Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
File: rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft (raw, json)
Hash identifier: zBOsdPLS4jZvw/Ai3u8B3vGgH5OFLAFTCte10ZliurY=
Subject key identifier: 1F:64:8E:26:8B:65:E2:B7:1A:D8:E7:FA:FB:1F:8D:65:71:6C:51:62
Authority key identifier: AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B
Certificate issuer: /CN=acfeacea5d812f3030c557e48c53758753fb6c6b
Certificate serial: 01974DE96E5EFC529E6A8DC5985990823DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 05:00:33 +0000
Manifest this update: Sun 08 Jun 2025 05:00:33 +0000
Manifest next update: Mon 09 Jun 2025 05:00:33 +0000
Files and hashes: 1: 3i8SziI4yOANwHuCoVeJUFIkDmY.roa (hash: ApwThwemagVAYGDz/BhbEY+AhYokJz7tAT0f3Qt4Pto=)
2: rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl (hash: dN8HAN3wtlFpsIlx5npmv0rWQTkgvcfLfKi2ZN6eBlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:6e:5e:fc:52:9e:6a:8d:c5:98:59:90:82:3d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfeacea5d812f3030c557e48c53758753fb6c6b
Validity
Not Before: Jun 8 05:00:33 2025 GMT
Not After : Jun 9 05:00:33 2025 GMT
Subject: CN=1f648e268b65e2b71ad8e7fafb1f8d65716c5162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:da:74:36:8d:e8:b8:d0:e3:62:c8:23:9f:
21:a8:5b:41:d3:c2:47:54:d4:60:65:36:76:a7:33:
3d:79:80:37:65:6b:ea:3d:fe:10:3a:89:95:1f:72:
40:19:56:5d:a2:78:c6:58:c5:75:5d:f5:1c:07:9c:
be:b1:11:35:df:04:9f:d6:a0:51:e2:3a:7f:cc:30:
1e:6a:7b:ef:0d:fb:77:9e:b1:15:bf:86:5f:44:61:
2b:14:49:1b:64:5a:f2:a5:78:d7:74:56:6e:7c:47:
6b:93:ca:8c:49:f8:53:6a:45:d2:96:14:c0:d4:72:
8b:fe:9e:a3:a5:21:f1:fd:f9:be:cd:a8:41:06:3a:
78:92:fc:8f:a3:9f:c3:ff:b5:7b:a5:15:92:c9:97:
4b:80:fc:aa:03:6c:15:33:92:a3:0c:5f:9b:97:9a:
8d:b2:8c:64:23:33:e7:9a:94:f8:15:2c:20:a6:86:
47:1f:70:15:95:9b:55:9c:8b:42:6a:60:86:1a:95:
fd:4d:46:6f:da:64:f9:50:60:c5:4a:00:5a:d0:15:
4a:17:6e:6b:3d:bf:13:37:8c:c5:61:1f:ef:43:c2:
db:9f:a2:ad:16:40:12:17:ea:6a:ba:75:49:65:ea:
93:3f:cf:18:99:2f:a8:ac:52:6d:f3:77:bb:d3:f5:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:64:8E:26:8B:65:E2:B7:1A:D8:E7:FA:FB:1F:8D:65:71:6C:51:62
X509v3 Authority Key Identifier:
keyid:AC:FE:AC:EA:5D:81:2F:30:30:C5:57:E4:8C:53:75:87:53:FB:6C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rP6s6l2BLzAwxVfkjFN1h1P7bGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2727b5-5ecb-485f-b7d9-a2fd28840a03/1/rP6s6l2BLzAwxVfkjFN1h1P7bGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d4:03:7c:bb:17:a9:7d:99:03:dc:12:36:f0:f2:9e:63:e8:
0e:e6:3b:92:26:4e:a2:f6:94:f3:87:d9:d5:fa:c9:77:3e:4a:
a2:30:d8:cc:fa:b6:43:58:2d:87:9d:84:4c:67:04:d1:9e:f7:
73:39:a6:9b:ae:2d:24:e4:dc:85:33:f3:64:e4:2f:55:43:cf:
e1:68:c9:7e:7c:c6:37:09:e4:c9:d2:a3:0f:5d:da:be:b7:eb:
d6:11:16:1d:7a:77:24:77:a6:4a:7b:03:ab:e7:20:a7:ba:90:
2e:15:42:39:fd:ab:ed:60:9e:9f:66:1f:fb:78:17:17:82:54:
80:24:9c:72:f6:df:85:80:57:2b:de:55:83:c9:cf:fe:9d:a5:
d2:b3:59:c5:a8:c2:1f:d3:61:3a:ae:13:0c:a5:f0:d5:2b:cd:
74:bc:72:5d:a8:f0:68:c2:6a:da:45:8a:89:64:0f:67:80:54:
a0:6d:93:8e:1e:08:ff:e7:eb:ed:a2:e2:41:ea:7b:48:ee:a4:
04:c5:f0:3b:c6:fe:10:07:ab:a9:a8:dd:96:37:37:3a:f0:5a:
c6:81:d0:24:8a:c5:f7:2c:31:09:43:99:b6:a8:c7:99:bc:90:
80:88:8b:03:7d:66:29:ad:17:a1:c9:5c:cf:b0:7a:bf:0e:b8:
62:b2:6b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:12:08 2025 by rpki-client