Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
File: _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json)
Hash identifier: /tOKsuxlIeRAYLW8s3Ap4Pv995Y0yOAIvXOrRAlBteA=
Subject key identifier: 7A:F7:67:1B:23:39:72:0D:3D:86:C9:D7:0A:27:C9:10:9A:E2:50:81
Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
Certificate issuer: /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Certificate serial: 01974779E0228FD3E8537253864B6FAB02EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 23:00:58 +0000
Manifest this update: Fri 06 Jun 2025 23:00:58 +0000
Manifest next update: Sat 07 Jun 2025 23:00:58 +0000
Files and hashes: 1: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: oT6kqwBHBSfzDNYMGwWHDm2pITIgpch/GKppCvhYoRc=)
2: t-4cbJi-Ew3u3ipzgXiueic4IR4.roa (hash: bVpOfO45u9FlgP+T8GAth2ynXzQ4yeosDEHag/U9nSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:e0:22:8f:d3:e8:53:72:53:86:4b:6f:ab:02:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Validity
Not Before: Jun 6 23:00:58 2025 GMT
Not After : Jun 7 23:00:58 2025 GMT
Subject: CN=7af7671b2339720d3d86c9d70a27c9109ae25081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:0e:7a:01:59:e9:26:29:ee:2f:92:fe:6a:
7a:09:f8:ba:e5:0e:c6:5d:27:1d:46:5e:a9:ba:0e:
7d:5a:55:ca:51:ca:c2:27:67:a6:bf:f5:b9:b3:97:
88:11:1d:71:a0:36:f2:6f:42:42:8e:85:ee:43:08:
40:e6:02:a4:73:a9:a5:97:22:fa:c6:e0:64:5b:b5:
49:72:14:18:24:89:61:4d:19:f6:8e:f5:81:4a:97:
4b:c1:b3:02:c9:47:08:b0:b8:43:d1:cf:1a:ee:93:
47:97:7e:4a:66:a7:58:01:21:5c:eb:05:f6:53:e7:
9a:97:e8:a0:fd:c3:2f:ff:4e:1e:db:b8:3a:17:6e:
cd:d3:ac:0b:40:85:54:4d:6d:4b:18:c8:aa:12:15:
cf:a1:b1:73:21:e0:19:21:f4:bb:6e:fc:0e:57:3b:
4d:a0:38:98:b6:5e:e2:7d:89:8b:95:01:c4:1b:c6:
f0:fa:a4:9e:89:ea:9c:cc:68:aa:fa:7b:00:2b:63:
38:7b:51:57:06:0c:5a:13:08:65:27:59:d4:f5:d9:
26:c9:05:c2:be:87:c8:bb:74:0e:f1:b3:06:a4:f8:
13:89:3d:84:80:5b:e2:c0:95:f5:51:a2:43:17:0c:
4e:c3:60:88:e9:9f:48:79:d6:3d:ea:2e:55:37:1e:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F7:67:1B:23:39:72:0D:3D:86:C9:D7:0A:27:C9:10:9A:E2:50:81
X509v3 Authority Key Identifier:
keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:84:3f:5e:ca:07:d3:8c:9e:75:1f:3c:bf:95:5f:b8:55:2e:
c2:a5:46:f5:b0:27:ae:f5:21:33:34:9c:e0:09:d8:8c:ec:99:
11:6e:a7:a2:94:bb:e9:32:3e:de:d1:b3:c2:04:5c:68:e4:7c:
8f:af:d1:9d:7d:ae:f6:82:30:d2:44:ae:db:f3:1a:f1:3f:ab:
6f:4f:db:8c:19:2e:c5:90:6d:8c:18:81:b1:13:96:5e:99:4c:
d7:35:93:19:ef:0d:cf:ea:09:7b:53:20:aa:72:9f:d9:d2:17:
fb:dd:14:d6:b4:0b:0a:b0:6f:ce:ef:2a:4a:4b:41:89:aa:cf:
8f:8e:ce:30:86:0c:b0:6e:91:de:69:2c:08:51:ba:7e:fa:51:
37:05:77:4a:6e:e3:94:f4:1b:84:34:56:b2:32:7b:d5:f7:82:
ca:71:a5:cb:07:2a:e1:a3:b0:40:98:53:39:be:fa:7d:ce:5d:
76:54:f7:69:4f:1f:ab:99:14:53:88:e1:0a:07:96:e7:e3:6b:
78:91:14:a1:71:c4:a8:b3:15:af:ff:f0:9f:ea:f3:88:5f:34:
88:6a:2c:dc:1f:dd:55:67:7c:78:53:04:c9:49:f6:7d:a8:6b:
4e:db:e9:0f:72:66:58:dd:65:03:ac:61:31:da:e1:97:50:fc:
af:8a:cd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:31 2025 by rpki-client