Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
File: MFS7bp94ARuMxdPyO3C2bPaXmqc.mft (raw, json)
Hash identifier: 0tKcIClpMH0llRzTrUQji+23+4EjV7AbdmKp+z9VVvI=
Subject key identifier: 72:77:06:99:23:3B:13:84:93:74:D8:D5:7C:72:41:7B:1B:2D:C1:DC
Authority key identifier: 30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
Certificate issuer: /CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Certificate serial: 0197458B89B3B3909D67B66B2A712C624E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 14:01:02 +0000
Manifest this update: Fri 06 Jun 2025 14:01:02 +0000
Manifest next update: Sat 07 Jun 2025 14:01:02 +0000
Files and hashes: 1: MFS7bp94ARuMxdPyO3C2bPaXmqc.crl (hash: kQ4ivnrvhBWAth4oVHwt/87fvBD0ZwS+hcTpCWimyCY=)
2: jIxoBxvUdMCHFAPIgbpTv82jWLo.roa (hash: HrwO1TMjewTexEY6JfFnwLbtTAOtQU58BOb2eJzb5To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:89:b3:b3:90:9d:67:b6:6b:2a:71:2c:62:4e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3054bb6e9f78011b8cc5d3f23b70b66cf6979aa7
Validity
Not Before: Jun 6 14:01:02 2025 GMT
Not After : Jun 7 14:01:02 2025 GMT
Subject: CN=72770699233b13849374d8d57c72417b1b2dc1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:9b:57:5f:a5:dd:67:af:8d:aa:50:ac:4a:
71:99:f7:22:ed:71:fe:e9:05:64:3f:d2:33:bf:3b:
dd:13:79:f5:b4:d9:3d:a1:a1:b7:6b:f1:28:83:e3:
04:f0:50:43:60:dc:3b:dd:82:01:09:88:a9:c8:29:
e0:14:67:a0:62:9f:fb:f7:b4:60:8e:42:e6:a5:38:
53:38:39:d6:99:21:84:81:48:15:02:90:67:db:33:
0d:88:cc:9e:84:d0:b9:5d:0c:df:aa:48:5b:66:d5:
de:d8:5a:4c:26:44:7e:bd:99:88:73:99:02:c8:75:
69:0e:b4:74:a5:8b:63:c5:47:56:87:b3:79:08:62:
15:dc:1d:4d:88:65:a3:c1:f1:b9:b3:fe:ab:e5:75:
29:8c:b5:1c:7a:3a:80:0d:15:77:0b:ba:34:69:f7:
25:dd:1d:50:42:ea:b6:68:a2:2d:e7:84:fe:5d:b2:
82:ff:7e:cd:08:83:c7:5e:66:75:d6:b7:5f:2a:70:
74:11:c1:60:43:c3:2d:ad:3f:5f:35:8e:61:a7:3c:
69:8e:b4:b3:4a:71:a4:ad:b1:10:d5:77:44:d9:cf:
49:58:a1:6d:7b:0d:e1:c0:c0:d1:c9:f3:a7:38:6b:
c3:b2:a3:40:09:93:f4:fd:c4:db:fe:31:a0:f0:77:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:77:06:99:23:3B:13:84:93:74:D8:D5:7C:72:41:7B:1B:2D:C1:DC
X509v3 Authority Key Identifier:
keyid:30:54:BB:6E:9F:78:01:1B:8C:C5:D3:F2:3B:70:B6:6C:F6:97:9A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MFS7bp94ARuMxdPyO3C2bPaXmqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1c937-e767-4ab1-8c5c-0952589b8b59/1/MFS7bp94ARuMxdPyO3C2bPaXmqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:89:63:07:c7:81:09:b1:1f:62:20:38:49:47:4e:54:c1:54:
43:03:1d:af:f1:77:bf:e8:14:60:5f:bc:dd:b5:e5:4f:d8:dc:
67:bc:20:cd:40:2b:c1:d1:96:3d:0c:30:07:3c:9e:55:29:05:
d1:7b:68:3e:9c:5c:91:5c:17:c7:70:3a:26:95:4c:0d:98:49:
5c:b3:e5:54:f9:ca:fd:37:8f:36:92:af:4d:9b:20:13:f0:65:
bb:1b:02:67:fe:48:a7:04:2c:29:40:ec:13:cf:e7:2f:fc:03:
fd:1e:63:0e:31:b8:a3:81:dd:5d:0b:e7:63:74:ec:6c:94:db:
fe:fe:0c:2d:c3:17:eb:0d:ce:3c:b2:d2:43:51:3c:72:d7:7c:
b1:3b:e5:59:e8:e2:8b:4a:a0:36:e2:8b:f7:33:5f:2a:e6:c3:
41:43:72:8a:4c:df:73:18:aa:3c:4e:c1:70:40:1c:7b:c7:d6:
04:5a:6b:e8:53:ae:36:29:36:88:7c:27:9f:da:66:b1:6f:77:
a2:51:37:c8:3c:e7:8c:13:fe:21:95:14:af:7a:a5:9d:db:6d:
de:d0:94:ca:84:87:bf:70:d8:2c:e4:7b:67:d5:fc:48:f8:04:
8f:d7:68:dd:2c:6f:a9:a3:2c:cf:07:70:ae:72:1b:41:6c:fa:
10:a7:ef:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:05 2025 by rpki-client