Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
File: x43nqz8ef8G8o1IOrP4OGn5qVf4.mft (raw, json)
Hash identifier: D5DvKycmUrKepkCf0lQYShMs/SYXIEQJPFF49tkXakE=
Subject key identifier: 77:BF:92:13:6C:84:3C:38:41:E2:F5:B1:57:27:AD:B4:C3:91:88:64
Authority key identifier: C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
Certificate issuer: /CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Certificate serial: 019748FA5F4E65A368A559AE1794BB6430C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 06:00:57 +0000
Manifest this update: Sat 07 Jun 2025 06:00:57 +0000
Manifest next update: Sun 08 Jun 2025 06:00:57 +0000
Files and hashes: 1: g8YwGSQJtphdygepP_zngeWXvFU.roa (hash: MN0YFZEniJxqcHz8F+CefbhmwKUatb2Z2T+SIRMCHgk=)
2: x43nqz8ef8G8o1IOrP4OGn5qVf4.crl (hash: 8fCxIyaOQhlpT+n98xJ5Oom+mtCc64OlSQLBUTscYLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:5f:4e:65:a3:68:a5:59:ae:17:94:bb:64:30:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Validity
Not Before: Jun 7 06:00:57 2025 GMT
Not After : Jun 8 06:00:57 2025 GMT
Subject: CN=77bf92136c843c3841e2f5b15727adb4c3918864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:b0:de:99:af:fd:bb:2c:8d:91:b2:67:60:
8a:cf:40:b1:5a:9f:83:e8:c9:ad:e5:b2:d8:39:44:
d3:77:50:15:d9:a4:03:8e:3b:c0:3a:e5:1b:1e:9b:
cb:8a:28:5b:65:68:c0:97:d6:1c:2c:4e:1c:a4:9e:
9c:d6:f6:0b:b8:58:4b:f3:07:5a:21:6f:67:a0:f8:
d2:6d:ed:03:ee:43:8e:08:d5:1d:6b:9f:5a:26:e3:
6e:a5:8b:4e:16:80:a7:f4:da:c4:43:c1:cf:d8:b8:
2d:2e:d4:bc:f5:f5:0b:8b:16:42:a7:6b:6d:2a:02:
2b:8e:c6:fd:60:e9:76:0d:70:b1:43:e7:b6:5c:29:
92:2d:ab:4e:62:b2:2f:ef:33:10:66:63:81:20:d0:
42:db:b9:67:d6:82:a6:f2:64:e6:ac:0f:86:3b:55:
96:61:68:11:65:fc:9a:a7:1b:cf:1e:82:5d:1f:11:
6e:58:2c:df:f1:e6:a1:1d:6e:24:d5:01:a9:9c:14:
d7:c4:9f:60:74:da:be:fa:83:ce:4d:e3:88:c3:70:
55:6c:e4:ba:7d:e6:18:de:a4:20:30:10:1a:d5:fe:
53:c9:5e:e6:f6:ef:f9:f9:7b:19:76:2a:1f:c8:c9:
81:36:2b:1f:d9:ab:aa:cf:96:93:8c:77:89:26:59:
00:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BF:92:13:6C:84:3C:38:41:E2:F5:B1:57:27:AD:B4:C3:91:88:64
X509v3 Authority Key Identifier:
keyid:C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:29:40:1b:5e:5f:d6:f9:2a:d6:aa:85:6f:eb:4c:c8:5c:ee:
37:df:dd:ae:3b:71:47:1a:99:8f:73:bb:75:09:20:87:11:3b:
7b:45:ca:48:50:ef:de:d5:cd:09:3c:05:63:71:77:d7:41:c3:
c9:a5:4c:36:dc:d7:0a:30:11:71:57:73:f1:84:b9:3a:a1:f5:
ff:8a:90:22:98:db:bc:50:aa:0a:f1:e3:0f:e7:e0:67:f7:41:
12:6f:0b:16:56:25:5c:6d:b9:54:d0:5b:4d:bc:ef:74:37:ba:
43:15:99:23:87:6f:db:d3:62:89:4a:fe:60:ee:e5:7a:d3:86:
e3:9f:dc:56:c7:7b:4f:f9:d0:73:49:0f:da:03:f5:ad:82:f0:
0f:dc:32:99:15:6e:0e:0e:14:2d:21:a2:3e:db:30:94:af:3a:
c6:0e:72:b5:52:2b:a3:3e:4e:49:ba:30:c7:0c:0c:6d:bb:db:
59:37:28:84:4a:8f:f2:10:d1:7f:86:b6:a3:ef:9a:25:ce:d3:
82:90:02:38:41:1e:d1:9a:51:94:10:0d:57:e4:41:70:15:30:
52:85:45:1d:91:f8:24:3a:fc:44:5a:a1:47:16:74:71:f7:5e:
6c:98:d3:a8:3b:71:96:7c:46:32:b1:50:2d:53:9b:95:16:7c:
8f:80:ea:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:40 2025 by rpki-client