Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
File: rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft (raw, json)
Hash identifier: HjOAvgna0wa4o4TBBEo8GpVXN3/COwbImpZQ226kkrc=
Subject key identifier: 88:05:46:D8:F5:F0:3A:82:EE:2B:9B:3E:55:01:BC:EF:51:81:8A:58
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial: 019749D5EB06149A5C9075AF798EE34E1DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 10:00:45 +0000
Manifest this update: Sat 07 Jun 2025 10:00:45 +0000
Manifest next update: Sun 08 Jun 2025 10:00:45 +0000
Files and hashes: 1: 7a4UPx06lYNEEu_8hOujHiCjI3I.roa (hash: KGEycmI2h25GEHvIQbSwQGJ1oU96GoNn5z0Fg/wO3lQ=)
2: fEfLOGBVJeUecVVlEjapZ06Oj8U.roa (hash: OleUOgz+9pFvUxQajAS7ULw6aOZyzyIU0DZD60L7Tws=)
3: kM5CulzBTgjqTdxC0kA20nIBInM.roa (hash: 4mPvZr8lZjvljhR4YU0MwI6WkG6rsEag6Ecnz4z85HY=)
4: rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl (hash: FseBnnS7akQQfPQT+V7Z6aot5SUpKQhdr8LOAq/NUK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:eb:06:14:9a:5c:90:75:af:79:8e:e3:4e:1d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Validity
Not Before: Jun 7 10:00:45 2025 GMT
Not After : Jun 8 10:00:45 2025 GMT
Subject: CN=880546d8f5f03a82ee2b9b3e5501bcef51818a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f3:e1:96:d0:37:27:3b:9f:df:d9:51:b4:43:
93:0e:75:89:0d:50:dd:c7:e0:45:ba:f6:c2:57:06:
2f:0f:38:cb:91:4e:01:30:af:07:80:d5:0f:fe:b6:
ed:e8:78:b2:56:d0:9f:2e:a4:60:da:73:a7:29:36:
2e:7b:64:e0:d1:d3:44:92:46:12:96:98:5c:4e:b9:
84:67:52:ce:d7:19:f6:b8:9b:d0:9e:bb:a4:ab:1c:
16:d6:53:28:b9:68:ff:54:bf:f6:7d:3f:5b:c7:f3:
90:6e:90:2d:7c:cd:cc:86:35:a9:be:cb:76:51:0f:
3a:30:2d:e5:21:a9:df:47:95:0e:ba:c1:64:97:64:
64:1e:53:f5:c4:58:c2:6b:b1:8a:cc:15:45:c8:4e:
31:4d:e6:fe:b5:bc:64:53:c5:75:d6:69:7f:e0:eb:
b1:07:36:5d:e7:4f:d6:f6:e2:66:24:a5:54:03:e4:
2a:3d:9e:69:67:28:ce:5f:c7:06:62:8a:29:10:d4:
35:ba:e1:5e:53:fb:b0:a1:17:af:d5:cc:68:c4:fc:
1a:0f:1d:d2:a4:47:57:12:78:ae:76:b0:d2:a1:03:
d4:f6:48:53:3d:5c:44:38:4b:75:9f:63:0c:83:09:
41:30:aa:5a:03:14:41:ad:89:77:34:eb:c8:c1:cb:
56:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:05:46:D8:F5:F0:3A:82:EE:2B:9B:3E:55:01:BC:EF:51:81:8A:58
X509v3 Authority Key Identifier:
keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:77:98:6c:42:81:d4:ac:82:d4:6f:32:e5:b2:64:ab:55:02:
12:be:2d:0f:7a:64:06:69:d0:86:18:aa:dd:85:f0:d4:b5:9c:
2e:15:ed:ce:87:0b:fc:9e:ac:f6:ad:c0:78:a2:d3:e1:11:75:
f5:32:f3:1b:9c:35:86:98:b0:a4:14:98:e7:df:3a:0a:e4:df:
a5:7d:36:b6:ed:9d:e5:ad:e5:7f:72:4b:3a:d4:84:b3:d0:8e:
0c:73:4a:06:63:45:04:ff:48:db:40:38:e9:f6:f9:b4:4e:d1:
03:51:4c:e0:ec:fe:20:e2:99:65:5e:2f:81:a0:47:44:dc:1e:
9e:c5:53:e8:f3:d6:8f:39:01:52:4f:ee:6a:80:d1:0f:fc:18:
d3:73:1d:64:b6:f0:59:b9:13:8f:56:e2:03:5d:90:0c:f4:9f:
5c:93:75:fb:a0:54:96:22:96:3a:91:1a:4a:0f:c3:5a:89:37:
01:6f:5f:52:cf:17:87:7b:17:8f:3e:07:2a:e3:65:99:7c:83:
ad:a8:73:02:b8:55:b7:2a:6c:03:d1:89:19:34:4c:2c:40:40:
d1:13:6b:89:d3:83:1c:10:8b:4b:c5:b8:ea:65:ec:4b:a4:46:
5f:ff:dc:fe:c4:73:92:9e:c6:76:f7:4d:00:36:63:75:8b:da:
9f:4a:ba:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:08 2025 by rpki-client