Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: KoSv/JyV/fUL2AMEBC693uqZaVwDRNoKB3NNmbYFwm4=
Subject key identifier: 1B:66:11:B5:F6:A7:31:E3:90:F8:FF:ED:39:5B:45:FE:0C:25:F1:77
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 01974E571E14E452A63065824A9618992A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0ADA
Signing time: Sun 08 Jun 2025 07:00:21 +0000
Manifest this update: Sun 08 Jun 2025 07:00:21 +0000
Manifest next update: Mon 09 Jun 2025 07:00:21 +0000
Files and hashes: 1: YmdDnE-Vn1310ZEVyUeueCTQcs4.roa (hash: NlHhFYGZnQdX8LSnZttscO3Rwl4+d4S2jrYpL4VTU9k=)
2: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: OMJhwFxISGODCzLxxZ+gxNs/xvkWoshFK2lyDH+8cDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:1e:14:e4:52:a6:30:65:82:4a:96:18:99:2a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Jun 8 07:00:21 2025 GMT
Not After : Jun 9 07:00:21 2025 GMT
Subject: CN=1b6611b5f6a731e390f8ffed395b45fe0c25f177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d1:4c:5b:1e:17:ab:89:90:65:6e:77:bb:eb:
38:d4:46:2d:a1:0b:77:5d:3e:0c:54:83:8a:98:93:
1d:69:97:56:06:c8:26:11:ff:f1:4a:72:20:be:18:
81:25:b3:ee:8f:ec:07:90:c1:56:ff:86:4b:d8:7f:
46:0e:6d:8a:c3:4f:77:cd:c7:88:11:27:ef:d6:a1:
34:07:bb:e8:1a:2f:04:54:5f:df:5c:cc:58:5d:a2:
61:23:dd:6e:9b:71:9f:02:fe:10:6c:4b:e4:e1:12:
b1:c3:45:c0:1d:d8:38:6c:23:df:27:63:b0:cf:cc:
b2:33:ab:70:4c:07:41:cf:c9:46:9a:10:47:1c:9e:
b1:62:13:94:58:4e:29:c4:ec:3f:a1:d9:36:1f:24:
c0:a3:20:d0:9a:d8:84:48:9e:0b:9d:18:c8:5a:9e:
95:aa:ce:ec:ec:5f:35:21:6e:11:7c:de:00:4c:24:
33:dc:84:f4:5a:89:6d:d8:53:82:cb:f3:64:f0:0b:
c6:53:09:fd:3e:ad:00:09:02:21:f2:12:cf:b6:4b:
6c:15:31:49:a8:11:7d:11:d5:5b:dd:ec:2a:89:e6:
73:22:db:74:52:b4:d3:0e:d9:5b:5c:a6:e9:87:86:
cc:92:20:a4:52:24:e5:51:52:22:d7:41:51:a3:d0:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:66:11:B5:F6:A7:31:E3:90:F8:FF:ED:39:5B:45:FE:0C:25:F1:77
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a0:71:19:aa:4f:0d:41:23:d2:4f:3a:14:2a:c7:e6:e0:79:
dc:41:18:42:bf:72:d4:31:2e:c1:51:ae:c5:5d:c2:1b:13:8b:
1a:69:42:94:3e:98:a6:bc:79:df:01:b1:e8:27:96:b8:6f:52:
56:da:be:ff:78:65:b3:43:0c:7b:5c:5c:bb:c0:1f:26:a4:8e:
d4:bd:4d:56:ef:a5:59:22:29:c4:08:e8:34:c9:ef:97:bc:02:
fd:63:b2:bf:ce:0b:b9:9f:57:c0:11:55:c5:f1:8d:3d:89:71:
32:b4:d9:21:56:24:f9:95:d8:42:d2:de:76:1c:66:4a:d2:45:
bd:87:0f:97:88:88:52:65:37:af:22:c1:d4:60:93:b9:7f:a9:
98:35:e6:7f:c0:c0:f1:38:10:dc:bb:e8:f1:dd:e7:7b:90:11:
e9:72:3a:0b:c3:62:e3:cf:bc:d8:a2:fd:7a:2d:9f:b0:a6:a3:
4d:f7:1d:ea:58:cb:47:a6:64:7f:e9:ce:34:1a:27:21:a6:a0:
15:b1:a0:ca:a4:9d:b4:ee:a4:ef:3e:b7:1e:8e:84:c2:75:0d:
e3:12:73:f9:d8:a2:3a:56:17:df:cc:ae:47:e1:47:c2:28:17:
b0:b7:e9:2f:49:7b:d9:48:1f:e5:a4:f6:e1:45:3a:15:0f:95:
bf:ef:35:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:36:30 2025 by rpki-client