Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
File: ClMYxYv1unQySyXQN0BN2N2p_yQ.mft (raw, json)
Hash identifier: 76sMkOca1BwhJVR9P/NzIUwu4x0s6Ce8dovtFzS9tpI=
Subject key identifier: 25:A4:EF:71:40:F9:18:FB:F7:42:0E:4A:AD:17:7A:FC:20:CC:C1:C6
Authority key identifier: 0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
Certificate issuer: /CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Certificate serial: 01974B8D98592785F332311A52CDE402C5D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 18:01:00 +0000
Manifest this update: Sat 07 Jun 2025 18:01:00 +0000
Manifest next update: Sun 08 Jun 2025 18:01:00 +0000
Files and hashes: 1: ClMYxYv1unQySyXQN0BN2N2p_yQ.crl (hash: m7ZOl8cGM2fc2zHgvR7ZeRrBEZo18dljZpFiCEqQtus=)
2: DLTd3WJjxjvYe7s9RQaXW0-asFQ.roa (hash: CEzU0MiwDAlXifXvS9Fry7MUXXUL96cqYeU54NDS/g8=)
3: MzKwgAtz12wzIsjgwju5LaHLtH8.roa (hash: DsGzfZzJWXHpJi5oY7AKelnpp/ss483xMhTBHOGogIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:98:59:27:85:f3:32:31:1a:52:cd:e4:02:c5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5318c58bf5ba74324b25d037404dd8dda9ff24
Validity
Not Before: Jun 7 18:01:00 2025 GMT
Not After : Jun 8 18:01:00 2025 GMT
Subject: CN=25a4ef7140f918fbf7420e4aad177afc20ccc1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:ac:59:2a:1b:9d:3e:c5:84:ff:75:8e:48:
f7:ba:a2:b3:a3:ed:06:75:70:4b:04:f7:8b:3c:79:
64:93:7b:19:6e:19:ad:61:43:b5:c4:88:57:d7:cd:
12:9c:43:db:33:51:9f:f0:4d:c6:ad:4e:dd:1e:c6:
c6:85:10:76:30:61:94:bc:c6:a8:fc:a5:db:1b:8e:
3c:55:78:fa:30:8a:8b:97:2c:03:e6:9d:76:f1:2a:
49:44:cd:ea:31:c1:b2:1a:df:f0:20:9e:06:04:70:
62:a1:39:9a:56:c9:eb:67:d0:08:81:3b:cf:ba:e3:
7c:45:c3:43:79:8d:96:de:4c:da:ae:80:52:c3:da:
83:33:d7:a2:f8:16:12:0e:8b:5c:1d:5a:18:be:a3:
2c:56:e1:30:6d:7d:14:d2:97:4e:d7:be:10:49:1c:
63:4f:cf:22:4c:c5:56:e5:69:2f:6d:b8:86:4f:f4:
c9:41:e7:63:84:a9:ee:51:73:21:22:c3:5e:7b:dc:
2a:4b:6c:c4:5c:a9:d7:a8:91:6c:06:76:d5:5d:1a:
00:96:73:0a:53:a3:a3:71:5d:a3:a6:bd:14:cd:8e:
d3:c8:1b:4c:af:f5:26:4c:ee:54:5f:e6:c3:60:fc:
0c:4f:cc:14:13:53:3f:51:75:e0:17:6a:c8:00:4d:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A4:EF:71:40:F9:18:FB:F7:42:0E:4A:AD:17:7A:FC:20:CC:C1:C6
X509v3 Authority Key Identifier:
keyid:0A:53:18:C5:8B:F5:BA:74:32:4B:25:D0:37:40:4D:D8:DD:A9:FF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClMYxYv1unQySyXQN0BN2N2p_yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/852cfb-4471-4290-91f4-6bc4905c42d4/1/ClMYxYv1unQySyXQN0BN2N2p_yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:06:a3:4b:b4:58:89:8f:da:54:5e:ba:ed:27:87:83:f0:09:
6c:9f:3a:d7:39:17:b9:9f:93:80:48:3f:ef:62:45:99:97:33:
3d:0e:3e:51:ad:c6:91:47:34:9b:b1:fb:63:51:c5:12:eb:1b:
87:bd:af:f6:2b:aa:27:9d:9d:d3:29:c8:26:dd:e5:6d:71:fb:
a8:53:01:f6:a6:4d:e5:a1:64:87:95:b9:28:77:45:d9:7f:1b:
8f:7c:08:51:be:83:cd:6d:80:d3:fc:0c:3c:c5:31:26:7a:d8:
ec:7a:54:ea:42:6c:36:4a:1b:98:c6:ad:4f:9b:b7:73:c7:39:
22:be:4f:38:09:b1:11:fd:bc:f9:70:04:47:eb:d9:84:16:bc:
2f:e6:9f:77:7a:25:9d:b3:09:e4:28:41:f9:71:36:92:66:30:
be:97:ec:69:db:75:06:f1:de:78:03:e3:27:95:0d:7a:2d:c5:
20:6f:84:e2:91:0e:a1:db:ac:2a:dd:50:00:1a:65:91:16:1e:
56:7d:ff:23:48:78:f4:1f:9c:7f:4d:e4:9c:10:20:6a:e7:89:
09:fe:95:56:58:80:2c:3f:6c:54:20:70:1a:c3:2d:62:b0:80:
0f:89:6d:00:63:5b:e7:fc:7b:16:bc:41:32:86:13:6f:14:67:
a1:81:61:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:46:31 2025 by rpki-client