Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
File: p72rJYCrs79ii11PidSXzZ2SpOM.mft (raw, json)
Hash identifier: vNguSfRuUnr4BB1jJ69UsIR2zo0h8D2KPVZsgRJsFiI=
Subject key identifier: 2D:39:8F:7A:A5:A9:C4:16:B6:7A:7D:F6:6C:CA:AA:3C:5F:55:27:FA
Authority key identifier: A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
Certificate issuer: /CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Certificate serial: 019747B10377F9BD3DF33C1FD044D9EF9D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 00:01:12 +0000
Manifest this update: Sat 07 Jun 2025 00:01:12 +0000
Manifest next update: Sun 08 Jun 2025 00:01:12 +0000
Files and hashes: 1: GdFZWMri9TOgFT_NeIYkh_SHlw0.roa (hash: NbWz1qM9hdBHH2+QMgdXpTZoVY8ecNxlY44TCKHTwLo=)
2: p72rJYCrs79ii11PidSXzZ2SpOM.crl (hash: mAMySdwqam4nkNYVkGgPkNE1EYKRB0kldOA3sDj7DvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:03:77:f9:bd:3d:f3:3c:1f:d0:44:d9:ef:9d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Validity
Not Before: Jun 7 00:01:12 2025 GMT
Not After : Jun 8 00:01:12 2025 GMT
Subject: CN=2d398f7aa5a9c416b67a7df66ccaaa3c5f5527fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:a5:3e:54:64:51:1e:30:04:a4:28:b9:39:
bc:8e:97:ec:30:12:6f:5b:76:47:45:a3:88:cc:b6:
e8:bb:01:85:97:be:5d:fe:35:8a:83:bc:df:c8:08:
55:32:1a:ed:5f:f3:2b:92:7a:86:75:9a:36:00:0e:
b3:b9:25:f4:8f:7f:36:9d:7c:50:c8:75:90:ec:b6:
fe:a0:49:34:95:20:0d:1f:a5:35:a6:78:ea:69:48:
ea:ae:85:fb:1a:4c:aa:33:d7:d0:b3:21:46:5f:50:
06:cf:1f:c6:7f:da:af:6d:00:5f:af:0e:d6:0a:90:
c1:26:8f:3a:e2:21:70:7a:6f:fd:77:ed:aa:0c:2b:
1e:ff:53:16:50:08:31:30:19:c0:99:4c:c1:f6:7a:
ae:5c:3f:29:32:7f:de:4c:eb:45:f9:7d:b9:14:e0:
4b:84:a7:74:4d:76:65:36:a8:c4:ef:f7:ca:33:86:
f7:dd:7b:e1:7d:e6:e8:f7:f0:c2:bb:9c:13:2a:49:
6a:bc:be:46:ff:01:d5:d2:ba:35:99:e7:66:d6:2f:
fe:81:98:8d:53:e1:8c:62:cc:88:2f:ed:67:c9:82:
ba:31:47:db:26:be:8c:75:a0:bb:16:65:c1:df:d0:
7f:e7:0e:4e:55:7e:91:65:8a:62:62:d1:d9:74:bb:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:39:8F:7A:A5:A9:C4:16:B6:7A:7D:F6:6C:CA:AA:3C:5F:55:27:FA
X509v3 Authority Key Identifier:
keyid:A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b6:a8:88:86:f7:83:8b:49:d6:ed:c1:cf:97:d4:91:ab:33:
85:d8:28:89:ac:6f:ab:e1:b5:cd:b0:5f:55:49:6c:b8:4b:b1:
42:56:bf:ad:13:9b:24:49:be:e2:63:f0:0a:ee:1e:09:0d:c5:
35:05:af:75:22:d7:ed:82:fc:da:89:70:cd:6a:59:92:8e:4e:
3e:21:a6:8a:7b:5d:18:d6:21:dc:56:90:be:d8:31:2a:d3:4a:
cc:1b:2b:5d:4b:ac:ff:a8:5f:2c:6e:f1:c5:b1:77:78:eb:10:
04:fe:ed:7b:ee:bc:6f:07:db:38:2f:07:d2:24:9b:79:b2:0d:
cb:89:f8:1b:5d:80:0f:43:85:b2:3b:65:f3:6f:17:2e:b1:3e:
53:c4:7d:8a:98:b6:39:cd:50:de:59:98:06:36:6e:48:6c:f5:
c4:c8:d9:2c:21:c3:b8:c9:d5:3b:67:0d:b9:f7:59:68:b5:1f:
8d:8c:1b:61:cc:e7:6a:3c:6b:9a:99:93:37:72:fd:72:27:4a:
d0:21:5b:bb:d2:4f:f2:94:4b:c8:74:75:80:a8:80:a7:f3:ec:
a5:f6:61:32:26:6e:93:60:92:8f:91:b3:b1:84:e5:69:f0:75:
f1:e1:ca:08:b0:28:de:1b:a0:c6:38:56:32:ab:77:f2:41:fc:
f5:83:93:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:03 2025 by rpki-client