Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
File: ou0LqLRu8lHloFimSiGzB9NlDdw.mft (raw, json)
Hash identifier: UIdwBs9ZggVt8NPYJ65Peq7zELbKGgqFiqW0x40uYEw=
Subject key identifier: 25:BB:99:C4:7B:E0:DC:91:EF:36:63:3C:6A:55:9D:B2:3A:76:47:C0
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Certificate issuer: /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial: 01974D7BB220FE0BE2BB7F78E9AA87E6727B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 03:00:41 +0000
Manifest this update: Sun 08 Jun 2025 03:00:41 +0000
Manifest next update: Mon 09 Jun 2025 03:00:41 +0000
Files and hashes: 1: 1-oPnzeRnS2wes3eHWFhju7Aog-g.roa (hash: 0Z/IUXs4OK8CJd/fYdgboQWjbgJJCz+sIFSEwO7NpmA=)
2: ou0LqLRu8lHloFimSiGzB9NlDdw.crl (hash: SHnLFpj4aMOKD8GJFyhppLvbpMMhyVJe8uemNHnOUV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:b2:20:fe:0b:e2:bb:7f:78:e9:aa:87:e6:72:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Validity
Not Before: Jun 8 03:00:41 2025 GMT
Not After : Jun 9 03:00:41 2025 GMT
Subject: CN=25bb99c47be0dc91ef36633c6a559db23a7647c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:20:c6:f1:ab:d6:60:76:9d:17:66:4f:bc:
25:03:a7:bf:5f:7b:4f:a4:8d:17:e8:41:f0:10:dd:
a7:1c:f2:c4:50:49:f4:ba:d7:fd:ac:bd:a8:d7:23:
bd:64:90:41:59:d4:26:17:ee:97:af:b2:7b:4d:a6:
be:5c:f9:75:bb:1c:58:c6:fe:67:68:d5:ea:00:fa:
61:02:bd:e3:92:e6:97:66:58:f3:fa:a7:1e:f8:cf:
aa:ea:fe:8b:9e:0e:cb:fa:60:a5:56:50:88:25:28:
ed:fc:1a:70:88:fa:66:c8:b3:b1:87:bf:cd:31:0d:
05:ad:07:03:9e:e4:41:5b:c7:34:d4:9a:56:cc:5e:
86:50:42:0a:dd:61:9d:fa:6f:55:83:4d:63:0e:25:
be:6a:f6:e4:f2:1c:11:06:f8:0b:32:8c:50:f4:d1:
4a:df:1f:98:02:e2:71:34:f5:9c:fc:29:1d:62:71:
a7:f2:30:52:db:a2:8d:ce:7a:e8:19:7e:bd:d2:e5:
f6:47:55:dc:a6:13:f4:2b:1f:bd:d8:e9:16:9a:9a:
21:35:b2:19:3f:d1:ed:59:19:2e:62:de:a4:57:6c:
8f:35:1b:bb:2b:c7:78:8c:3d:ec:79:18:58:59:52:
f4:6c:08:e6:7a:14:31:80:a3:56:1a:cf:fd:b9:e8:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BB:99:C4:7B:E0:DC:91:EF:36:63:3C:6A:55:9D:B2:3A:76:47:C0
X509v3 Authority Key Identifier:
keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a4:3f:d1:ca:5a:65:21:ad:e4:d1:93:b0:7c:14:08:a3:bd:
20:74:4a:9e:08:9e:5d:e6:62:28:d7:33:31:16:aa:32:26:5f:
0e:59:c1:c2:b1:3b:15:eb:54:b8:5b:73:5e:55:16:66:2e:6c:
87:ea:92:15:76:af:14:cc:62:cd:30:c4:39:f3:42:e1:f9:5a:
d2:14:77:8a:17:1a:06:d6:3e:6a:e3:41:e0:70:58:8c:dc:c1:
90:74:1e:8e:76:b0:1c:c0:1c:70:2a:71:8a:b5:d6:fb:e6:cc:
c8:af:6e:bf:43:69:30:49:4e:7d:73:33:80:66:a3:51:3e:f3:
3b:84:71:e4:39:00:4a:3f:f1:67:8a:3b:2d:47:ff:5e:12:dc:
56:16:85:a6:c2:b6:e4:6c:df:71:c1:5d:c7:a5:66:d3:5a:41:
aa:c9:57:02:00:8d:68:b5:6c:9e:1f:24:a4:df:87:be:eb:72:
cc:2d:6e:f9:e7:a4:dd:fb:7f:7d:e4:5f:61:b2:73:4b:51:a9:
17:a5:6a:dd:af:86:bb:08:67:19:d0:6f:f5:8f:0d:ac:44:cd:
ca:4b:c9:cd:ea:52:ae:c8:74:87:69:65:9a:52:17:81:22:81:
e4:e8:2c:3c:d1:eb:17:07:28:0f:ca:32:e3:29:ce:49:a3:4e:
75:d5:65:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:23 2025 by rpki-client