Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
File: d2pYTSefAHBmo4tesPGOe-22FOs.mft (raw, json)
Hash identifier: O8PnOFrJojUOv98HMMFtZRlkBXD1AvpRay0XbesXyyo=
Subject key identifier: 84:68:B4:8B:27:21:AE:E9:60:66:C2:EA:CB:6C:37:C7:A0:22:71:C7
Authority key identifier: 77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
Certificate issuer: /CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Certificate serial: 019747429B3955EF594098892D290662C880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 22:00:36 +0000
Manifest this update: Fri 06 Jun 2025 22:00:36 +0000
Manifest next update: Sat 07 Jun 2025 22:00:36 +0000
Files and hashes: 1: WUTyK7BrRNi0uHZK_0QCE_Vt8SE.roa (hash: 4x8uT/6JZLvMnikfzpcnGLUs5znzoRWzxY13Odgg+MI=)
2: d2pYTSefAHBmo4tesPGOe-22FOs.crl (hash: XY9+Wej74XiD8hHOgVZnye0sOZL6kaFZJ2M6ciHlsZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:9b:39:55:ef:59:40:98:89:2d:29:06:62:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Validity
Not Before: Jun 6 22:00:36 2025 GMT
Not After : Jun 7 22:00:36 2025 GMT
Subject: CN=8468b48b2721aee96066c2eacb6c37c7a02271c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:28:73:aa:e1:ad:a6:c0:8f:be:cf:9a:54:
fe:4f:58:00:c1:90:ca:49:bf:e3:c1:7a:02:f2:6f:
56:3f:c6:a3:4f:62:9f:73:5f:ec:3d:e5:7d:32:8b:
64:b8:77:e8:c1:84:02:32:e5:05:6c:3f:cc:d5:fe:
9c:f0:c6:3f:2c:cb:48:44:60:1a:60:76:37:21:58:
60:80:78:dd:5a:f5:9b:00:b8:6a:09:9f:68:91:88:
b7:4d:2f:8b:dc:1f:62:86:a8:8e:f7:8b:d5:a4:0c:
24:02:76:58:93:99:f7:f8:56:18:7f:45:d7:8f:7d:
59:23:76:e4:8b:94:2e:54:26:2c:b0:82:8e:9d:d5:
9e:13:3c:65:e6:9a:ef:4f:1c:34:96:b0:d1:2f:b1:
b0:de:35:79:21:13:4d:fc:d4:c3:d6:83:1d:fa:09:
51:28:f7:57:07:6a:5e:82:96:d1:83:46:d8:f0:8e:
fd:06:1e:4a:14:42:19:19:fe:43:af:1c:80:5c:99:
88:55:a3:65:d9:aa:f4:d8:b3:cd:92:93:e6:63:64:
cb:d4:97:fa:29:35:cd:70:5f:79:27:2e:ab:22:88:
85:f0:bb:ea:bf:16:45:77:e3:39:68:e3:82:b6:60:
d5:13:07:11:cf:3f:51:c9:0b:c0:91:16:02:c9:5f:
4b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:68:B4:8B:27:21:AE:E9:60:66:C2:EA:CB:6C:37:C7:A0:22:71:C7
X509v3 Authority Key Identifier:
keyid:77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:37:f6:b1:57:98:7d:f3:85:a0:29:c7:f1:02:ef:fd:89:96:
b8:dd:e6:2c:f1:ad:2b:ff:03:d3:60:c6:bb:80:b7:98:f5:a7:
a3:43:7d:c9:9c:03:f1:09:41:da:9a:08:70:34:5d:f7:b2:2a:
36:ea:b6:67:8b:fd:6c:bf:ea:79:ea:e8:75:f2:14:52:2e:4e:
57:84:1c:db:e1:97:0f:f5:73:68:2d:a6:f8:a8:e2:2a:f4:b7:
07:5a:68:b2:a3:42:5d:b8:01:16:75:06:f7:48:00:4e:69:fe:
74:74:11:08:64:27:94:a6:51:11:02:2f:5f:61:57:68:fe:e4:
8a:b9:31:9c:01:0a:47:ae:f9:bb:fa:cc:25:e5:5e:3a:ff:e6:
19:a1:5a:6a:a6:30:95:b2:40:30:92:b7:86:72:94:4c:cc:dc:
84:d4:cd:5b:4c:e5:e6:9f:4a:b2:38:7b:25:7b:0a:33:32:4e:
e0:f0:7b:23:c7:d7:4e:35:ab:c9:65:a3:ad:51:e1:6d:97:25:
5e:7d:56:1c:b9:8a:77:39:05:30:8f:93:ae:e6:ee:a8:de:63:
85:20:17:b5:06:a3:3d:4e:ae:cd:13:4d:8e:05:da:f7:1b:e5:
bb:c3:e2:78:aa:61:4f:d1:44:5b:1f:c2:82:7b:47:0e:89:d4:
3e:62:93:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:08 2025 by rpki-client