Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
File: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft (raw, json)
Hash identifier: 8VrRkpEonKe0ll3iuAEOiYpfSSRpi9SuqJbrMqCIMnU=
Subject key identifier: D1:86:AE:FA:02:4E:52:1E:C9:13:E0:DE:FF:BD:E7:CF:AC:11:04:B7
Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
Certificate issuer: /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Certificate serial: 0197481E674984DEBC53A131FF402DAF4E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 02:00:41 +0000
Manifest this update: Sat 07 Jun 2025 02:00:41 +0000
Manifest next update: Sun 08 Jun 2025 02:00:41 +0000
Files and hashes: 1: QdWm_iYTkmRwOlae6fa_m0n_xoY.roa (hash: GAwdxYROZcqJfJWKya6QGN1+Dp1F3FkjXyRiudeAVk4=)
2: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl (hash: rGieTTEaWrw/GFWEJVzETJtEVFIxAJGL6FLtQuw5HC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:67:49:84:de:bc:53:a1:31:ff:40:2d:af:4e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Validity
Not Before: Jun 7 02:00:41 2025 GMT
Not After : Jun 8 02:00:41 2025 GMT
Subject: CN=d186aefa024e521ec913e0deffbde7cfac1104b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:3d:ec:2a:9e:89:3f:ca:bf:aa:39:07:3c:
0e:2f:55:84:1d:17:a4:10:a5:f5:e8:29:64:8a:bc:
ae:4d:23:c8:ff:00:a9:5c:cd:30:66:53:00:d9:2d:
3f:2b:fa:a3:95:ee:bc:94:7e:96:dd:2d:92:d0:d5:
fc:6a:14:76:6c:00:5b:15:ae:a4:a7:e6:a9:bb:fd:
e3:c0:00:fc:e2:94:86:a0:1d:c7:59:49:c7:3a:c1:
a5:c4:de:ce:ca:5b:56:1e:50:b8:1d:cc:bb:89:7c:
c8:fa:2a:dc:46:a7:f3:7b:00:50:a4:52:e2:45:65:
0c:1f:bb:c6:4d:96:b0:ec:86:61:24:44:b8:c0:8e:
3d:18:34:f1:99:5e:92:3b:c1:8b:0d:c3:73:72:92:
f8:13:da:5c:7d:25:c2:cc:57:2d:44:3c:5c:01:2c:
11:d1:c4:1b:be:57:c3:0a:7b:7c:1d:f7:a6:f6:90:
7a:b4:45:00:93:13:ed:8d:74:a6:d2:60:82:64:39:
60:57:ef:99:cb:9a:ad:d7:ee:a3:17:36:2a:2c:22:
93:28:94:b1:1f:fa:eb:eb:12:d9:a7:7f:93:d0:c4:
27:a0:e9:bd:19:ba:a2:50:b6:bd:7f:13:cc:35:bf:
61:09:3b:4f:93:5e:da:c4:fd:31:cb:3d:0f:98:91:
3e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:86:AE:FA:02:4E:52:1E:C9:13:E0:DE:FF:BD:E7:CF:AC:11:04:B7
X509v3 Authority Key Identifier:
keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:7c:e9:19:dc:f8:2b:d1:1d:66:80:4d:e1:cb:f2:bc:ea:41:
33:18:09:2d:e6:eb:cc:5b:29:f1:61:22:8d:b0:5c:7b:7e:e6:
a9:0d:b3:46:43:24:8f:39:46:b6:44:50:f0:ea:38:63:4e:ce:
bc:e5:5d:a3:45:65:d9:88:80:80:41:dc:8f:22:65:2c:e4:ce:
59:34:94:ac:4b:50:68:4a:27:e0:86:16:6b:41:80:05:8e:4c:
91:74:c9:5a:66:79:73:b1:9c:c6:8e:a9:18:f1:4b:2c:13:78:
a3:8e:e8:47:d6:be:a0:c5:38:3a:dc:4b:15:f0:fb:09:f2:e8:
7b:34:8e:99:b2:7b:f2:32:57:55:e2:1d:1f:e2:42:ac:41:16:
b0:5e:bd:55:28:e8:06:68:51:e5:96:07:19:41:6d:53:b7:03:
cb:9a:bf:c3:d6:36:71:47:cb:86:d2:4b:7d:45:71:03:a7:dc:
d2:99:9f:fc:09:a3:3f:54:59:49:3c:12:bc:8d:f9:71:b9:d8:
b4:61:45:b2:ce:88:09:5d:f1:99:60:e1:1d:86:8c:17:e7:ef:
b3:33:bf:f4:81:7c:03:42:f2:ac:03:a5:9d:9f:d2:70:32:06:
9d:b8:12:a6:31:4b:b9:a5:0a:ce:6c:5e:1a:f4:4e:d5:45:b8:
f1:50:96:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:34 2025 by rpki-client