Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
File: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft (raw, json)
Hash identifier: 8xwyIGoeTJQhFAUhmnk4ADOd5FrjPt3UFhvi6TNi8aM=
Subject key identifier: 37:0A:68:D2:41:1F:41:9E:65:40:5D:94:AD:D8:20:7D:92:10:29:42
Authority key identifier: 76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
Certificate issuer: /CN=7651762de3d3f19cedd438b03cf23986ce91727f
Certificate serial: 01974CD6AAF42624FDBC200D82789E10A75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 00:00:26 +0000
Manifest this update: Sun 08 Jun 2025 00:00:26 +0000
Manifest next update: Mon 09 Jun 2025 00:00:26 +0000
Files and hashes: 1: 00qMnebnoQ1q-0QpuHNtB2jC8kw.roa (hash: eM8vkjcd9zZftIcrd2HQLTAzDHkkoGlg8veiHLYFAc4=)
2: dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl (hash: 1eF5WFUkP68CApVNtKALtykqKcLiAsp/932tSiwHomY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:aa:f4:26:24:fd:bc:20:0d:82:78:9e:10:a7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7651762de3d3f19cedd438b03cf23986ce91727f
Validity
Not Before: Jun 8 00:00:26 2025 GMT
Not After : Jun 9 00:00:26 2025 GMT
Subject: CN=370a68d2411f419e65405d94add8207d92102942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:45:1a:63:af:92:8b:24:ba:a6:7d:f5:85:
56:11:9f:51:d6:34:77:7b:52:3c:a3:99:0e:6f:ce:
ba:16:e7:33:76:10:c8:65:88:7c:38:f6:2d:40:49:
77:58:20:00:82:96:19:51:9c:00:3a:3e:bc:30:86:
5c:96:84:03:8d:12:f6:be:f9:8d:27:1b:cc:18:33:
81:d6:19:ea:90:a3:26:91:c8:4a:4e:f2:bc:aa:f7:
ec:10:ca:ad:a6:3d:7e:c9:a3:2b:1d:7f:6a:df:77:
74:b4:91:c4:7b:82:e5:7a:23:e5:0a:83:44:1e:58:
5f:e1:9f:0f:29:be:6e:fa:4b:b7:73:6d:a6:fc:fa:
e7:fe:ea:c6:19:35:8d:d1:44:3e:e0:49:db:92:30:
cc:ea:51:f0:87:c6:16:d4:2d:df:41:75:9e:53:32:
25:26:94:8d:e3:8f:85:e9:e3:8b:32:3c:d8:5d:b8:
9e:41:3c:ec:e2:64:89:6b:f2:c3:fa:2a:e0:61:eb:
06:ca:73:8d:f9:32:b9:93:2f:e1:52:a0:61:51:92:
85:52:72:eb:77:96:87:47:f3:a5:fd:42:be:a8:32:
16:12:85:eb:b9:62:49:0d:08:cc:d3:f3:87:e3:62:
87:b9:ad:55:5c:2e:28:54:ee:bf:49:d4:72:74:da:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0A:68:D2:41:1F:41:9E:65:40:5D:94:AD:D8:20:7D:92:10:29:42
X509v3 Authority Key Identifier:
keyid:76:51:76:2D:E3:D3:F1:9C:ED:D4:38:B0:3C:F2:39:86:CE:91:72:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/dlF2LePT8Zzt1DiwPPI5hs6Rcn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b7:15:aa:6a:0d:73:c3:34:6f:4e:36:15:91:7c:d5:4a:b6:
72:85:8e:f0:6b:31:e5:0c:ba:75:26:93:6f:c1:97:9d:b8:ea:
64:5c:61:ce:3c:53:d8:4c:18:b0:eb:05:14:d4:37:ec:e9:67:
36:3a:ec:85:96:c2:27:bc:13:2c:d3:88:64:61:0a:ef:4f:20:
65:9a:7e:8c:c1:c4:b8:13:7b:9b:f7:b0:ba:f6:35:7e:77:2c:
aa:ee:81:f2:f3:ad:8c:3c:3b:92:1d:97:1f:cd:38:d2:12:25:
4d:47:a6:59:2c:28:e9:0a:8d:0d:7d:da:29:f8:b8:d1:8e:66:
fc:21:90:db:3b:1f:7b:c9:6c:74:0f:b3:52:9a:f1:15:c1:21:
75:d6:ee:05:e0:f0:83:49:eb:f8:be:38:0e:1f:f4:81:45:9a:
04:07:fe:3c:69:ac:e6:28:49:ab:89:c3:65:9f:44:44:93:87:
a2:e4:6e:34:11:94:aa:7e:de:4d:6e:59:12:ac:1c:b1:62:87:
b4:ba:49:26:64:66:76:12:37:c5:4c:0b:3a:31:ef:d6:75:ec:
80:4a:6b:8f:6f:78:e2:96:b6:5b:b4:c4:25:f0:24:38:c4:a3:
c9:36:a4:fd:7b:f4:1d:6e:1d:ba:c3:b9:98:71:5a:79:d5:24:
8e:51:59:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:02:06 2025 by rpki-client