Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
File: S82iMJZ8_y7eIXfy0zKvCst-ULw.mft (raw, json)
Hash identifier: hzFnVoU9ZMHRGE0GrbRp5lY13WDqdse+n5QSVtUY/wU=
Subject key identifier: 8E:F9:E9:45:FB:EE:CF:13:9D:5F:12:3E:E5:13:BB:80:B9:A0:6F:34
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Certificate issuer: /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial: 01974BC49CBD9A52F3FFF8C4016F0AD824EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 19:01:05 +0000
Manifest this update: Sat 07 Jun 2025 19:01:05 +0000
Manifest next update: Sun 08 Jun 2025 19:01:05 +0000
Files and hashes: 1: Fu8psE_bzNyJ-uC9sx-rTJ-3C5Y.roa (hash: reqjwr/lIQUNR5CfmDP6LbkF/9R8ba/CN2hm8CCraWc=)
2: S82iMJZ8_y7eIXfy0zKvCst-ULw.crl (hash: T7VO0b+QMxYTdFArZfdG2FYuJnu1/7Fy+JOKzluVeZE=)
3: zxQl6jvGeb1c6IVFjqYVLDZ62L0.roa (hash: 1fee2j1QaONApl9ibC5gkmW09S49dKdtErXLxO2GvfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:9c:bd:9a:52:f3:ff:f8:c4:01:6f:0a:d8:24:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Validity
Not Before: Jun 7 19:01:05 2025 GMT
Not After : Jun 8 19:01:05 2025 GMT
Subject: CN=8ef9e945fbeecf139d5f123ee513bb80b9a06f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:b7:fd:fd:5e:17:b8:64:11:66:d9:07:39:
10:97:34:73:16:40:9e:76:cf:51:93:08:d3:20:7c:
b4:cb:8e:74:24:4c:ac:1f:e0:f1:2a:30:fa:7f:c2:
7c:5b:7b:15:30:58:fe:15:9d:0d:72:be:52:80:0e:
86:4d:80:8b:2e:a2:be:24:59:96:73:60:1f:50:19:
5e:43:94:30:4c:dd:3d:0d:5b:2b:52:ac:fc:98:a5:
9b:33:1a:bf:15:65:43:a0:af:83:07:86:52:7a:c7:
56:c3:b0:13:b7:74:bf:5f:59:69:97:d4:10:e5:fe:
a1:61:10:58:6d:96:44:1a:f4:72:2b:37:41:88:58:
18:8a:d9:3e:f2:3b:6a:ef:94:21:d8:02:81:ff:e1:
3f:67:94:64:ba:2a:94:45:8f:e9:66:55:26:a7:9b:
b4:4e:95:1f:29:85:99:45:9b:f4:1b:b5:66:9a:66:
93:28:b4:78:c0:ff:18:d8:be:a3:11:7a:67:9b:48:
ab:4b:20:ad:e9:8f:cd:a3:cf:71:b8:32:eb:16:99:
4d:1b:76:71:44:dc:06:c7:a5:5b:f2:e4:d8:b8:58:
93:14:ef:b6:a4:3b:c4:27:1a:4e:8d:78:d6:84:77:
fa:7e:68:77:a1:a5:27:f8:1e:38:c5:64:8d:b5:d4:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:E9:45:FB:EE:CF:13:9D:5F:12:3E:E5:13:BB:80:B9:A0:6F:34
X509v3 Authority Key Identifier:
keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:14:d5:3d:e6:01:a8:33:ce:2d:b2:cf:0f:17:13:be:c9:0d:
06:6b:0b:81:82:10:cc:98:75:5a:47:8a:3b:a4:bc:a4:b7:8d:
0b:2e:71:6c:87:7a:61:c3:4f:84:f9:8b:40:20:7f:f9:97:95:
c8:a1:2f:78:db:d2:04:e0:75:c5:0b:88:ce:78:dd:29:0c:16:
6d:99:19:e3:9c:36:c8:c4:62:24:ba:6f:3e:f7:36:04:d3:ea:
70:c5:e9:65:d3:99:92:66:07:41:93:74:ac:7b:75:d7:1e:f1:
92:f9:09:b3:2f:a5:00:62:d7:c2:ee:ce:da:59:75:ac:25:9f:
ee:4a:0e:2f:24:ea:47:1f:b4:e2:f9:9f:e6:a1:c0:ed:e2:7e:
6b:8a:24:ab:e8:3a:7f:97:d6:78:b1:4d:b8:fb:f3:5d:20:66:
82:e2:89:2b:d9:ac:bd:93:17:ee:ce:9e:67:de:1b:dc:5f:6e:
81:25:a1:ba:38:63:76:bd:40:e2:f5:31:b9:96:7c:e5:b0:48:
08:c8:f5:86:43:af:dd:30:3d:1d:8c:84:1c:5b:6c:90:23:ba:
ac:02:b7:01:1c:c8:57:bb:f9:51:94:24:21:50:83:57:24:79:
93:94:91:e7:d7:5f:01:59:36:8c:68:7d:0a:39:f7:10:fc:38:
81:07:75:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:58:47 2025 by rpki-client