Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: n5GYSOoxfQUGA5+JsozzutvAW8Tc1UqTUj4lohbZnr8=
Subject key identifier: BF:07:54:6C:54:23:98:52:5B:60:A8:6B:9E:89:23:DA:6A:40:5D:09
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 019745F9530DC52F0D4B13A319F646233491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 157F
Signing time: Fri 06 Jun 2025 16:00:57 +0000
Manifest this update: Fri 06 Jun 2025 16:00:57 +0000
Manifest next update: Sat 07 Jun 2025 16:00:57 +0000
Files and hashes: 1: 1mDSvWCAPrTbdUwmp52_NsdaJps.roa (hash: FwQIJqtRB7XaFGpge2zOocq9MbKJo1suVWwULTT7sHA=)
2: JI_IFEVZOLgwy-WHZOm2izr6PIo.roa (hash: OO8EbVI1MKPERWUpbisO0H4MA7HYDCDhv160pD1pO5c=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: MMlIZBunzUAMqMv7HPI6J968x7pYf6GIohbMr2gS4YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:53:0d:c5:2f:0d:4b:13:a3:19:f6:46:23:34:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Jun 6 16:00:57 2025 GMT
Not After : Jun 7 16:00:57 2025 GMT
Subject: CN=bf07546c542398525b60a86b9e8923da6a405d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:80:06:32:8e:d0:0e:dc:71:1d:81:b6:96:
f3:e3:b7:82:92:7f:4d:f4:36:a8:f7:3c:72:44:8e:
af:60:97:bb:42:09:ce:a8:1d:d3:93:ce:29:89:84:
04:a2:f0:1c:3d:4c:96:e4:d9:68:bc:be:fd:52:0a:
e6:b9:09:b6:02:1c:61:55:02:2c:7e:6c:1d:8a:ed:
66:15:fc:47:68:f2:2f:16:42:19:f0:eb:f2:b3:df:
a7:07:1c:f6:a1:5f:84:2a:ba:47:18:96:75:de:41:
9d:8a:1c:19:93:25:35:0d:76:84:aa:95:22:6f:1b:
e3:0e:24:35:8c:d7:19:9c:5d:23:c2:96:6e:12:6f:
d2:d4:69:ab:22:03:df:a3:31:6f:2d:2c:76:14:f8:
c8:3a:39:60:1e:67:77:57:97:c2:f5:7c:2c:17:09:
cd:69:a0:51:7d:2b:4f:30:79:b0:c7:4d:de:f4:25:
40:80:b3:4c:ac:b1:3f:af:5b:87:c0:a7:d0:01:79:
85:56:96:13:2b:4f:7a:df:97:15:cb:b1:42:44:93:
af:5f:5d:e9:36:ae:8c:77:b9:a9:da:20:9b:5a:16:
b8:bd:87:2f:a3:59:7c:be:79:78:e9:91:b5:fc:40:
01:08:5f:ec:27:4f:7a:2d:5a:5e:0e:1a:9e:bc:a8:
0e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:07:54:6C:54:23:98:52:5B:60:A8:6B:9E:89:23:DA:6A:40:5D:09
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:29:92:d2:a6:f4:6d:ce:3e:a4:68:5c:b6:a8:a0:66:be:cd:
03:0e:29:ac:87:e9:db:60:94:e8:e0:5c:0a:fb:dd:4d:74:f8:
18:af:0b:b2:6a:b7:41:92:4a:d0:4a:d5:a6:b5:57:39:92:8f:
b9:07:8f:4e:3a:7d:ea:9e:41:a1:13:ee:09:a7:83:28:b4:86:
63:02:86:bf:79:38:61:7e:8f:7b:be:af:70:aa:c2:27:ce:4f:
e4:be:ab:18:c3:f2:0f:b8:01:70:83:6e:ce:ce:4a:6f:65:15:
08:50:24:e0:58:ab:21:9c:7f:f8:dd:ab:f3:f3:44:a6:3b:78:
1f:ee:7a:51:8f:6d:fc:1c:5f:c6:7b:a8:ea:65:b4:35:39:3d:
d0:f0:54:05:6e:f6:16:05:a2:84:96:50:b2:47:35:b5:92:ba:
d6:0d:17:ee:1e:6a:e4:55:7f:33:a8:92:9b:5e:77:79:78:1d:
fe:90:0b:c9:3d:77:44:5c:a5:25:79:97:85:32:0c:06:78:24:
e8:df:30:df:be:31:f3:01:0b:b4:0d:52:ba:29:a8:3c:5f:cc:
05:26:24:a1:9a:ff:89:2e:51:ab:af:fe:38:b4:fd:e1:fb:a9:
38:b7:6e:e1:26:e6:6e:8c:16:09:14:e4:f0:a7:b9:e8:ac:d4:
70:1d:b7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:56:58 2025 by rpki-client