Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
File: A3hj3DwlnmCyyYaALdYCERXovx8.mft (raw, json)
Hash identifier: B0d/cnfzAkirWt7KH+vc/NQKBZLxuTW4FPhBjQYHo8U=
Subject key identifier: A5:15:63:BA:AC:45:7C:C0:D0:37:31:C6:4C:A0:FA:AE:1E:0E:79:08
Authority key identifier: 03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
Certificate issuer: /CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Certificate serial: 01974BFB43943071151C923AE0FC9EB5C147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 20:00:47 +0000
Manifest this update: Sat 07 Jun 2025 20:00:47 +0000
Manifest next update: Sun 08 Jun 2025 20:00:47 +0000
Files and hashes: 1: 0VtcIuxUGMiSf51ESt2U0ZJJN3I.roa (hash: pnzB/pCC1PdPD6bGcX+A1+WWtoVI4A2/GkUREyGlYVs=)
2: A3hj3DwlnmCyyYaALdYCERXovx8.crl (hash: SxQCp0mWURnjyA+1kcgzAx9lHkYTgTCA0oZmBkbiR00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:43:94:30:71:15:1c:92:3a:e0:fc:9e:b5:c1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037863dc3c259e60b2c986802dd6021115e8bf1f
Validity
Not Before: Jun 7 20:00:47 2025 GMT
Not After : Jun 8 20:00:47 2025 GMT
Subject: CN=a51563baac457cc0d03731c64ca0faae1e0e7908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:b2:05:d3:d3:0f:c3:3b:db:ca:9b:61:44:
ab:98:4c:7d:0f:da:a6:e3:f2:24:e8:73:9a:19:a1:
e0:46:0c:f3:e2:f7:89:a9:f3:89:7a:25:97:33:a8:
5f:3b:aa:76:53:e0:79:cb:ea:5c:1a:26:c3:e2:66:
95:fb:00:8c:b0:53:5d:0f:a3:93:71:f2:4d:5a:25:
a5:03:82:8d:14:3a:0c:b6:c5:59:7c:08:e0:08:07:
ad:de:7a:54:ff:a0:3c:2b:16:e8:57:00:26:54:f5:
eb:ce:09:5c:18:42:e4:9f:28:5f:5a:7c:3a:80:6e:
54:8f:f5:40:fb:2b:48:bf:53:0a:15:1a:d4:a5:3b:
4a:e2:0e:fa:95:60:e8:44:60:e5:ac:bc:42:79:77:
1d:af:12:db:b2:51:a3:2f:2c:c2:70:c0:62:2a:92:
a1:3a:ca:91:e4:b7:64:8e:96:df:6e:cc:50:fb:42:
be:3b:45:cd:af:32:62:22:b4:9a:35:72:d7:6c:9e:
1d:6b:88:1d:8d:42:aa:6a:3f:91:a2:9f:0b:a9:c7:
40:5f:ec:22:09:64:9e:57:bc:fa:eb:b8:2d:1d:0e:
93:26:d1:b3:13:2a:6d:d2:0f:3e:ae:22:8c:86:b3:
b7:67:68:22:d0:ab:97:3e:64:12:62:90:59:15:bf:
2e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:15:63:BA:AC:45:7C:C0:D0:37:31:C6:4C:A0:FA:AE:1E:0E:79:08
X509v3 Authority Key Identifier:
keyid:03:78:63:DC:3C:25:9E:60:B2:C9:86:80:2D:D6:02:11:15:E8:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hj3DwlnmCyyYaALdYCERXovx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d78293-50c5-471e-b91b-d9f301868ef3/1/A3hj3DwlnmCyyYaALdYCERXovx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cb:fe:03:a7:1a:fb:75:35:a9:5d:8b:c3:62:69:37:82:d8:
88:22:99:fa:4c:0a:a8:f8:52:0c:89:61:9a:3e:55:58:68:3f:
d4:3d:72:b4:61:5e:c9:4a:89:1f:03:41:2b:c4:41:40:3c:f7:
9f:9c:24:ec:16:6d:98:0f:67:5a:46:95:45:df:c3:73:37:f1:
28:5e:a8:27:f8:9c:51:df:07:b5:18:44:dc:70:c1:b8:6c:40:
ec:c7:64:91:68:6f:3f:5a:27:c4:fb:3c:23:6f:e6:8d:15:e0:
8e:de:a0:bc:78:ee:91:6d:fb:6c:5d:69:a4:32:19:84:67:7b:
a6:27:eb:8f:a8:25:b8:94:12:77:4a:1f:ea:67:c4:4c:7c:17:
28:2e:58:cb:14:a2:68:f7:57:4a:c9:5a:32:a5:4f:1e:db:77:
3e:63:90:39:48:50:40:32:b2:6e:c7:ea:e4:3f:43:ea:bb:b9:
c5:8b:b5:86:6f:ae:34:95:ac:a2:f9:11:e7:3c:b7:e9:32:6c:
f9:b0:a0:91:8a:c4:dc:74:09:88:a3:ee:b8:ce:87:eb:9a:eb:
df:81:b5:eb:8c:95:5c:25:09:7b:d9:b0:2d:b5:bf:05:a7:d2:
e6:69:d8:ca:a5:b2:e7:4a:0a:00:24:c0:89:6a:ea:a0:db:e6:
5c:ce:97:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:16:28 2025 by rpki-client