
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
File: fewnmwUBcwaYowvNzqOuR3yVczE.mft (raw, json)
Hash identifier: zi4d2l70sFArkr7IQ+pQcmQqhHcwFOZjD+lKQhvIftA=
Subject key identifier: 74:7D:9D:41:27:C2:5A:A4:EC:92:BE:DC:8B:7C:BD:F4:8F:81:ED:45
Authority key identifier: 7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
Certificate issuer: /CN=7dec279b0501730698a30bcdcea3ae477c957331
Certificate serial: 019748FA1E7B1517BC7A8D4F83AAF649A04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:00:40 +0000
Manifest this update: Sat 07 Jun 2025 06:00:40 +0000
Manifest next update: Sun 08 Jun 2025 06:00:40 +0000
Files and hashes: 1: 8vkkegr96IBMHB6BFhag_SmFnOI.roa (hash: h5/oEq8rbYbckXXTNVYfhI/okuKJEZpt0WvLrdLeyGw=)
2: fewnmwUBcwaYowvNzqOuR3yVczE.crl (hash: mDtTGfT2bnL9kYLRTImyAWawjaHrPfeLW/XgMVjpdC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:1e:7b:15:17:bc:7a:8d:4f:83:aa:f6:49:a0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec279b0501730698a30bcdcea3ae477c957331
Validity
Not Before: Jun 7 06:00:40 2025 GMT
Not After : Jun 8 06:00:40 2025 GMT
Subject: CN=747d9d4127c25aa4ec92bedc8b7cbdf48f81ed45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c7:ba:fa:53:d7:e8:3f:78:cc:b3:5b:ae:28:
dd:cc:5d:7d:63:d6:f8:7c:0f:a3:fb:0d:a4:cc:f9:
0a:c9:5a:d3:96:ef:5f:b5:c0:00:b0:f1:82:6a:16:
a4:10:5d:f1:07:b6:b0:b9:30:33:76:b6:33:70:3c:
05:8b:bf:d7:d1:1a:c3:42:85:f4:a1:35:6a:4e:fa:
fb:cc:8c:f0:42:55:05:49:86:a3:1d:29:3b:ec:14:
b6:dd:eb:e3:d3:a4:26:0a:10:b0:f9:4f:9e:fe:34:
fd:f2:e9:01:00:f2:58:98:f5:16:9a:6c:2f:a7:70:
73:0d:97:90:3f:2a:52:06:4b:2f:fe:72:ad:b1:d9:
79:f6:00:1d:c5:58:75:50:fe:89:c6:df:82:28:2f:
53:55:e5:43:fd:1b:71:a0:ec:e2:3c:02:e2:dd:5d:
fa:21:9c:dd:90:80:c3:29:77:4f:19:ee:85:93:eb:
93:e2:85:d4:6b:f2:06:e0:04:e5:6b:98:50:74:27:
52:70:b0:de:6d:c3:aa:68:58:01:14:fb:f2:90:c0:
c3:43:ca:ce:6d:a2:f5:d2:dd:a7:0b:0b:54:19:b9:
52:5d:07:3a:fa:67:7d:6b:e7:66:98:e8:c4:ca:23:
b2:7e:9a:fe:b5:fe:13:72:84:4f:52:0f:6c:18:34:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7D:9D:41:27:C2:5A:A4:EC:92:BE:DC:8B:7C:BD:F4:8F:81:ED:45
X509v3 Authority Key Identifier:
keyid:7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:06:04:50:40:9f:d4:af:22:c8:32:3d:a8:9a:c6:e8:08:1d:
24:33:57:b8:8b:c7:1a:68:54:00:79:3a:9c:b7:71:d4:31:47:
ca:1f:8a:51:c6:a1:7d:40:c8:b6:86:6f:09:41:50:33:a5:17:
14:74:42:ce:ad:17:d6:63:8c:b7:28:e2:c1:77:62:5a:c9:0e:
07:c0:79:46:e0:21:4e:d1:77:2b:b8:9b:a9:2d:49:e5:d4:1f:
77:e5:45:33:a4:b8:f3:0f:65:79:6a:ed:54:50:0b:3f:7d:c1:
92:55:f3:c3:36:25:b2:82:c7:4b:55:9e:48:87:5e:ef:aa:ae:
8c:9c:2d:01:67:34:ba:ab:56:29:64:8b:8e:6a:ce:e3:9e:c0:
e7:6c:43:84:c9:26:bf:ff:52:53:1e:15:0c:76:90:b0:db:db:
3a:f0:52:78:00:81:41:9a:fc:26:b5:61:dc:b2:df:96:81:d2:
bf:58:04:a2:26:33:15:ca:ba:ea:38:67:e3:09:ca:ae:16:01:
bd:35:cf:c2:bc:ca:17:4d:ce:6c:a5:7b:6b:ca:d3:ef:78:09:
5b:da:7a:42:ae:09:d6:ed:ec:77:c4:3d:7c:2d:b2:46:44:25:
07:a8:60:27:c0:66:c8:29:e4:83:a1:88:c2:56:6e:77:13:5c:
41:0d:45:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:23 2025 by rpki-client