNxIm0SmH7kBUMbare2mFQXDHOk.roa (hash: FL47b2q1GAJAcT+EDiWHDQ+iV/Lo12DMIiUY1wrMTeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a1:48:95:87:f6:61:90:e1:70:40:5c:28:79:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Jun 7 13:00:40 2025 GMT
Not After : Jun 8 13:00:40 2025 GMT
Subject: CN=9e1a59ede81639933ed11d98dfead5369b528bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e6:6a:b9:15:ef:ac:7f:91:93:46:32:93:9f:
92:c4:b7:30:4e:36:39:54:59:f1:9f:13:1f:a6:7a:
bc:e1:35:d5:22:9c:88:7b:cf:f1:af:8d:fd:12:4d:
2e:3f:30:af:30:d3:45:ae:7d:bc:ad:08:0b:d8:be:
d5:d5:6a:e5:0b:7d:8f:c2:b7:26:96:3c:92:19:bb:
71:c9:a1:3f:f5:23:1a:de:06:a6:e2:fc:d0:21:21:
d9:68:fc:e4:db:e4:34:e6:e9:d1:4e:c5:db:ee:2e:
9d:a1:3a:5a:c5:af:cd:ac:e1:de:b9:5a:11:1d:55:
b2:13:73:3e:8a:3a:dd:0b:77:22:20:cf:14:c7:93:
a1:23:82:a5:13:c3:69:a4:74:29:48:db:68:d2:a2:
3a:4a:d0:79:2d:a6:2f:5a:4d:c5:e6:b3:2e:b8:9c:
f4:2e:c1:c2:49:d3:7a:3b:ab:f7:fe:40:bf:c9:92:
c2:37:52:6f:f8:30:90:5c:77:fa:9b:52:e9:1b:6d:
7c:46:b2:0b:97:a1:16:4b:4a:45:1c:3c:db:17:d2:
45:81:d2:99:4f:92:93:21:e0:f0:f0:73:0c:b3:3a:
c8:64:b6:f7:38:65:ac:97:ca:64:1f:a9:f1:4d:eb:
7c:38:44:d8:61:5b:b8:d2:2c:9e:e7:70:e5:d4:df:
a2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1A:59:ED:E8:16:39:93:3E:D1:1D:98:DF:EA:D5:36:9B:52:8B:B3
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:fd:07:ae:20:6a:6b:83:7f:02:04:53:44:54:50:ef:6d:36:
19:91:cb:81:dd:43:a3:f5:31:06:98:cc:69:6e:9c:3b:c9:24:
45:d4:64:38:c5:e8:5b:2b:a9:6b:00:65:5c:12:e1:ca:12:ab:
e4:21:00:28:b5:d9:2d:a0:9b:48:4c:37:9d:ab:30:1b:54:b8:
a7:ad:f4:79:d3:99:66:4a:10:22:d0:98:e8:b7:2d:ea:51:25:
9d:e5:02:6f:89:88:ce:0a:5d:87:d0:9d:60:4a:b7:b8:b3:ea:
d4:3f:d4:2a:e0:70:f9:a2:16:88:a1:54:a3:7c:7d:ac:55:68:
ff:be:a9:0b:81:49:7d:4b:7f:12:a8:ab:c8:e0:bd:a9:0d:33:
6e:c9:b8:1d:44:d6:b8:a9:c9:0f:01:89:1d:ac:25:03:c5:35:
55:7b:c9:07:f4:aa:ef:75:d7:29:21:87:29:ed:0c:9b:98:70:
83:34:79:bb:3c:20:87:80:84:69:d1:f5:39:47:43:39:08:3e:
32:59:35:ce:d5:67:69:1f:db:44:78:d5:98:b6:c2:d3:a6:46:
95:d9:3a:0c:34:35:82:dd:60:bc:1f:19:cc:34:bd:b7:d0:c3:
20:3a:b4:26:90:d6:9a:c7:c0:d5:36:55:73:2a:cf:f8:11:5c:
bc:87:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:04:54 2025 by rpki-client