Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
File: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json)
Hash identifier: Sf4+59yGDbvE55jQahkckNytf3zGc6YK98LU3+PmfEk=
Subject key identifier: 24:47:D8:77:CB:09:47:DA:32:0A:CC:54:0C:5C:69:B1:1D:D2:11:B8
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial: 01974A7A4D39C4E33ED7B72CDB4150CB1E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 13:00:18 +0000
Manifest this update: Sat 07 Jun 2025 13:00:18 +0000
Manifest next update: Sun 08 Jun 2025 13:00:18 +0000
Files and hashes: 1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: f48Szw/b/9+BFgvtOKiq3XtyqaFj+MCpR64Br5kvqMg=)
2: KK6CnYNVLgkO9qFyFOT9UGvXJYI.roa (hash: ZHlrP8V5BtXECEdhL9eJuVBZKLMvwmVQC0U5b4cXw08=)
3: o5N_jAG9g_aL4MkwpX9OBq0Dy-k.roa (hash: M8ydZ1fG/pikMq2g2Lj2Oo2CSVv2VUo2aqU5TzG0PFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:4d:39:c4:e3:3e:d7:b7:2c:db:41:50:cb:1e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Validity
Not Before: Jun 7 13:00:18 2025 GMT
Not After : Jun 8 13:00:18 2025 GMT
Subject: CN=2447d877cb0947da320acc540c5c69b11dd211b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f3:b5:db:ab:0f:a9:03:fc:a2:f8:15:d4:b0:
93:28:1d:32:0e:9d:92:92:52:36:fa:ad:c1:db:b8:
52:1e:d8:fb:b9:22:c1:d9:7a:d4:a8:62:3a:f0:08:
9c:9d:3d:0d:71:ad:15:9f:d3:cd:ce:80:2a:af:12:
30:a6:f3:a6:3c:a0:0f:7d:9d:de:4a:bc:4e:b6:82:
a4:c1:aa:e3:07:61:e0:71:10:9e:64:12:01:55:96:
be:c3:8b:dd:16:67:c9:ef:e0:70:1a:23:d0:15:52:
96:54:48:82:24:a8:72:39:5f:0a:64:09:74:ca:a9:
7e:01:b1:9a:ae:b7:5f:95:45:b3:42:2c:16:8c:60:
fd:2d:12:35:26:fa:03:37:53:21:5f:25:4c:b8:37:
1a:04:f6:4b:9c:9c:c8:81:df:b1:99:8a:49:cc:1e:
bc:d1:ac:e2:1e:88:4b:04:47:96:f4:18:0c:fa:9e:
19:fa:62:df:86:f0:8c:5b:ca:7e:b7:86:25:ee:40:
a6:fe:87:94:96:a2:e3:0e:55:67:53:01:4c:85:1a:
c5:ec:7e:35:9a:3f:ca:c0:6d:42:cb:3c:6f:36:ff:
72:b0:58:47:72:9c:bf:0b:e4:07:63:b2:a8:e3:94:
49:13:91:33:01:d8:49:a5:d7:29:69:01:78:1b:6e:
83:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:47:D8:77:CB:09:47:DA:32:0A:CC:54:0C:5C:69:B1:1D:D2:11:B8
X509v3 Authority Key Identifier:
keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:91:58:32:fc:0e:97:9b:a1:23:2a:50:9d:1c:b5:ba:58:33:
37:1d:10:52:e1:b5:31:75:58:eb:00:88:35:a6:49:fc:fe:35:
37:6f:06:6b:73:67:d2:da:e3:f0:5b:58:e4:04:68:ec:d2:95:
04:b3:7f:0f:53:22:5f:de:b5:a8:b5:dd:ad:e8:89:e6:df:f0:
d8:9d:2f:33:a1:83:45:6a:54:27:b9:b1:b2:63:03:28:39:40:
63:4a:9d:fa:a0:f9:90:06:dc:c3:96:99:b4:2f:a3:93:97:46:
32:b2:17:bc:fa:28:01:fe:6a:df:ac:77:90:35:3e:aa:72:9c:
26:70:07:55:ea:23:2f:31:60:84:15:63:3c:7a:bd:2f:3a:2a:
1c:09:5f:56:e2:f3:eb:c0:21:5d:bf:9b:e6:7e:92:2c:e6:9a:
c8:d7:c0:94:f1:9e:9a:5e:77:6c:d6:2d:02:f1:d9:54:24:66:
8a:e8:16:bb:d5:64:39:0a:83:a4:72:a0:b1:db:8a:93:9f:94:
cf:15:81:f9:08:40:24:fd:8e:2a:82:55:26:d0:46:9f:a1:9b:
c0:9f:e3:3a:ca:9c:05:9e:82:1e:f2:74:08:e7:09:e9:96:07:
a4:25:10:33:74:fd:2b:2e:d4:39:f9:10:fa:7f:ab:56:a2:e4:
58:57:13:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:43:41 2025 by rpki-client