Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json)
Hash identifier: uJRD9UvnzzpfRLMApreUgF6ETtjWuVGK8Bl9uxQmVtM=
Subject key identifier: 59:47:A8:54:1B:9D:5D:24:B3:93:FD:6D:AF:6D:94:24:27:F2:B2:6F
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 01974AE8307F4F0F15623CFEF98F2332FD95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:00:19 +0000
Manifest this update: Sat 07 Jun 2025 15:00:19 +0000
Manifest next update: Sun 08 Jun 2025 15:00:19 +0000
Files and hashes: 1: 7Jx_d84jw9RCpVbZlGjBj5ncWcE.roa (hash: 5qe+SEXJJD8iF6SfIvYp7Poby6fZfVkFooQVkliL5/M=)
2: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: RyaJ8ko1kx3vBi6RjjyRKfyZBmUHpDaqMUD77eHo+0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:30:7f:4f:0f:15:62:3c:fe:f9:8f:23:32:fd:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: Jun 7 15:00:19 2025 GMT
Not After : Jun 8 15:00:19 2025 GMT
Subject: CN=5947a8541b9d5d24b393fd6daf6d942427f2b26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ae:91:0a:3f:5e:4b:0a:08:a6:c2:81:26:f6:
46:3d:6a:d1:3b:17:b7:40:3d:57:d7:bb:68:73:76:
9a:cc:2f:24:92:fd:98:ac:da:ea:b1:ec:33:95:d4:
6f:54:e4:41:4d:03:42:f0:85:e5:bb:e8:69:5e:c9:
3c:ac:36:45:1a:a3:c5:6a:d6:09:10:59:ed:45:c2:
d0:08:e8:31:09:65:03:73:32:cc:cb:13:0c:73:57:
f9:17:14:36:a9:90:93:51:ac:3d:cc:57:86:85:12:
f9:dc:e0:92:dc:e4:ae:ca:77:70:78:d3:51:d2:c5:
f8:1b:9d:3e:ba:50:22:20:31:9e:ac:1d:1f:49:c2:
dc:79:44:d4:41:ee:84:d5:84:11:07:8c:7e:66:74:
13:5f:d8:44:2f:c3:dc:3b:7a:ff:88:a6:0b:e7:bc:
cc:b9:9c:52:f2:bf:d5:3f:93:e0:45:4b:a8:5f:81:
d8:91:d2:08:6f:b3:a1:58:c0:3d:fd:f4:9e:fd:a7:
15:f2:8b:51:98:13:1b:e8:53:c1:a6:64:6a:9f:fa:
e0:48:fc:92:b5:18:3e:53:66:8e:77:47:ec:c3:44:
f0:df:32:4b:94:64:88:cd:b8:df:b3:8a:03:6b:64:
44:fa:d9:56:e5:0e:a8:48:f1:e5:53:7b:bd:19:14:
92:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:47:A8:54:1B:9D:5D:24:B3:93:FD:6D:AF:6D:94:24:27:F2:B2:6F
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:da:26:47:25:19:d0:56:31:b5:66:5f:aa:b0:a5:a5:e0:fd:
ea:67:2c:e5:9f:2c:83:85:72:9e:4c:47:f8:a4:38:52:2e:ec:
1f:ce:d0:65:66:eb:86:2e:a2:e7:c1:dd:80:94:5a:76:60:1f:
c7:bd:aa:b6:8e:24:13:23:0c:ec:e3:ae:39:41:bc:67:b7:5a:
4d:28:1c:85:d3:59:1a:33:d9:c4:e9:dc:fe:a7:9c:45:a1:70:
1e:b9:a4:7e:dd:cb:fb:21:23:9a:30:1e:d6:b6:f9:67:e9:a1:
b4:ae:8c:e5:bb:a1:aa:d5:91:2a:83:8c:85:34:67:93:89:cb:
ff:7a:cc:dc:aa:b2:8e:4a:a4:50:e9:95:35:9d:c7:61:27:27:
1e:12:8e:83:a8:b5:42:ce:fa:c3:1b:8b:26:eb:c2:e0:af:de:
f6:25:fc:98:05:7c:e7:27:37:fa:e1:4b:02:b4:59:d5:7d:76:
5a:1d:2f:66:20:7f:d6:36:a7:d8:f4:fc:72:32:b0:16:a5:a0:
9b:4c:f1:21:1c:1a:b1:be:f0:35:07:ea:fb:ac:be:24:44:f7:
49:e3:98:bc:28:f6:64:c4:4d:85:b7:aa:1f:bb:fe:e1:e2:f7:
fe:70:c5:ef:be:30:19:e8:69:c7:8b:8a:6f:b2:5f:ba:4d:a8:
a6:9c:24:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:07:19 2025 by rpki-client