Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
File: r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft (raw, json)
Hash identifier: 3l4tIatWtn0rBJnmDOj10skgNEaX+kCDzNtqgClb7As=
Subject key identifier: E9:FB:11:F6:26:26:77:F2:83:03:5B:6A:8C:7B:04:33:70:1F:3C:18
Authority key identifier: AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
Certificate issuer: /CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Certificate serial: 019747795133F8F57C4CD074465683E5CEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 23:00:22 +0000
Manifest this update: Fri 06 Jun 2025 23:00:22 +0000
Manifest next update: Sat 07 Jun 2025 23:00:22 +0000
Files and hashes: 1: 4spQ6NxJCHQlIe40OSpahfCWkew.roa (hash: q8IYfG4TfaqBRLC5bxYFRKAEUKhB1rQ/o2LIt/ycHL4=)
2: f_yXJGNzegLxOLz8jRnmFe-XGpI.roa (hash: tOrW/MEZqwnfeildny0YITd6StrSUroZ/b9Bx2DHobc=)
3: r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl (hash: 6Y5UvchGTz3oS+gipkdQbpn1+yu0BILp5E4Q3IIZYho=)
4: wfzndjh_1PyK6B8Rf4Qnrhzhf1I.roa (hash: conmJC0uHXltpd+fK7k2U4ghVYU0Xoj8HIet8R78GBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:51:33:f8:f5:7c:4c:d0:74:46:56:83:e5:ce:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af503e5b835f0a81381d1c4c1233d38fb7ddf23d
Validity
Not Before: Jun 6 23:00:22 2025 GMT
Not After : Jun 7 23:00:22 2025 GMT
Subject: CN=e9fb11f6262677f283035b6a8c7b0433701f3c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:c1:ab:05:e6:43:73:88:e1:32:53:92:e8:
67:8f:c1:d5:2a:2e:20:7c:7e:74:e8:5a:76:52:c5:
71:d9:b9:8e:78:67:e7:8f:5f:0b:fb:b5:6b:b2:11:
8d:9d:e9:c7:9d:34:32:75:05:bd:20:dd:65:ea:4f:
8b:9d:51:3c:a1:b9:1a:50:fb:f7:63:02:d2:82:9b:
3d:e6:3e:eb:96:e0:41:a8:9f:67:37:b5:24:01:4c:
28:dc:2c:ac:23:e8:c0:c3:ba:93:16:6f:ae:8f:9b:
96:cb:22:e7:99:aa:d2:1e:6f:87:8e:6d:54:91:06:
65:f1:90:f1:bf:21:1e:48:8d:0a:46:02:a7:6d:2c:
7c:93:72:60:a5:01:d1:fd:c7:06:11:66:96:1e:b1:
32:7f:df:16:0c:64:92:16:0e:4e:8a:7f:7a:29:20:
e2:67:53:a5:79:62:3d:eb:24:11:89:c7:8f:27:35:
f0:b5:9e:fd:e2:4c:12:ba:62:ef:11:18:f6:e9:ed:
c8:83:ee:11:be:f6:21:8b:82:0b:1c:4a:4e:0a:b9:
c6:14:ec:2c:22:d6:99:8c:b1:a2:c2:58:bd:b9:59:
00:49:b2:1e:12:5e:91:23:a7:a7:b1:bf:67:8b:05:
f2:62:d3:ce:a8:ab:4b:39:a3:50:19:c1:94:49:aa:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FB:11:F6:26:26:77:F2:83:03:5B:6A:8C:7B:04:33:70:1F:3C:18
X509v3 Authority Key Identifier:
keyid:AF:50:3E:5B:83:5F:0A:81:38:1D:1C:4C:12:33:D3:8F:B7:DD:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1A-W4NfCoE4HRxMEjPTj7fd8j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/0600f8-2958-4417-bb67-3c5e1744acdd/1/r1A-W4NfCoE4HRxMEjPTj7fd8j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f3:92:14:34:c1:f8:da:16:7d:b6:ca:9e:f3:c8:81:35:f7:
64:64:1f:ef:a1:45:97:cc:6c:c0:8e:93:00:02:a7:c1:04:e9:
fd:94:00:e6:8a:58:b8:7d:15:a8:20:de:d2:f7:81:18:af:eb:
a1:30:74:d3:43:1c:16:82:c9:fe:73:b2:ce:3f:a8:30:04:10:
61:41:eb:76:41:3d:bc:65:c7:e5:df:2a:e1:34:e2:be:2f:da:
24:1a:21:ee:8c:1a:c2:d2:48:5e:5f:5c:f3:c7:92:5d:67:0d:
57:a6:dc:7a:16:1b:56:77:c7:80:b2:d3:63:2b:98:ad:40:56:
08:94:3a:09:84:7f:d3:c2:de:95:78:91:3f:7b:e1:9b:46:76:
e5:60:e5:e9:68:95:1f:d3:b9:37:2a:77:f9:2f:f9:e1:63:3e:
70:7d:2a:e7:0d:c7:79:69:9e:3e:97:df:b8:4c:21:31:12:9d:
23:f1:52:42:79:56:f4:01:f2:b0:22:6f:47:18:b0:65:76:5f:
4e:5f:fb:9c:69:1a:78:d1:a4:81:c7:8d:0a:c7:c4:a3:d8:ec:
8e:67:ba:22:47:60:fa:ea:72:9a:be:37:21:42:4f:b3:bc:76:
8d:bf:40:37:25:66:8b:3c:9a:5e:f1:51:47:99:42:fc:f6:bf:
85:98:7f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:09:47 2025 by rpki-client