Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json)
Hash identifier: SqgZwnF8kN6O8kXI147+2gMhrkzLbbReFOto4oG30YU=
Subject key identifier: CC:56:DD:F0:68:24:35:4D:01:F8:9F:BD:CA:D2:6F:ED:12:2B:2B:BE
Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Certificate serial: 01974A0CC7DE617AECCD84A9B92AD6F1D440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 11:00:40 +0000
Manifest this update: Sat 07 Jun 2025 11:00:40 +0000
Manifest next update: Sun 08 Jun 2025 11:00:40 +0000
Files and hashes: 1: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: afGRNQbtHtVFf27JS/19Vwlz4QGZ6lZcmo9Hr7aJLlo=)
2: Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa (hash: 5hTfi5zIdy0pksBzayRUkBZiz92X7DgH1Hnbmun+ujM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:c7:de:61:7a:ec:cd:84:a9:b9:2a:d6:f1:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Validity
Not Before: Jun 7 11:00:40 2025 GMT
Not After : Jun 8 11:00:40 2025 GMT
Subject: CN=cc56ddf06824354d01f89fbdcad26fed122b2bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d9:24:ee:54:d7:e9:8a:70:1f:8c:53:e3:6d:
04:03:89:59:fa:0e:85:34:97:fd:30:da:d5:20:05:
01:54:c1:99:0f:87:5a:35:56:15:88:4e:4f:aa:09:
d1:ff:52:a7:5e:0c:e5:af:fd:0e:9e:21:bb:a7:46:
88:10:e2:33:55:ec:fb:1d:e4:94:62:31:00:93:d5:
6e:c8:bb:63:c1:f2:6f:9d:ee:ec:11:f4:e4:7c:5c:
a4:44:09:48:8a:90:07:d8:45:26:de:be:46:3f:97:
4e:74:7a:00:12:07:28:d0:33:83:9c:91:09:67:f0:
c1:de:c0:60:fe:66:2c:c0:a6:6c:52:50:7b:d2:31:
ba:ab:5d:9d:b6:e4:a0:59:89:ea:8e:84:74:80:a4:
8b:6c:46:af:f2:e3:16:cb:3e:da:d3:d0:20:02:e6:
4d:c4:70:93:7b:7e:ab:b8:b8:55:50:d8:f3:6f:9a:
ef:36:04:cb:76:92:ae:7a:b0:e5:2f:52:4a:60:c7:
ce:d4:95:45:5d:94:2b:7a:73:be:4c:5b:89:28:46:
0c:1b:ad:38:dc:71:7f:23:09:36:17:00:96:45:35:
19:21:c2:1d:39:6d:8d:c1:ee:9a:4b:18:6b:5e:68:
91:56:8b:0a:01:16:b2:50:1b:5f:9f:07:42:a8:8e:
db:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:56:DD:F0:68:24:35:4D:01:F8:9F:BD:CA:D2:6F:ED:12:2B:2B:BE
X509v3 Authority Key Identifier:
keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:53:b4:4d:4b:43:86:41:d7:f0:32:20:2b:d6:c8:0e:c6:d5:
5e:22:a2:2e:78:99:5a:6f:f4:f8:08:04:5d:6d:05:e9:53:bf:
3c:ed:de:88:28:25:48:45:db:97:38:eb:53:85:94:a3:1e:51:
e1:8e:7b:75:e6:0b:9b:2e:e5:18:63:7d:39:05:0b:3b:76:fc:
5c:74:10:0a:84:9e:98:44:ef:0d:c0:d7:da:e4:cf:a7:2f:ea:
b5:ed:10:06:61:4b:3c:0b:a5:c3:97:37:ce:a9:a1:d9:57:d9:
93:5e:1a:cb:f1:95:74:8f:58:dd:ac:fc:29:cd:03:0f:f5:1a:
9a:86:0f:2f:53:d1:b2:5e:7c:d3:18:1b:d2:ce:23:d3:47:61:
77:97:f8:0a:36:e5:64:8d:34:91:f9:b2:27:d4:03:10:54:ef:
ec:71:86:88:08:0c:99:d3:78:43:53:a0:d4:0c:c3:1c:6b:36:
d2:67:9d:e4:ec:39:6d:25:cc:d2:67:00:1d:e7:0c:91:29:1a:
27:09:27:9f:06:cf:ca:a3:d3:32:41:19:53:7a:cc:31:32:98:
54:41:e1:10:56:d5:78:8d:93:63:b1:67:61:a0:83:58:91:9b:
dc:dc:c0:5d:5c:91:f2:7f:2c:07:da:f5:71:7c:8d:4c:b4:3b:
bd:e4:b2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:02:33 2025 by rpki-client