Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
File: mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json)
Hash identifier: nvmhC+3rj8lhv+UiMA8z6/vYM8bozzCANUU7M3JdNEE=
Subject key identifier: FE:D7:43:8A:F5:4B:95:39:26:17:8B:77:C8:65:08:8F:12:7B:9C:40
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Certificate issuer: /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial: 0197488C8DC2A5EF71F9761ACFA01024CBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 04:01:00 +0000
Manifest this update: Sat 07 Jun 2025 04:01:00 +0000
Manifest next update: Sun 08 Jun 2025 04:01:00 +0000
Files and hashes: 1: QDRodL1Ij0kvPV6RatQCpAs4M7Q.roa (hash: 8yQMKLh2R6BvydYUR3v0EXrX6Bu8MKleBRx4SEEyIAM=)
2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: 9p+7C5nqtStV/hPkVbfa1/07UcimUJjsEyiNUNW6490=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:8d:c2:a5:ef:71:f9:76:1a:cf:a0:10:24:cb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Validity
Not Before: Jun 7 04:01:00 2025 GMT
Not After : Jun 8 04:01:00 2025 GMT
Subject: CN=fed7438af54b953926178b77c865088f127b9c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:95:91:a8:fb:95:88:49:70:70:49:10:21:
92:24:9f:8b:80:5d:a8:d9:19:f6:66:f7:58:46:f9:
30:c8:eb:a2:be:79:23:83:57:e5:05:58:5c:9d:c6:
53:00:84:16:2c:f8:2d:ae:18:6c:70:78:64:3c:82:
5d:96:38:cb:d2:f2:ab:23:7d:4f:e6:18:04:f0:14:
ab:79:41:61:6f:67:38:03:56:57:0b:d6:56:06:8a:
50:49:ff:a4:0e:9e:8b:30:21:33:ab:54:9e:32:d2:
8e:64:5f:ca:1d:79:7a:e5:6b:74:4c:64:e4:ec:55:
0a:4a:cb:1f:0b:7c:26:b4:d4:d6:b0:41:42:69:36:
97:c7:b4:e4:7d:58:5f:ff:19:dc:65:c0:1e:58:5e:
e0:31:a0:ba:7c:4e:2a:3d:43:27:7d:b4:f8:9e:a9:
8d:05:da:ca:4d:90:9b:45:89:05:0f:9e:12:ce:d7:
0d:39:bc:b3:bd:4a:00:21:44:99:57:12:d6:19:90:
55:df:7c:ac:63:96:27:10:0e:70:eb:de:a7:35:9a:
9f:ad:51:2f:66:6c:18:46:35:e9:6b:90:df:b0:39:
b3:8e:f9:27:f1:11:1e:6e:4b:a9:7e:59:1d:28:8c:
6e:99:e2:6a:68:b8:82:cb:5b:27:4c:c3:b0:82:ab:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D7:43:8A:F5:4B:95:39:26:17:8B:77:C8:65:08:8F:12:7B:9C:40
X509v3 Authority Key Identifier:
keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a6:af:dc:19:fa:a6:25:0d:91:0e:86:62:84:a1:eb:16:5f:
c5:b1:7d:e6:7f:75:f6:8b:c9:75:72:17:16:f8:92:f7:1b:c5:
8d:cd:98:43:46:f2:94:14:7f:a0:65:d3:d4:4d:e1:2d:ff:9d:
43:5c:95:e2:1b:96:52:50:31:76:1d:bb:99:5b:bb:56:a7:8a:
f5:7d:de:ae:e9:bb:7b:c9:7f:14:92:03:c0:d1:9a:52:bd:10:
09:94:fb:40:87:d4:58:48:5f:47:21:e1:f3:bc:7b:ea:96:76:
a4:d5:6e:62:88:7c:7f:0b:ac:e7:4f:93:59:78:bb:e6:58:df:
21:e3:55:74:f8:ca:a4:f1:a6:f3:21:58:17:9e:8a:e0:a2:d0:
67:67:c3:1f:f4:f9:a4:e3:30:40:b7:b5:d4:e1:8a:a8:82:0a:
b6:10:b7:db:12:89:97:23:78:6b:ad:31:c1:00:33:19:0f:f2:
20:c9:59:e9:98:c1:9d:59:6c:c2:d2:4f:89:fb:0e:1e:47:c4:
66:37:a5:77:54:d3:cf:3d:5a:ba:13:89:2c:b3:1b:27:62:16:
eb:80:38:34:0d:75:b7:92:45:93:44:53:c5:1f:6e:03:91:8b:
30:49:87:39:ee:87:7e:1a:34:17:73:c6:17:a3:b4:e0:ae:82:
2c:bf:cb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:09 2025 by rpki-client