Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
File: a_D4R-GiFudUPHUqY1DGviPHxtU.mft (raw, json)
Hash identifier: oXiaHiq9mBBDQPkdJtmqMAhbSB9XKcpinOlRZPnPtjM=
Subject key identifier: DE:FE:AF:56:40:5D:57:A7:07:13:DA:77:79:E8:C7:F3:FA:CB:2F:64
Authority key identifier: 6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
Certificate issuer: /CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Certificate serial: 019748C306AB0272D89C419024369CE3F58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 05:00:30 +0000
Manifest this update: Sat 07 Jun 2025 05:00:30 +0000
Manifest next update: Sun 08 Jun 2025 05:00:30 +0000
Files and hashes: 1: LG_wxHDNoS1Eb0OfbO3bSh_WSPg.roa (hash: ijCon2p1g8yWQ5glLczywg0vICoOxaxCrjmV9KKJaoI=)
2: a_D4R-GiFudUPHUqY1DGviPHxtU.crl (hash: j52OL7+t6w/k8ntp1cJE2/2aTkV4jbu4ffaR7G5F2L8=)
3: bIOP6zTckgfazEJud8vxPBhx8yU.roa (hash: MrtqoOHLEt4NYdTsarUu/kPlSqMrs79epMZuKq+/qAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:06:ab:02:72:d8:9c:41:90:24:36:9c:e3:f5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bf0f847e1a216e7543c752a6350c6be23c7c6d5
Validity
Not Before: Jun 7 05:00:30 2025 GMT
Not After : Jun 8 05:00:30 2025 GMT
Subject: CN=defeaf56405d57a70713da7779e8c7f3facb2f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:77:de:96:ed:f7:5d:86:3b:a2:6c:33:6b:
cf:58:2d:2b:51:0f:e8:09:66:4d:eb:77:30:95:71:
ef:ea:41:39:d1:2d:d2:bc:50:22:ca:fd:3e:66:5d:
d9:d7:c3:22:ec:3f:76:cf:b4:e4:02:c2:07:55:7b:
c6:cc:d0:ac:01:82:52:93:91:36:79:0f:84:17:c3:
24:6d:39:92:8d:04:f7:a9:27:f2:f1:38:db:f6:52:
a4:7f:1b:68:ac:c4:7f:99:2d:b7:e6:f5:0e:dd:3b:
dc:97:48:57:71:0e:b6:30:aa:cf:9b:c3:36:25:6c:
fa:72:c6:0a:ea:a5:d2:84:ac:f0:93:0e:4f:a4:e2:
0f:1a:eb:13:d1:8a:0d:c6:50:c1:fb:0f:62:be:5c:
b1:0a:e1:a4:7b:9c:8c:3c:87:f8:ed:46:e1:6f:7d:
50:e2:e1:43:03:06:ce:8c:7b:de:c9:dd:0f:56:70:
00:68:04:a6:a0:af:65:fc:09:86:bb:fd:fd:dd:9d:
7e:8d:aa:3d:e2:8e:2a:10:fb:06:49:81:38:bd:95:
60:c6:68:03:a1:8e:ea:d8:6f:3a:b5:36:e7:1a:34:
cc:52:79:32:63:95:89:38:d9:53:0e:ab:04:30:06:
a2:11:17:bb:49:fb:3f:dc:84:cf:69:df:a9:09:d2:
33:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FE:AF:56:40:5D:57:A7:07:13:DA:77:79:E8:C7:F3:FA:CB:2F:64
X509v3 Authority Key Identifier:
keyid:6B:F0:F8:47:E1:A2:16:E7:54:3C:75:2A:63:50:C6:BE:23:C7:C6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a_D4R-GiFudUPHUqY1DGviPHxtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e0cd69-deff-4c21-a809-6999a99dcf1e/1/a_D4R-GiFudUPHUqY1DGviPHxtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fa:96:d9:32:a2:0c:bd:81:e1:02:ea:9e:42:70:1d:87:2c:
a4:5e:0e:4e:0b:b5:8b:06:ad:5c:70:19:79:20:25:6a:19:fd:
aa:6a:ff:2d:c2:1b:a9:da:81:11:c9:f5:23:51:20:a8:e0:97:
d7:56:25:8a:c7:81:27:87:5f:bf:39:a9:1f:6c:61:5a:59:3b:
41:4b:d1:1e:70:a0:78:c9:c1:41:f5:f3:49:f1:71:78:5f:45:
32:f3:59:84:9d:9c:4e:ec:b9:34:79:be:50:84:ba:ad:d1:93:
46:a9:3d:6b:15:ba:4b:68:51:a1:91:e4:a7:49:f8:a7:71:b6:
aa:03:37:39:12:e5:b4:c6:a2:e0:9c:9a:8d:f1:76:02:7b:19:
89:8c:4c:15:65:3f:3c:6b:86:9b:13:6c:cd:86:2a:a2:08:be:
0b:50:0d:0e:25:a1:1d:bd:1f:a7:27:0d:a3:2d:c0:a1:b4:e9:
c4:19:cd:00:be:86:66:ce:21:a2:5b:5f:62:68:7c:31:70:73:
c9:f0:72:58:e2:5e:87:16:d4:bc:f6:ea:cb:1f:5d:86:4a:ae:
a4:90:da:b3:9c:80:7b:30:b2:91:07:17:e1:00:b4:b8:27:57:
63:05:95:45:85:ca:56:8a:9b:b5:12:30:be:d3:72:a0:f4:0a:
e5:e8:90:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:26 2025 by rpki-client