Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File: S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier: 23ogy2LTpFhcgyJTTX5jmPKMHAsCnS+XN6igSWmx5w4=
Subject key identifier: 4E:ED:AD:B3:3E:21:EB:AF:34:1A:D8:C7:86:26:4A:5F:BE:21:CF:9C
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial: 0197488CC89F489999E17A46F0E47ADF6B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 04:01:15 +0000
Manifest this update: Sat 07 Jun 2025 04:01:15 +0000
Manifest next update: Sun 08 Jun 2025 04:01:15 +0000
Files and hashes: 1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: tVDb83XA07GkE97PaQRpXRBGGkZgxc7Mw2a5FbZNmNU=)
2: f3uE1VDv54J39oNndZpR1jGOB3k.roa (hash: VxNR3ak8y3zHWEe06TEiHqAXTE53GXjV8ny9xJNog8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:c8:9f:48:99:99:e1:7a:46:f0:e4:7a:df:6b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Validity
Not Before: Jun 7 04:01:15 2025 GMT
Not After : Jun 8 04:01:15 2025 GMT
Subject: CN=4eedadb33e21ebaf341ad8c786264a5fbe21cf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:c8:a5:f4:65:a6:6f:a9:8d:33:34:84:3e:
6b:5a:28:83:0f:94:37:48:73:ca:a8:68:51:c4:ef:
05:cb:5d:c0:d1:d3:b2:ac:58:68:df:4e:e6:5c:ff:
2c:44:93:99:b0:30:8f:84:94:3e:8c:27:6c:ce:65:
34:e3:4d:c0:cd:b8:7f:e8:25:2d:34:92:c0:15:05:
6d:ec:50:49:4f:4c:22:c7:56:b2:af:67:d0:70:76:
d9:96:4d:6d:29:f6:99:43:c8:c7:d3:e6:81:01:8c:
99:aa:08:b9:58:b2:8a:c1:16:f6:58:a6:d2:28:b6:
3e:ac:81:fb:b0:b3:a5:ef:f1:ff:9c:39:7a:3e:16:
8d:50:83:57:79:90:95:1a:4b:78:97:cd:b6:52:1e:
95:5b:87:34:c2:c7:96:fa:6d:77:9d:05:10:51:e2:
5e:76:7a:f8:4c:78:dd:2b:3b:ae:bb:ee:c9:a9:3a:
85:c8:ac:1f:a8:94:a5:95:b9:ef:fe:47:12:6b:92:
ba:8e:33:80:a2:a3:8f:bb:0b:3f:ce:ea:2f:c1:68:
65:89:16:1a:cb:b7:e9:c4:3c:e6:ea:2e:db:1d:eb:
57:ed:88:34:56:12:99:b1:8f:9e:2a:c9:27:e1:c2:
b1:bd:6f:d0:2e:4e:97:b5:54:55:5e:ea:d0:12:c8:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:ED:AD:B3:3E:21:EB:AF:34:1A:D8:C7:86:26:4A:5F:BE:21:CF:9C
X509v3 Authority Key Identifier:
keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:20:a3:21:a4:a8:81:9f:80:66:88:0b:b0:89:42:d9:bc:00:
13:4b:fb:8f:5b:10:ce:f5:53:c8:8f:23:d3:39:f2:d3:1e:39:
ee:06:60:de:c8:8f:f0:8c:24:a1:1c:d6:97:08:84:dc:f2:4e:
bb:cd:1c:36:69:76:9f:b1:ed:66:ec:ca:62:28:b6:c1:e6:34:
7f:20:70:99:08:bb:3d:37:61:98:bd:9a:58:7c:e7:64:5f:05:
44:35:a7:62:e2:23:75:19:6a:f0:1b:4e:02:92:54:43:aa:a1:
01:c9:12:82:b3:c2:2f:59:76:2c:31:3e:f9:69:a9:60:6d:4a:
ec:4f:f9:0b:f3:05:bb:49:98:29:3a:44:f8:d4:62:3e:b4:13:
77:59:82:3d:43:71:86:27:f7:8a:00:a2:8e:3e:79:1b:88:ff:
bb:a3:e0:03:8c:41:a0:01:41:25:53:f4:07:09:f3:31:1c:c4:
44:68:f3:27:d0:54:63:1f:55:d9:24:a3:8b:5a:43:05:d1:7f:
94:cd:e1:31:e0:bc:05:8d:48:d1:ed:23:f7:3f:4a:3e:26:e0:
5b:db:73:f1:23:16:8c:f3:16:9c:22:7f:74:86:31:07:5b:91:
c0:d5:5a:15:a6:5a:8e:4e:93:55:78:54:bc:ea:c2:8e:92:e3:
12:ed:49:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:47:06 2025 by rpki-client