Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
File: 7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json)
Hash identifier: q9Xia5l+1HAu/sYgI11KOV1ahtCE58zlxf4+SHds9Uo=
Subject key identifier: 8B:2B:95:5A:7D:F7:C2:79:E6:4E:97:A0:65:0F:CA:C9:F3:13:6B:1E
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 0197391A2E2EF631E8F37C837F60706FDCFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
Manifest number: 157E
Signing time: Wed 04 Jun 2025 04:01:46 +0000
Manifest this update: Wed 04 Jun 2025 04:01:46 +0000
Manifest next update: Thu 05 Jun 2025 04:01:46 +0000
Files and hashes: 1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: SxSJTyrPSWxSF3aM5gLuAKOqM6hWxrdb1Vgqdr0G89Q=)
2: LSx9OlKUNiN9N5Lzmn4mpgYUaYM.roa (hash: SRtMriKTJRyDfQ60LOh5mHm3HAzdoYJatQZ33jFO0KY=)
3: Yzpl7dcbDV1oc45l6H78VWlDWek.roa (hash: rLWJRRPMzAUWRBDLzYpnEF8zI53ESvU9cKsYN1kvko0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:1a:2e:2e:f6:31:e8:f3:7c:83:7f:60:70:6f:dc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: Jun 4 04:01:46 2025 GMT
Not After : Jun 5 04:01:46 2025 GMT
Subject: CN=8b2b955a7df7c279e64e97a0650fcac9f3136b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:19:52:50:c3:3d:a1:7b:7f:cc:e4:4a:98:
0b:3a:6f:8f:64:bd:72:eb:3a:20:7f:f1:3b:23:21:
57:65:b5:69:e8:dc:34:9d:96:d7:ee:89:46:da:76:
a9:6d:57:01:16:2a:eb:2f:64:c7:53:0d:50:d1:9f:
c3:b2:04:e5:6b:03:39:e3:b3:38:36:d6:cc:ce:a7:
8e:be:64:ef:64:d1:3a:4f:a6:66:ec:d7:8d:88:07:
cd:12:a2:a0:a3:90:0f:3a:d1:2b:2b:e0:ff:ad:1e:
68:0d:bb:b3:64:9c:55:33:97:66:d1:1d:41:0c:a5:
7c:c0:c4:5d:5e:00:47:51:e7:61:7c:fc:5c:82:27:
7d:5c:e3:12:8c:c8:d1:f3:b9:a5:f8:55:88:1c:ad:
91:28:bd:25:e0:49:83:fd:0a:3e:e9:fb:6b:9d:bc:
f7:f8:93:0c:88:05:4c:98:44:67:ab:87:47:11:a8:
97:ac:0f:28:82:2e:3d:e8:99:5d:84:00:3e:e7:64:
ae:eb:43:93:99:7a:04:41:96:8d:a5:cb:2f:90:0d:
d7:f9:fb:d5:52:9a:0f:d9:d9:29:d9:53:fe:7a:b6:
58:ed:e5:dd:86:94:f2:3b:c8:09:c3:88:a5:bd:a1:
df:4b:6b:43:9d:b8:42:e3:1e:1b:19:c9:6a:50:c2:
97:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2B:95:5A:7D:F7:C2:79:E6:4E:97:A0:65:0F:CA:C9:F3:13:6B:1E
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e3:e4:81:a1:68:9d:c2:fe:0a:60:56:29:de:78:9e:db:b6:
22:f0:e6:e5:68:70:ea:13:bd:86:9a:a0:73:44:07:fd:88:27:
26:a3:37:1b:dd:f9:46:f5:05:30:f7:bb:21:ba:05:a5:80:96:
c7:cf:08:d0:dd:4f:cd:4b:8e:06:4b:ef:cd:44:cf:1c:5c:2a:
d6:bd:46:a3:30:c7:d5:36:bb:87:1a:23:0e:b4:2e:f7:95:39:
89:89:3d:47:f2:57:ae:85:0b:42:08:0e:38:40:95:6e:41:d2:
9e:e7:61:44:b0:63:5d:01:59:3f:7a:42:c8:39:f4:fe:62:13:
d1:82:ab:02:81:f4:45:2b:72:2c:ad:92:40:c8:75:74:3c:bf:
7d:db:48:55:78:87:84:4a:94:93:b4:ee:69:85:14:2a:09:68:
a5:9e:8f:65:4c:02:06:f7:a1:12:97:1c:7e:fc:69:c2:c1:ba:
54:aa:b1:38:42:cf:c1:cb:b2:3b:e4:6b:a7:33:40:2e:2f:7d:
c6:b5:fa:26:8c:03:81:6f:fe:9f:06:b3:50:d2:00:52:28:99:
96:eb:ec:6d:ec:1c:ea:bd:cf:12:09:d9:4c:a1:62:bb:7c:3c:
4c:2a:4b:a1:dc:1f:99:4d:29:03:55:9c:0a:80:99:41:9b:42:
d2:49:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:50:01 2025 by rpki-client