Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: Nc8KB6cT7ilbTDYDRMFRfIZIY/dsS55z2mRiwFsfIQQ=
Subject key identifier: 99:9D:F1:F1:7F:14:12:5E:6A:A2:C3:9A:D4:B1:F0:A4:B1:34:A7:80
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 01974666D516FDC7C811E07E394E971A4F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 18:00:33 +0000
Manifest this update: Fri 06 Jun 2025 18:00:33 +0000
Manifest next update: Sat 07 Jun 2025 18:00:33 +0000
Files and hashes: 1: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: TwpmvhdKSYERa8D0O788OAnADQV4ro7lDFlu96ifttQ=)
2: l-W1P1FXUZq5Rom6HiLNeHjPeZk.roa (hash: JZU81XbPivNOV4ANlQqRFiS9x8fNQ6LSZbTjlzXEnFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:d5:16:fd:c7:c8:11:e0:7e:39:4e:97:1a:4f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Jun 6 18:00:33 2025 GMT
Not After : Jun 7 18:00:33 2025 GMT
Subject: CN=999df1f17f14125e6aa2c39ad4b1f0a4b134a780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:63:64:2a:c9:b3:a9:20:d7:5a:7b:c7:dd:
a3:16:98:6b:03:cc:20:74:86:5a:fa:59:d0:15:27:
ab:9c:5d:3d:65:fe:a3:26:e4:2a:9c:1c:c0:fb:e8:
6c:b4:25:68:64:63:34:1c:08:23:17:e3:97:0a:32:
ca:e0:2e:bb:d3:3f:1a:b7:2e:20:ce:19:67:e7:d9:
cf:5e:87:a7:13:ac:cb:41:b3:85:2d:85:ee:e5:4c:
dd:c6:b8:2b:7b:20:df:65:4b:d7:e5:3c:40:eb:d5:
01:6c:f2:61:dc:2d:49:9d:27:eb:51:91:e9:56:d7:
32:11:30:65:0d:f0:5a:f4:a7:65:43:ef:63:b0:2a:
4f:97:e3:37:26:87:e1:c3:17:fd:ec:30:b5:e2:c1:
db:20:af:d9:e8:f9:80:76:58:2b:e1:d2:be:d9:df:
fe:64:76:2a:d1:83:51:91:dc:04:48:ea:ee:02:61:
03:68:14:fa:73:6c:77:b0:8c:5c:45:76:cb:58:a9:
0e:e8:44:34:06:e8:b5:59:90:59:27:25:4e:af:e1:
5c:28:7a:5e:35:13:c4:29:d3:e7:f6:ed:3a:56:d5:
dd:f9:42:21:32:4e:de:05:c8:15:c5:b6:4a:9a:0c:
76:45:ce:77:17:f7:30:14:2a:e5:77:9f:7c:14:99:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9D:F1:F1:7F:14:12:5E:6A:A2:C3:9A:D4:B1:F0:A4:B1:34:A7:80
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a9:b1:89:a9:0f:88:b0:5f:93:f0:eb:b5:a2:ee:3d:e7:a6:
8f:09:35:99:53:72:06:bf:ea:48:de:ce:e6:20:f9:9a:ff:60:
ab:3c:7d:71:e1:e9:11:f0:2a:eb:d4:f0:b1:4d:2b:11:60:c3:
40:ff:59:b7:f8:15:28:e8:4d:91:46:28:0a:51:a7:cc:9f:32:
b4:07:0b:0b:8a:7e:19:2b:bb:d8:f2:3a:7a:7a:3e:8d:64:a6:
ce:4f:ad:37:8c:16:66:6d:d9:62:ef:e8:03:aa:f9:db:da:36:
29:79:53:f2:5b:74:af:f6:b3:6d:5a:5f:db:43:03:30:4f:2f:
d0:ba:a8:c5:92:5c:a0:2e:64:a3:de:0f:59:5b:5d:42:92:a7:
8a:ba:3e:33:68:d1:cb:cd:53:a2:f7:2f:11:51:38:dc:55:44:
0f:ce:30:23:e7:41:68:fa:c9:12:4f:05:18:13:4c:ad:6d:45:
a4:0a:f5:5a:98:82:25:d0:47:af:c0:83:38:fc:6d:a9:e2:d2:
e5:7f:2c:34:40:af:c5:6f:05:f5:b7:a3:d1:f3:5f:8a:3b:24:
0a:48:94:c8:6b:71:f6:35:45:e5:da:24:3c:30:6b:ed:19:8b:
ff:bc:28:a7:05:ed:f7:97:d7:f7:ad:b5:13:f7:ae:be:4e:18:
2d:4f:78:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:30:49 2025 by rpki-client