Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier: vi/GQiWLdXAdr0YFTf5XR5nOpGbYuoOkwfgQrdSyzIg=
Subject key identifier: 3A:1E:56:9D:58:07:B3:C3:6E:B8:F8:3B:14:85:15:DB:1F:F3:A9:81
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial: 01974967B98F8E41F4484AE724E2609F79CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 08:00:23 +0000
Manifest this update: Sat 07 Jun 2025 08:00:23 +0000
Manifest next update: Sun 08 Jun 2025 08:00:23 +0000
Files and hashes: 1: cx1g5onsIc-hAAu8dnSh1N5rp3U.roa (hash: CrKS5W6ytqqKToe/UhGDJrUzFXfuo+vTp+g8QhgmrYQ=)
2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: oOcfEozQrJ6WzzjoTLxbwBVAJdqplW8lO6zDgZs34Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:b9:8f:8e:41:f4:48:4a:e7:24:e2:60:9f:79:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Validity
Not Before: Jun 7 08:00:23 2025 GMT
Not After : Jun 8 08:00:23 2025 GMT
Subject: CN=3a1e569d5807b3c36eb8f83b148515db1ff3a981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4f:d0:42:a9:11:2e:da:68:54:c2:e0:d2:4c:
07:72:d4:ed:02:52:42:e2:12:83:65:67:a9:3c:ba:
ee:cd:ce:d8:fd:d2:a8:99:49:96:5f:b1:c0:8a:7c:
70:0d:dd:31:ae:45:8f:3d:c3:a3:1a:b7:dd:a4:6d:
e7:eb:00:c8:89:a2:1d:c7:58:bb:99:fc:f6:d1:4a:
32:c5:37:f5:64:8c:4f:c7:73:40:33:af:f2:75:50:
06:44:95:48:00:0c:75:6f:f9:bd:46:4c:93:c1:ba:
6c:e7:64:a3:e2:05:8b:1c:b0:34:7f:13:b7:27:47:
8a:44:25:7f:32:34:f7:79:1b:77:5b:79:9f:2c:db:
e6:ce:05:a7:7c:85:42:9b:95:9b:95:9e:a4:9d:e9:
6a:c3:a7:78:49:1c:e6:69:f9:56:6a:95:a4:81:4d:
fe:29:ac:f5:88:76:48:07:76:de:e7:cb:0d:e0:79:
73:a4:bf:97:5a:12:b2:a0:6e:ac:71:28:f3:51:64:
6e:57:14:58:78:e1:17:c9:0a:d7:91:7f:c8:2e:67:
9f:6d:b5:51:b1:c7:56:04:96:e3:c4:71:5a:f9:8f:
95:58:f3:62:3d:89:5e:ff:ad:5c:e0:39:8e:81:be:
33:17:83:9f:26:20:b1:23:6b:84:65:36:29:46:e3:
e1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1E:56:9D:58:07:B3:C3:6E:B8:F8:3B:14:85:15:DB:1F:F3:A9:81
X509v3 Authority Key Identifier:
keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:05:27:4b:a3:8e:12:58:c8:25:14:35:e9:2b:45:0c:b3:a5:
c0:81:88:65:8f:07:64:dc:0b:e8:4a:52:37:d5:60:45:b8:b7:
d9:38:08:29:ef:2d:6f:2c:d5:dc:6a:e0:dd:51:c6:14:1b:f3:
31:ce:17:61:b5:b2:fa:9a:35:54:fc:87:86:c6:e6:99:7c:1b:
80:71:6a:96:9e:bd:32:69:ec:19:b9:4e:42:5a:d4:20:13:f2:
6b:a9:26:17:93:a2:cd:0f:16:4c:d4:f5:9b:89:af:13:20:b0:
ee:79:d7:0d:33:e0:c7:ee:a0:1e:21:8b:4f:63:03:3c:c9:86:
b2:6a:55:ee:4e:63:a4:35:35:f5:85:1e:1e:de:ed:3c:e7:eb:
84:56:5e:4f:b7:ce:65:a9:f1:49:9f:bc:f6:44:5a:c1:a8:71:
f0:2c:aa:2f:53:2c:ef:81:7c:9a:5c:15:74:86:c6:93:1c:c1:
42:d4:c0:73:6b:a9:de:e7:fc:38:f8:6f:37:0e:87:89:88:ad:
3a:33:18:c8:6d:f4:22:ea:83:23:ae:11:01:da:d3:db:fe:ad:
1e:d8:c1:3b:71:80:d6:dd:6c:7b:0f:b3:fe:5b:69:5f:f2:77:
c6:92:90:5c:f4:76:f5:0a:53:d0:ef:24:8b:57:38:21:0a:c1:
14:e9:44:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:45:25 2025 by rpki-client