Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
File: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft (raw, json)
Hash identifier: 38m9irjKQByiwczLKxbxOLeDYOs34ODZws5zRoUoCdA=
Subject key identifier: A3:E1:91:07:69:DC:E3:72:5A:6B:39:A4:F7:DE:8E:24:46:D7:A5:C4
Authority key identifier: 47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
Certificate issuer: /CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Certificate serial: 01974D7C02EB8A16A14A70F8C537A46BC3C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 03:01:01 +0000
Manifest this update: Sun 08 Jun 2025 03:01:01 +0000
Manifest next update: Mon 09 Jun 2025 03:01:01 +0000
Files and hashes: 1: KTWjCpwyB71eHCbI5t8oPlCgNRY.roa (hash: 0CVvsvuj4PTPAFmVUGXz45hRsC7kKX+zReEGH6JV1M4=)
2: Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl (hash: I770crQCGfXjY7SPuY9tuVIGbczwyq7QTFiM1ZZx8Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:02:eb:8a:16:a1:4a:70:f8:c5:37:a4:6b:c3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470be1865f5079e24b1a7adfdca27ee2fe5d1f89
Validity
Not Before: Jun 8 03:01:01 2025 GMT
Not After : Jun 9 03:01:01 2025 GMT
Subject: CN=a3e1910769dce3725a6b39a4f7de8e2446d7a5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:e5:fc:e7:6b:6f:48:c6:f8:73:46:ec:a9:
58:07:8c:6d:25:bc:fa:3d:65:34:fd:c3:c8:c7:e3:
f0:aa:5f:00:59:c4:67:0b:04:8a:2b:04:5f:78:99:
0b:32:1f:29:05:77:38:bf:95:c6:6f:b9:ef:44:cb:
6b:e6:19:2b:b0:5d:c1:9d:0f:77:f9:01:19:a9:54:
7b:51:45:80:5b:26:30:71:3d:c6:86:93:c3:dc:53:
3f:07:ea:81:c9:a4:57:06:25:12:8e:f3:50:7f:61:
af:f7:f0:50:ff:7b:4a:03:db:4a:a0:00:4a:59:72:
4b:14:7f:ea:7a:62:da:5b:6a:91:35:5e:f9:a2:5d:
93:18:d7:59:cb:46:d2:97:77:42:64:1f:ed:9f:06:
d3:48:d9:cd:f3:bd:67:b5:de:9d:54:3d:c2:a4:06:
9f:fb:76:cf:f6:d3:a4:12:38:ed:3c:74:3e:6c:01:
55:47:a0:ae:a8:03:46:03:f7:40:51:76:e1:b0:3e:
0c:26:04:d0:e1:2b:ca:87:bd:de:fd:5f:f6:43:8b:
60:12:b9:39:81:e0:59:32:a3:8c:1d:d6:e4:61:7f:
57:05:be:f4:60:56:9d:6c:f4:1a:23:ba:28:c4:22:
d8:fc:85:ef:12:75:6a:28:1b:5a:64:0b:9e:08:c9:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E1:91:07:69:DC:E3:72:5A:6B:39:A4:F7:DE:8E:24:46:D7:A5:C4
X509v3 Authority Key Identifier:
keyid:47:0B:E1:86:5F:50:79:E2:4B:1A:7A:DF:DC:A2:7E:E2:FE:5D:1F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/087f99-cb9d-40a8-9830-1e695ef49c10/1/Rwvhhl9QeeJLGnrf3KJ-4v5dH4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0b:0c:2b:2e:fd:43:2b:bb:3d:aa:78:d1:cf:9a:85:f7:42:
19:5b:c4:fe:f7:04:42:1c:d7:3e:1b:76:1e:f0:e9:c0:69:47:
a2:a5:0e:5d:ec:0d:5c:5d:6e:6e:ec:69:a2:f1:30:a2:a2:6b:
a6:cd:60:04:8c:0d:37:c2:3d:80:f4:73:a7:cb:07:33:0d:47:
3c:e8:04:45:70:77:11:46:0b:25:40:33:f5:05:ec:34:c5:ce:
fd:e0:21:19:df:18:21:a1:d4:06:78:45:d3:08:71:7c:f8:78:
46:5d:06:74:d0:18:b4:80:cd:01:43:e9:86:b5:7b:24:16:39:
b6:4c:23:50:46:36:76:75:20:f6:27:32:b4:21:29:96:2c:3c:
cf:44:be:d2:e5:c5:cb:73:99:ed:3b:57:40:61:ac:e8:53:c7:
31:ac:36:8b:4e:79:89:3e:1e:84:3f:64:f2:a1:65:96:3a:52:
76:30:ba:f9:7b:d2:92:58:57:46:7a:81:37:76:dc:51:72:04:
e5:91:a8:2d:e3:03:63:93:73:d9:cf:e9:91:b1:06:3e:bd:ff:
5d:fd:9d:5a:1a:17:2f:01:26:61:6b:78:b6:9f:06:bd:e3:ba:
5f:6a:30:f3:8c:83:79:89:23:e4:23:7d:fc:c2:a4:df:9e:a8:
70:08:65:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:19:20 2025 by rpki-client