Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
File: t5VYLHMwLrCpdEd2AwSYUIM70hA.mft (raw, json)
Hash identifier: CJL3DP6nGPNDl1RR8LcSsqxXwYSgmSxtdPOhMi9q/ug=
Subject key identifier: 57:0F:6F:C9:7A:A3:DE:97:23:28:EE:92:6E:64:E2:7A:AB:9C:D2:8F
Authority key identifier: B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
Certificate issuer: /CN=b795582c73302eb0a974477603049850833bd210
Certificate serial: 0197469EADAE5B928AAE60B39EC7F9CBF04D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 19:01:33 +0000
Manifest this update: Fri 06 Jun 2025 19:01:33 +0000
Manifest next update: Sat 07 Jun 2025 19:01:33 +0000
Files and hashes: 1: BHWwRry-UijUF9-7a9qe-3in6HE.roa (hash: GplxxbcF603HuP5zyFWWBxSgE208s+IGY7yLNmT6LyQ=)
2: t5VYLHMwLrCpdEd2AwSYUIM70hA.crl (hash: jzBWbTBadSA2cSLrex3g+np0E5B+FD0ia7FVZViS4X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:ad:ae:5b:92:8a:ae:60:b3:9e:c7:f9:cb:f0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b795582c73302eb0a974477603049850833bd210
Validity
Not Before: Jun 6 19:01:33 2025 GMT
Not After : Jun 7 19:01:33 2025 GMT
Subject: CN=570f6fc97aa3de972328ee926e64e27aab9cd28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:40:dc:01:74:2c:82:d4:bf:6f:83:60:12:b9:
70:74:0a:b5:3d:96:cd:da:7a:8c:78:ab:fe:84:ed:
b0:87:c3:ea:17:a6:15:9d:b3:dd:9e:0e:f7:26:0f:
58:19:37:76:92:d3:4d:42:a4:6f:73:6c:88:b2:24:
67:5d:de:3c:6a:21:6e:ca:3e:dc:41:08:4b:0a:d9:
7a:d0:e6:32:e2:89:e8:bf:83:61:8d:f6:50:7a:18:
d7:ed:d1:b2:de:c5:f4:ea:ff:b3:d7:32:b3:f4:3f:
8c:8d:70:65:77:4f:9b:51:36:92:40:fb:4a:0c:35:
00:e1:cc:69:8c:f1:55:84:c1:23:55:73:6b:67:7e:
83:cb:d0:01:cb:d2:c6:2d:0b:10:46:0e:9e:93:3c:
d7:64:4c:3d:5e:c9:23:08:52:ba:d7:e9:23:45:e6:
b1:dd:67:d6:10:67:30:75:32:88:80:0e:78:20:30:
46:c6:1d:3c:0a:04:ad:c7:94:49:16:51:9a:a8:4e:
72:84:00:52:e9:4f:bd:63:5a:a8:12:7c:07:31:03:
bf:da:e2:ea:b8:51:e2:c8:32:52:c1:bd:09:0b:79:
cb:40:47:18:84:95:2a:9a:7b:9e:21:29:fd:e3:35:
30:b1:d8:47:26:2a:88:79:92:44:3d:25:40:06:df:
cf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0F:6F:C9:7A:A3:DE:97:23:28:EE:92:6E:64:E2:7A:AB:9C:D2:8F
X509v3 Authority Key Identifier:
keyid:B7:95:58:2C:73:30:2E:B0:A9:74:47:76:03:04:98:50:83:3B:D2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5VYLHMwLrCpdEd2AwSYUIM70hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57d30a-0552-45f6-9ebc-c2bd5fc04424/1/t5VYLHMwLrCpdEd2AwSYUIM70hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:df:30:a3:41:39:27:5f:4a:0c:67:88:01:11:34:dd:ea:5d:
95:cb:56:e3:7d:13:c7:e1:09:55:86:10:20:c2:d0:d6:f1:73:
41:8d:bb:4d:26:97:94:e7:b1:66:7f:8d:3d:45:90:45:fc:dd:
1d:c3:81:36:34:83:04:a2:bc:a7:22:36:1b:5f:f7:10:1b:0b:
5b:89:2e:2b:75:5e:3d:47:d9:10:a7:cc:db:0e:16:2c:fd:07:
1e:9b:f2:de:5a:10:c0:48:e5:0d:9f:a8:7b:74:f9:dc:79:2a:
78:1a:58:95:f1:a1:1b:d3:bc:af:79:4d:98:92:c1:45:5c:f6:
4a:89:cd:22:ea:32:0e:c3:b9:18:f8:cd:f2:7c:31:72:c8:06:
53:bb:84:b7:bc:d0:62:89:51:64:b0:82:0f:f1:af:05:65:af:
4c:2a:75:3b:86:29:4d:cf:f1:aa:f6:86:d5:9f:a9:78:17:c3:
6a:b6:dd:3c:a4:ed:1d:bc:14:46:97:f8:19:a9:46:13:b6:32:
bc:ed:6e:2b:15:39:07:47:98:0c:69:fe:7c:02:65:e2:c0:38:
03:c8:c0:d0:7a:25:09:9c:37:d6:7f:97:eb:a4:f7:d4:79:d8:
5c:7f:35:98:9a:97:40:98:87:6d:c4:9a:c3:a5:9f:80:7a:61:
40:59:a2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:39 2025 by rpki-client