Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: 2Wem6sqdDnlkSqT40Uugpj8DZcVqTAwa2Iq7WY2POkw=
Subject key identifier: C8:A1:F4:8A:7E:B8:19:63:DE:8B:91:09:66:4A:4A:DB:98:E4:BD:A6
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 01974E204D143E956557798B65C0B125E009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 06:00:29 +0000
Manifest this update: Sun 08 Jun 2025 06:00:29 +0000
Manifest next update: Mon 09 Jun 2025 06:00:29 +0000
Files and hashes: 1: M_ZucCsuJb1Fkv6phLwqAkn6J0Q.roa (hash: f0NnZS14FEEVK+otZH9sTWdHvzqdq6zBgg0/lm/taxs=)
2: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: hYbgVkj2jyZxfgqhUq4aRRC7g0cRao+SWu03WzEUVb0=)
3: kNpqx0tZlqJV-cV06kVoinEAEvE.roa (hash: yXJYbGR5++qBsVQrRHL4bHSCZiui648QCWfzX8PBFak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:4d:14:3e:95:65:57:79:8b:65:c0:b1:25:e0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Jun 8 06:00:29 2025 GMT
Not After : Jun 9 06:00:29 2025 GMT
Subject: CN=c8a1f48a7eb81963de8b9109664a4adb98e4bda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:e7:a6:7d:ca:8f:93:18:0a:c7:bc:bb:44:
bb:02:d3:af:56:5a:9d:54:41:d5:6f:8c:99:93:ce:
43:3b:c7:a4:13:49:bf:ec:da:bc:bb:8f:2e:e9:fd:
c1:3f:17:fc:56:00:fc:c3:93:13:d9:0f:83:2e:8b:
73:21:3c:f4:e2:be:b9:4d:06:bb:7e:59:bc:3a:d9:
b2:7a:5c:d7:4d:d8:43:75:80:31:7d:40:24:cc:e9:
cd:05:39:31:6f:24:e0:00:b2:60:c6:fb:67:4b:84:
af:92:24:21:5f:5c:3f:6f:52:60:ac:f0:c1:3c:2a:
01:57:cc:69:bc:17:a1:da:fb:6a:6c:c8:be:91:24:
2f:22:ca:4a:a8:29:84:1f:c5:3a:8b:1f:63:34:a4:
61:3e:bf:27:0d:95:ef:e4:29:d0:36:7e:81:02:61:
6e:12:b6:09:4c:4c:31:c4:3c:62:00:cd:ed:7e:c3:
ad:1e:80:bc:69:c9:3e:8b:2c:06:a2:ce:b0:6e:9a:
6a:14:74:35:7a:90:7e:07:7e:e4:48:e4:bb:98:e2:
99:7f:9d:65:90:86:99:2f:a9:2e:91:1c:ae:45:62:
91:79:21:bf:f2:bd:4a:ef:fe:66:e8:07:9a:9c:33:
95:bc:bf:3c:ba:d5:8e:b6:dc:69:a8:78:ab:07:84:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A1:F4:8A:7E:B8:19:63:DE:8B:91:09:66:4A:4A:DB:98:E4:BD:A6
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b6:55:37:6e:43:7c:26:18:1b:4e:b2:71:4a:46:0e:41:c7:
9c:a9:da:a5:bf:22:ce:4a:70:bd:e3:48:4f:cd:1c:76:d0:d5:
99:3c:20:a6:29:d5:88:05:5f:7f:5c:7d:24:61:a5:15:ba:01:
62:34:b3:02:14:66:e3:6a:09:64:fd:5d:77:9b:7f:3f:82:db:
23:0c:6e:fc:dd:37:c5:88:53:29:da:af:a9:54:50:9c:7f:81:
96:68:9b:31:1a:a6:67:a0:d0:c4:0b:b3:6b:f7:4c:ab:ed:f7:
6b:0b:a4:76:2e:77:77:6a:35:a7:9a:d5:96:b4:f6:61:e8:89:
6f:b9:29:01:ee:a3:fb:82:54:59:77:05:73:01:c5:27:7c:95:
7d:66:b5:84:69:e0:e3:85:6a:c5:c7:6e:be:97:33:1d:e5:91:
47:2a:84:35:5b:32:7f:ca:2c:56:a7:8a:b9:56:7a:f5:7c:ea:
ce:3c:e0:dd:85:be:bc:3f:c7:31:a0:54:4c:40:97:19:f6:61:
ab:45:61:81:fd:1a:69:07:94:ec:d1:1f:91:ea:66:e6:7c:07:
4f:98:62:1f:34:31:78:88:aa:be:63:27:60:af:27:b0:50:78:
06:a4:f6:71:28:cd:6f:67:6f:aa:7a:96:fd:01:86:d4:85:01:
1a:9f:b7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:14:24 2025 by rpki-client