Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
File: mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft (raw, json)
Hash identifier: 8VX/z9GkLL06Hc7WIpC0dPUQwm+ZC86r0MwWCgNzeGs=
Subject key identifier: 55:FA:6C:B9:04:A1:44:48:5D:41:E1:25:37:26:13:70:4D:E0:BC:8B
Authority key identifier: 9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
Certificate issuer: /CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Certificate serial: 0197458B3F46C931A0B56F8C7227032E9214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 14:00:42 +0000
Manifest this update: Fri 06 Jun 2025 14:00:42 +0000
Manifest next update: Sat 07 Jun 2025 14:00:42 +0000
Files and hashes: 1: mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl (hash: JIf3u82w5p3wn1gzQIjWmb7lfEknP4qXTMssgJYvmM8=)
2: u9xJm6a8iv-NU5QCZgFCUyU_CIQ.roa (hash: a1ccdr3daMuWhcGyGVwNFs2+CFRCY21VguoNG+TE+38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:3f:46:c9:31:a0:b5:6f:8c:72:27:03:2e:92:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2ebbbcbe1bf6346ed476b83c7e13a784417acd
Validity
Not Before: Jun 6 14:00:42 2025 GMT
Not After : Jun 7 14:00:42 2025 GMT
Subject: CN=55fa6cb904a144485d41e125372613704de0bc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cc:36:3b:5f:3f:18:b6:91:f9:98:6e:ba:72:
5f:bc:ea:60:aa:b1:d0:12:39:6a:7f:6c:0d:14:f9:
29:f4:b6:cf:5a:4e:47:ae:c1:9b:5b:1c:65:4e:4a:
5a:5b:08:22:8f:54:b2:0e:5c:00:04:a0:60:77:61:
d8:ca:f0:69:d6:81:df:05:39:93:a8:fd:01:31:cf:
15:d1:99:05:e8:c1:b0:99:7d:b9:64:90:64:e3:54:
96:75:12:aa:8e:5e:ed:85:af:d1:0d:b1:47:4d:f9:
bb:76:5b:5e:31:7d:55:ef:35:79:e5:ad:21:0a:1f:
ca:4d:cf:a1:da:e7:ba:38:75:3f:7d:c3:ed:0e:99:
da:fe:7f:17:be:bf:58:5f:7d:c6:a9:a3:34:e4:02:
7e:ed:a2:fd:54:64:2b:ca:99:48:45:63:aa:5c:f3:
87:36:d8:fb:bb:09:ff:87:bd:e5:a7:ef:2b:3c:d6:
11:7c:4a:50:4f:d0:bc:6c:3e:46:ba:45:f9:ba:ff:
de:30:8d:35:c2:8a:8a:37:87:42:a3:c7:c7:4e:f4:
e9:9a:43:17:75:df:22:e6:b2:bd:cf:6b:c4:e6:a6:
05:06:0a:42:71:fb:d3:15:7d:f7:c6:aa:25:56:89:
cc:0e:5f:a4:1c:70:e4:03:e8:6d:ae:f9:03:eb:80:
aa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FA:6C:B9:04:A1:44:48:5D:41:E1:25:37:26:13:70:4D:E0:BC:8B
X509v3 Authority Key Identifier:
keyid:9A:2E:BB:BC:BE:1B:F6:34:6E:D4:76:B8:3C:7E:13:A7:84:41:7A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi67vL4b9jRu1Ha4PH4Tp4RBes0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/1a1cbe-217d-434b-ada1-44e219a9e96e/1/mi67vL4b9jRu1Ha4PH4Tp4RBes0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:11:c0:25:38:da:16:42:26:91:70:0a:cd:6c:41:35:36:1e:
9c:3f:05:cd:54:f2:2e:81:ca:15:6b:40:05:e6:eb:e9:35:6e:
d0:c0:0a:c8:4f:e0:17:af:f1:93:48:ee:c4:22:96:d8:9f:16:
da:e6:a4:2b:d0:31:59:f7:8b:4e:24:5e:b9:55:cc:e1:37:95:
cb:1d:9f:dc:b7:2c:ae:2c:55:5b:af:51:a5:3a:2d:bb:6f:bc:
5b:1b:a4:06:c1:41:c7:98:c1:11:5e:7e:a8:7d:9a:d1:67:5b:
34:f3:1e:88:c6:93:92:47:ff:93:1b:ea:be:96:73:04:58:3a:
97:7e:c1:0b:b6:b6:9d:72:c3:2c:77:a6:5b:f7:18:96:06:94:
6e:d3:66:6b:c2:a1:db:a8:5a:02:15:1c:53:42:b2:99:dd:68:
28:79:ff:e0:84:4a:a7:33:bb:6e:15:54:38:ee:32:76:85:fd:
73:64:8d:de:1c:7d:7f:ae:71:7b:bb:c5:56:58:24:4a:23:2a:
6c:df:bc:b8:ab:61:3a:18:ba:33:7c:0f:ef:e6:18:89:22:74:
de:61:84:73:4a:11:ff:f1:44:a2:70:01:a7:2a:13:d8:a7:0c:
9e:02:6b:9a:05:0c:51:c0:25:f6:e0:36:0b:d0:ae:01:d1:f5:
bf:01:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:23 2025 by rpki-client