Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
File: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json)
Hash identifier: DQ8YiWfyQKatFaZG+P9DmIlBQetUZypfQcbWLZUc1tM=
Subject key identifier: E5:50:35:ED:B4:17:F5:82:79:FA:42:66:8F:28:14:92:5A:F4:F0:E2
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial: 019748C33F58610804BFCAFED539C50A958F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 05:00:44 +0000
Manifest this update: Sat 07 Jun 2025 05:00:44 +0000
Manifest next update: Sun 08 Jun 2025 05:00:44 +0000
Files and hashes: 1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: dW0ePWMBEhrrR8aPS4R8i7gGVlJ9iync/ekCce0T/uM=)
2: tP4Nr3k13Af3UtlucGdOvIgy7uY.roa (hash: ofrFnG5ByBdxFiFLthIkeYVusoIIsNMbVNLs6rFZMMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:3f:58:61:08:04:bf:ca:fe:d5:39:c5:0a:95:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Validity
Not Before: Jun 7 05:00:44 2025 GMT
Not After : Jun 8 05:00:44 2025 GMT
Subject: CN=e55035edb417f58279fa42668f2814925af4f0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:51:13:cc:ca:22:7d:66:f6:e4:95:85:e3:
38:a2:6b:30:57:15:d0:ed:95:10:1b:ca:2b:b5:00:
2b:98:22:83:54:ba:d2:b5:97:e4:b2:bc:0e:75:9e:
4e:9a:84:61:f6:36:9d:5e:9a:66:a5:4e:9d:d1:cc:
c6:49:d7:9a:84:27:c7:56:cb:07:0a:d5:6b:5c:e7:
75:84:e7:f9:af:a3:e1:4c:14:a8:99:6a:bc:14:87:
74:19:58:3c:2f:69:18:6e:de:09:b1:0e:c2:25:bd:
da:30:01:dc:ed:c7:79:6d:bf:e1:c7:86:a2:5a:21:
5a:f8:0a:7d:6c:85:c6:20:78:07:31:3b:6f:b9:74:
af:0a:ac:4c:8b:73:cb:50:c9:73:5d:bc:c5:43:c0:
e1:14:98:30:e7:f0:bb:c1:4c:19:51:1d:4d:3a:cc:
d6:2c:0d:b8:e8:01:70:c2:44:9b:b2:10:6d:25:14:
ff:76:ef:a2:29:47:8a:1c:61:4b:3d:2c:78:7d:b6:
80:35:60:44:f2:9f:df:9e:04:f8:17:a5:84:69:6a:
55:7f:39:06:14:a1:dc:38:cc:04:06:7f:e3:70:ae:
09:56:14:a8:3e:81:da:1a:d9:ea:43:d0:01:1a:7d:
ca:9d:c0:31:1f:43:52:67:bf:bb:dc:2e:13:da:d6:
16:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:50:35:ED:B4:17:F5:82:79:FA:42:66:8F:28:14:92:5A:F4:F0:E2
X509v3 Authority Key Identifier:
keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:60:dc:8d:a0:9a:76:72:90:5e:5a:09:40:d6:a7:6b:d5:8c:
83:ee:63:09:ae:46:c1:95:b2:8e:c0:49:8a:e0:2e:ef:02:ce:
04:95:76:80:44:53:d5:3c:8c:0c:04:0e:47:a9:13:92:32:7f:
34:54:2b:e3:25:47:2f:f7:ca:5f:60:f5:41:54:23:c0:39:9a:
c4:b6:f5:82:2a:68:d2:58:18:93:35:93:d1:06:6b:5d:dd:2e:
a7:f7:a1:89:a1:74:c5:32:18:12:3a:6d:8e:1a:86:70:3b:c2:
5f:d5:36:0e:d9:8e:16:8a:e3:06:1a:da:aa:a8:07:95:44:bc:
33:5a:4d:28:44:6d:17:1f:90:e1:3a:23:55:07:16:6e:d1:c3:
5c:94:0b:94:e8:25:36:38:c2:eb:a4:50:d1:14:4e:2c:f1:51:
b8:17:be:79:1f:54:0e:50:a1:64:1c:d4:ce:96:b3:b9:f3:d7:
30:ed:6a:e6:b6:23:af:2e:37:47:04:44:95:b0:22:b5:0b:95:
a2:92:d1:f3:71:b5:86:b9:29:b3:5f:2c:31:f0:ff:ad:a6:2a:
e9:16:58:42:fb:62:42:d3:1a:8a:99:65:ca:8c:40:6b:7e:64:
e3:c1:4e:2e:45:32:c3:42:09:81:a3:85:f5:28:a9:90:4e:70:
1d:0d:2e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:10 2025 by rpki-client