Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File: CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier: aCkWAr+qu/DZaKAPhz90ARkTiok2LtxwCxnBKpfqqFg=
Subject key identifier: 51:AE:99:4B:58:80:B9:EE:DF:5F:BD:56:76:88:2B:07:1D:4D:21:C0
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer: /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial: 01974AE8B946EE92D69CE8E8F8A5DDC524CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:00:55 +0000
Manifest this update: Sat 07 Jun 2025 15:00:55 +0000
Manifest next update: Sun 08 Jun 2025 15:00:55 +0000
Files and hashes: 1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: sbhXR5aVAOHeDx446EDziP8mmrMUTJSbi6TJdLBxDks=)
2: QP38gNz3xco5qv5nlkhRVeJhNcc.roa (hash: iHHCmYPxx8nMI8Pl/VJqH9lchdWekUpYcRiMjWpeVhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:b9:46:ee:92:d6:9c:e8:e8:f8:a5:dd:c5:24:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Validity
Not Before: Jun 7 15:00:55 2025 GMT
Not After : Jun 8 15:00:55 2025 GMT
Subject: CN=51ae994b5880b9eedf5fbd5676882b071d4d21c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:43:40:31:92:65:75:88:e0:7a:53:bf:38:
7f:07:70:72:ca:45:f3:af:ad:9e:59:d2:01:0c:4c:
79:b2:5b:c1:cc:6a:16:37:9e:66:ad:29:4d:7c:f8:
87:74:55:13:79:eb:4c:5e:e2:2a:f6:5f:39:bc:49:
a9:68:a6:53:2f:5e:98:e5:f3:aa:96:42:84:01:ce:
40:fc:df:a3:a8:98:7e:ca:7b:b4:e1:47:d7:b0:92:
b0:19:08:7e:14:0c:f7:79:84:fc:4d:7b:76:01:22:
ca:7e:b5:f0:98:48:72:71:2b:8a:1e:c6:d9:e9:57:
ea:a3:c2:3b:c1:ee:40:2a:f5:f4:92:46:90:82:67:
4b:5c:1d:18:f7:c5:af:d0:13:ef:7d:08:35:64:1d:
1c:06:03:a1:24:94:74:e5:03:7e:18:c2:23:b8:85:
c4:81:a5:31:85:ba:b1:2d:e9:fc:f1:9f:0b:0d:36:
28:97:aa:a9:17:fd:db:b7:dc:1f:0d:73:b0:b5:1c:
ab:24:09:b3:21:19:cb:2c:c5:5b:11:da:11:fb:39:
24:4c:92:4c:bb:80:3e:5f:58:ac:a5:c2:e0:de:46:
5a:52:27:04:12:e8:9b:1a:e7:d5:6b:84:13:1c:e9:
9f:b9:44:b6:45:3e:8e:0f:a1:18:9d:ab:70:1e:88:
f6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AE:99:4B:58:80:B9:EE:DF:5F:BD:56:76:88:2B:07:1D:4D:21:C0
X509v3 Authority Key Identifier:
keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8d:32:19:a6:fd:19:c5:3d:fc:d9:86:86:76:2b:54:6c:67:
ae:7a:0a:0d:85:88:dd:d8:e6:ec:9a:ad:fb:d3:15:36:c3:0d:
5c:b6:51:78:59:ad:46:13:99:38:f5:db:7f:09:ea:71:03:54:
a6:e2:00:7e:11:6f:21:f7:bb:a2:46:e0:ca:f3:9b:69:ff:a9:
b5:16:7e:57:eb:22:a8:b4:87:01:4a:fb:c7:22:27:e9:82:ee:
2a:1d:2e:36:08:6a:a4:b6:ff:1a:0b:63:14:5a:45:1e:90:55:
88:76:00:9f:2d:f3:c7:15:a4:19:b7:60:cc:36:07:64:04:45:
ea:41:b7:a4:6d:1d:20:9f:51:5c:c8:84:ac:c7:85:25:4c:46:
52:b2:1b:28:6d:6b:40:5f:5c:be:ec:04:bb:2f:6f:2f:2a:ab:
f2:88:06:00:3f:4b:69:ee:b9:d2:30:4d:b4:c7:a4:ab:55:27:
e8:16:bd:c2:6f:a5:fc:ab:82:ce:09:91:7a:29:8a:41:7c:4f:
7a:50:05:70:31:d8:e5:e0:6f:b3:c5:3f:6d:15:2b:2d:97:7e:
2c:d8:e8:ce:fa:58:b7:a4:ec:44:f0:bb:5a:04:b1:18:20:2b:
2b:89:0b:4e:2b:8e:fb:f4:d0:45:81:4f:76:c6:91:5c:22:5a:
ef:3f:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:24:39 2025 by rpki-client