Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
File: fKlis7F-7waeOrohKIuyxkIhv-0.mft (raw, json)
Hash identifier: 75QfjPXAbt7ri+b8ryZzZ5Q0fqQQncAnuL+x74RBxKw=
Subject key identifier: 8A:D5:76:33:48:FE:C9:9E:CD:2C:3B:C5:25:53:7E:C9:D5:08:54:2F
Authority key identifier: 7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
Certificate issuer: /CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Certificate serial: 01974666E47528B9830FC694B618BA4110A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
Manifest number: 0158
Signing time: Fri 06 Jun 2025 18:00:37 +0000
Manifest this update: Fri 06 Jun 2025 18:00:37 +0000
Manifest next update: Sat 07 Jun 2025 18:00:37 +0000
Files and hashes: 1: KHa9mVj-WNELt7pSCK9ooFTGrNA.roa (hash: UqMuiUZn2GrnQQZzSZEJPEZOfxeCUD81uoCK7byK2Vc=)
2: fKlis7F-7waeOrohKIuyxkIhv-0.crl (hash: zh7gL4/TAwJDgYJvcRillW7+yT5qsdHVc0+gYD+udh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:e4:75:28:b9:83:0f:c6:94:b6:18:ba:41:10:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca962b3b17eef069e3aba21288bb2c64221bfed
Validity
Not Before: Jun 6 18:00:37 2025 GMT
Not After : Jun 7 18:00:37 2025 GMT
Subject: CN=8ad5763348fec99ecd2c3bc525537ec9d508542f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:62:52:94:fe:55:c7:a2:93:d5:4d:5d:27:50:
e1:54:9f:e0:80:95:17:66:cd:14:ae:05:7e:38:da:
94:21:8a:b2:7d:73:1c:b5:90:2e:51:c0:4d:3d:b1:
1d:cd:98:94:70:5d:21:80:36:1e:a7:ac:64:65:43:
61:d1:b7:80:27:c9:84:22:c9:24:23:8e:13:c7:50:
a1:00:84:61:f5:2a:2e:c9:d8:7b:f7:ae:c1:f6:c2:
5f:91:3e:0d:00:8f:d8:4c:f6:e5:5c:8f:33:08:f9:
a5:5e:0d:14:70:06:7d:2f:e8:a3:a7:95:f3:48:69:
ac:58:7c:ab:51:a6:66:d8:9e:34:6e:cb:ba:e7:2f:
75:74:12:a4:19:26:bf:6e:92:90:39:6d:8d:aa:8d:
56:e4:3b:79:bf:38:52:99:67:fd:03:c6:36:16:37:
e6:79:ea:51:b2:b2:1f:cd:e3:be:6d:f5:45:30:b8:
2d:0b:7a:2c:35:13:54:8d:c7:01:85:7f:78:73:d1:
52:65:c7:9b:68:0a:fd:76:cd:fe:28:d2:0f:79:6f:
a3:a1:47:df:da:17:b0:6d:83:77:2e:17:64:a3:f2:
c4:b4:ab:b2:dc:ce:b5:d5:03:12:15:64:de:85:50:
f6:67:58:ed:4f:d4:57:6e:80:da:37:ac:96:fd:05:
0d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D5:76:33:48:FE:C9:9E:CD:2C:3B:C5:25:53:7E:C9:D5:08:54:2F
X509v3 Authority Key Identifier:
keyid:7C:A9:62:B3:B1:7E:EF:06:9E:3A:BA:21:28:8B:B2:C6:42:21:BF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKlis7F-7waeOrohKIuyxkIhv-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f017df-0d0f-4a36-ac25-4968aaafc59b/1/fKlis7F-7waeOrohKIuyxkIhv-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:48:1a:a3:5c:03:b8:70:05:9e:f0:96:ea:6d:38:ff:32:03:
e0:ed:83:94:98:65:c1:3a:53:54:a4:03:e9:0c:2f:71:62:fb:
4f:d5:bc:d7:cc:89:fa:48:e3:f6:4e:5f:77:9a:3a:f0:96:97:
84:21:a0:2a:ec:91:35:e8:24:c1:44:70:53:9e:05:cc:e5:2c:
d2:d5:bb:eb:79:05:3d:d4:53:74:d6:01:ef:a6:d1:96:a7:1e:
f6:aa:5b:89:7d:c0:c4:bf:df:fd:d4:a8:00:33:0a:6f:57:36:
31:be:ca:ac:4a:3a:89:d7:d5:51:10:51:72:c3:05:17:ca:7a:
09:61:49:01:60:ab:45:e3:25:93:05:73:2c:93:d5:5d:3d:18:
60:e1:c8:69:6c:d4:38:27:ef:59:95:f5:96:54:f6:48:9f:7e:
7d:53:ad:11:cb:87:c4:5f:03:df:36:c4:3a:d4:a1:0c:41:c8:
ea:2e:72:c2:93:1e:80:8c:2b:91:02:b0:16:21:8c:a6:6b:e8:
6e:4c:22:e8:70:6e:42:07:c7:14:e8:11:38:a0:d6:c9:cc:4b:
54:12:5f:98:95:ae:70:fc:5c:a4:82:38:cf:f0:b7:51:38:65:
52:fe:2b:42:5b:1c:d2:7b:32:74:ea:84:93:45:af:ab:a2:1f:
f9:19:43:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:37:31 2025 by rpki-client