Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File: _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier: GobMva0wNgzHesBp8JMa76qR9osSIVJhzYlvfaTO+Jw=
Subject key identifier: D0:FD:12:78:59:91:2B:57:36:8D:7F:E8:18:9F:2F:44:F9:51:87:B5
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 01974DE9EB29655B4132A9E16DAF65272DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 05:01:05 +0000
Manifest this update: Sun 08 Jun 2025 05:01:05 +0000
Manifest next update: Mon 09 Jun 2025 05:01:05 +0000
Files and hashes: 1: 27ql0pmKcM7odOuyt-r9IUbz8H0.roa (hash: 8BtUKmV8OD/wNsVNWexZC4Gh5lDDpl/q9sI4sznft7k=)
2: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: Aaxc8+G4Gn4y6WXNcnOhsOx2q6RUQhIWHoTZwj82Gp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:eb:29:65:5b:41:32:a9:e1:6d:af:65:27:2d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: Jun 8 05:01:05 2025 GMT
Not After : Jun 9 05:01:05 2025 GMT
Subject: CN=d0fd127859912b57368d7fe8189f2f44f95187b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bf:58:c8:23:c2:e5:5a:68:de:48:3a:16:29:
2c:c1:87:7c:4a:e4:1c:06:9a:1c:01:82:24:56:78:
b8:b2:ff:a6:d5:b2:85:73:ef:ff:95:95:e4:8a:62:
c7:51:51:4e:27:28:54:ca:6a:ab:c1:b4:e6:1c:5e:
6b:d2:35:7d:57:1d:8f:4f:3a:8d:ed:17:61:c6:e0:
b6:ab:e2:f6:67:da:1d:ff:a8:7a:54:06:a9:0c:90:
25:1d:af:44:ee:f3:cb:eb:bb:5e:98:bd:67:56:75:
56:af:3a:36:72:f3:28:97:5a:7c:35:67:28:20:9a:
5e:1c:60:59:2d:e7:ce:95:32:ff:71:c1:da:9f:49:
30:6c:12:d1:b9:d2:bf:b6:ce:55:c3:a1:53:a2:4e:
86:65:2e:f0:6a:d9:1b:79:0b:05:93:bd:63:83:8c:
c6:cd:03:c2:fa:0a:c6:ee:ce:a2:db:20:38:44:31:
13:1e:2d:94:4c:57:4b:1f:8b:73:2e:c9:49:ad:e3:
d0:bc:ac:de:2e:25:86:c7:57:5f:e6:c8:30:30:4b:
39:94:a1:1c:6f:f0:00:63:10:1b:c7:de:d0:51:8d:
eb:dc:d0:3e:a7:21:7e:0e:af:c7:f7:7e:d5:91:cf:
32:d4:a7:8d:0c:81:89:26:67:bf:f5:cf:73:70:a0:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FD:12:78:59:91:2B:57:36:8D:7F:E8:18:9F:2F:44:F9:51:87:B5
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:92:4b:7c:12:52:46:4e:59:be:e4:92:cd:09:74:43:ab:a4:
c1:3b:e4:da:40:5f:38:82:9a:61:ad:02:3a:08:85:50:1f:4e:
c9:ca:75:1a:38:1a:d1:8e:c3:1f:d2:e8:5a:70:36:6d:e7:95:
be:38:01:28:10:2a:f0:c6:8c:00:58:b6:66:85:89:ee:6e:e3:
53:80:f7:ec:a4:7a:11:b4:94:93:e5:39:9b:e4:6e:5e:90:fa:
a2:87:08:c5:b8:74:36:b3:78:76:98:36:db:a9:4a:46:ec:fe:
2e:f1:81:9f:4d:f5:8f:c4:f8:a5:98:c9:fd:b7:cf:4e:cb:e2:
88:31:28:bb:1c:0c:e3:13:c3:c8:90:7e:87:5d:99:e0:b5:98:
29:01:7b:f8:94:f4:f7:1f:84:12:54:94:ac:07:74:fc:41:92:
91:93:81:ea:c6:a4:84:e6:cf:17:8c:84:46:92:77:bf:f2:2f:
84:25:29:8b:16:50:88:0c:9d:48:1a:84:47:b7:7b:66:ec:67:
f8:66:1e:a5:1c:9e:de:b9:a4:86:41:ea:4c:b1:f1:06:3f:21:
d1:0f:75:6b:da:fe:d5:91:b3:a3:ff:eb:bf:86:25:8c:5b:54:
0a:c1:2b:12:61:17:cd:7e:af:ca:0b:6f:bb:67:36:56:0c:6d:
ab:bd:90:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:42:34 2025 by rpki-client