Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
File: eXAA1nyN62Ji4Ampr_QioQOPRIk.mft (raw, json)
Hash identifier: BVBRtQeyzAum8ANUW7vKFRt/FVe56QsuxOojGmk4nWI=
Subject key identifier: 3D:F4:F9:C8:BF:E4:0A:88:E7:81:CB:FF:A7:2F:88:DE:20:32:D6:FA
Authority key identifier: 79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
Certificate issuer: /CN=797000d67c8deb6262e009a9aff422a1038f4489
Certificate serial: 019765BAADEA7700F27AC334178096A4B53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
Manifest number: 158A
Signing time: Thu 12 Jun 2025 20:00:22 +0000
Manifest this update: Thu 12 Jun 2025 20:00:22 +0000
Manifest next update: Fri 13 Jun 2025 20:00:22 +0000
Files and hashes: 1: eXAA1nyN62Ji4Ampr_QioQOPRIk.crl (hash: kYhb6egtjBJCWOVTmuaqOssi9gfpiscLsJ0TqkjMiic=)
2: x2Plj6HU813Gn6CnI6OWio0Ed3w.roa (hash: j+HdrBtXAtTZgu8aNGoL9Pn8S0MCOrlPhROCpWXQwvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:ba:ad:ea:77:00:f2:7a:c3:34:17:80:96:a4:b5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797000d67c8deb6262e009a9aff422a1038f4489
Validity
Not Before: Jun 12 20:00:22 2025 GMT
Not After : Jun 13 20:00:22 2025 GMT
Subject: CN=3df4f9c8bfe40a88e781cbffa72f88de2032d6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:e8:5e:af:53:91:68:b4:42:54:f7:ca:b8:
5d:f8:43:0b:a9:f9:ca:20:f6:fb:25:02:02:b9:c6:
48:bb:eb:75:4d:61:e6:fb:df:19:37:94:46:da:e8:
1e:bb:83:e6:7b:0c:7b:ed:56:ef:a2:eb:e6:6a:0b:
e1:c4:71:1c:67:2f:62:b5:2e:af:0e:dc:3a:b2:3b:
6f:13:ac:2a:ee:6c:83:1c:e3:06:03:55:84:eb:f4:
43:8d:8a:0b:e8:ac:9e:a9:d1:40:c9:0c:b3:e9:ce:
3d:3b:15:52:6f:31:36:20:f6:f9:23:07:65:61:15:
d0:bf:b2:d8:ac:8b:88:28:e4:cb:d3:08:34:ae:6a:
b9:c8:14:00:11:10:c0:38:c2:20:8f:75:f2:2a:3f:
e9:88:9a:c6:67:a7:a9:65:98:33:3a:77:2a:68:06:
7e:af:da:e0:cb:8a:88:97:f7:73:46:3c:0b:4c:1b:
53:20:e8:f3:42:b8:3c:12:c0:1f:05:d3:16:ed:17:
eb:02:c2:f9:9e:d4:d7:84:79:74:28:f2:b4:cb:ac:
72:83:4f:a4:59:01:e7:23:68:00:ae:2f:73:98:3e:
2e:50:20:d6:13:03:08:04:77:d8:83:3d:2f:62:48:
aa:33:19:70:b9:2c:ab:75:ec:1b:e9:4e:83:22:d6:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F4:F9:C8:BF:E4:0A:88:E7:81:CB:FF:A7:2F:88:DE:20:32:D6:FA
X509v3 Authority Key Identifier:
keyid:79:70:00:D6:7C:8D:EB:62:62:E0:09:A9:AF:F4:22:A1:03:8F:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXAA1nyN62Ji4Ampr_QioQOPRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e2cdac-8901-4052-9554-bae9d2b29601/1/eXAA1nyN62Ji4Ampr_QioQOPRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:5d:1d:9d:e6:e4:7c:fa:dd:b9:1d:e1:f7:74:e4:c7:2e:83:
16:58:95:0c:c6:7b:3d:2e:a5:28:cf:24:e7:6a:71:1d:06:de:
71:dd:e5:fb:5b:35:b2:90:dc:b3:d2:69:e0:e3:3b:54:ac:df:
b8:dd:23:83:b0:ef:6b:5f:bd:6d:24:86:f9:50:0d:61:78:73:
d5:35:0b:2b:32:15:ac:94:9e:4e:7a:95:27:6f:ba:dc:43:3e:
ac:59:76:73:6f:e3:8a:23:f5:9f:9d:c2:38:ec:d3:59:21:f4:
03:7b:e2:4c:36:4c:7b:78:42:a8:4d:b3:17:cf:c3:b1:42:27:
f6:91:01:28:67:6f:4a:99:a6:bb:2e:08:2c:54:36:3e:b8:33:
ad:7a:ec:98:31:58:42:0b:67:f6:6d:c6:20:be:3b:dc:c9:90:
51:b3:d2:4b:3c:7a:1a:25:a3:d6:c3:07:e3:c5:12:47:fe:f4:
84:b0:44:21:57:98:85:07:29:26:5c:91:0a:24:2b:d5:02:ba:
f0:83:a9:95:16:1a:22:fc:b5:ed:2c:4e:87:3f:4c:04:a6:a8:
cd:fc:03:ea:08:49:c9:e9:5d:37:3e:27:e5:9b:ba:17:4a:61:
98:51:d1:c5:89:7d:d2:48:04:8c:f1:60:9d:9a:28:a6:94:4d:
99:17:f2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:27:18 2025 by rpki-client