Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File: A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier: jYVlvy1xZjiGnZV0VO9SCN9nsdl759QJYCMfRGDwO0w=
Subject key identifier: 69:78:90:4C:37:87:94:B3:65:87:37:A2:39:84:D2:04:4D:28:DF:AD
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 019747E7A7E193467B0CDFE5AA238A453EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 01:00:53 +0000
Manifest this update: Sat 07 Jun 2025 01:00:53 +0000
Manifest next update: Sun 08 Jun 2025 01:00:53 +0000
Files and hashes: 1: 3TsgJTCqJzOcEWU1D_eLkn9vlVQ.roa (hash: FocquAr/i2n2K968hOeO0r6QOp/B6G9WWrm69jbwUbg=)
2: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: oPcaET89+2iTjxZfvNQvPe2T1lpkZcMI57y0/y9alI0=)
3: XfddXSazKRwlAti_xB3GX9aF4dA.roa (hash: 6Q++0e98qDqGZws++WyKl8Tb8aXZP/cVoTXv/5uSSrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:a7:e1:93:46:7b:0c:df:e5:aa:23:8a:45:3e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Jun 7 01:00:53 2025 GMT
Not After : Jun 8 01:00:53 2025 GMT
Subject: CN=6978904c378794b3658737a23984d2044d28dfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5b:f5:90:b6:08:98:4f:cd:9f:8f:ba:e0:36:
2e:4c:40:1b:e6:d0:36:de:06:6e:08:9f:80:46:bf:
bd:99:8c:ac:39:57:ab:41:8d:74:d1:fb:28:64:76:
2a:47:68:e7:b9:bc:66:3c:5c:f9:6c:38:56:66:2c:
d4:78:51:23:2b:ab:b1:c8:c3:cf:4e:a5:b2:b2:97:
37:14:b7:29:89:52:43:b2:a7:b6:fd:8a:74:f7:bc:
f4:b3:8d:9f:c0:74:17:25:64:70:ae:38:17:8e:a4:
a1:b2:96:c1:ec:60:12:54:b0:86:aa:df:2f:40:39:
7a:8f:06:34:c2:38:97:7b:ad:e2:ec:21:48:a9:67:
f7:6f:be:71:8b:2f:15:ce:19:4c:3a:0d:ab:b3:68:
e3:f5:e5:48:00:60:8d:5e:30:71:77:53:a0:3e:30:
44:66:5a:f0:a6:5a:ad:71:5a:53:cc:b1:81:f4:b2:
b1:2b:d8:84:ae:93:ee:a5:e3:19:9b:cb:ff:7e:09:
ff:58:bb:7e:81:0c:ce:80:31:b7:8e:7f:09:53:cf:
cd:8e:ac:be:74:ee:23:33:07:0a:e1:5c:2b:bd:99:
20:99:cc:79:5d:cd:1c:e4:c9:92:7a:42:b7:d4:31:
13:e9:0b:4b:41:78:7a:51:eb:ce:ad:eb:00:70:d0:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:78:90:4C:37:87:94:B3:65:87:37:A2:39:84:D2:04:4D:28:DF:AD
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1f:7d:70:50:5c:1b:29:01:65:9c:dd:84:5b:6f:5d:77:8a:
27:5e:29:81:3c:4d:a7:66:dc:df:66:63:05:49:6a:5b:b3:c4:
bd:1e:2e:26:17:95:b6:79:76:af:f5:55:07:49:fc:b8:74:6f:
e8:9c:e0:1a:42:bf:a3:2a:a2:89:81:e5:6b:d2:da:bd:d8:e8:
54:77:6e:b3:65:c4:72:b3:9d:3b:2b:e2:ef:bb:2b:a3:8b:64:
1d:9b:dd:ab:d8:4a:bf:d5:f7:85:b6:43:fc:80:22:56:30:64:
79:53:78:b5:c4:ec:60:6b:83:ba:02:46:d6:95:23:7f:c3:92:
b7:4c:0a:3d:0b:93:65:0e:52:64:81:eb:c3:aa:f0:c5:cf:e2:
ef:20:87:7a:81:79:e6:83:05:41:1b:30:76:2b:7b:ba:e1:a2:
03:0b:4c:c9:7a:95:8b:8b:f7:e6:6b:b4:ba:5c:59:30:b2:0e:
53:70:56:fa:48:ea:0b:1e:09:42:25:73:7a:cf:a3:b2:5a:fd:
dd:47:70:ee:94:8f:b1:f1:8f:1e:a5:be:ed:9d:6e:3d:15:2c:
16:7f:21:71:58:ea:a6:7c:f0:5e:37:52:bd:23:f2:67:3d:af:
bd:7c:e3:8a:18:7e:11:f1:7a:e4:a1:9b:a0:83:99:33:0b:a2:
a1:6a:ee:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:27:23 2025 by rpki-client