Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
File: l6qlVaMp7dhmBswOPilr1Hisc94.mft (raw, json)
Hash identifier: RQkwP4Deb7yVO5IgOjx+2SJUIC42ju1LuYMzcHgwCBY=
Subject key identifier: 0A:DF:AC:87:B0:39:10:1F:C0:F7:CF:7F:86:23:AE:88:60:B7:A7:CA
Authority key identifier: 97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
Certificate issuer: /CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Certificate serial: 019748C371664C535730F8431C0379B2424B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 05:00:57 +0000
Manifest this update: Sat 07 Jun 2025 05:00:57 +0000
Manifest next update: Sun 08 Jun 2025 05:00:57 +0000
Files and hashes: 1: jNKVMMdFoTlq407WSxJG2wl397A.roa (hash: f7XfjeV34Q2856LzefHFdP3T+Gd6ci7hnd1cgyUQwpI=)
2: l6qlVaMp7dhmBswOPilr1Hisc94.crl (hash: 2J0QDvvMkUX1u4h9/mG6mgNlp9yUY7e1gZNO/SjwuWg=)
3: myck32eboJtl7s_ieX37W3eHO5I.roa (hash: lbaHeA4mwtN12nrUCJbm8VTH7h5JMLbryEGQgqFX+UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:71:66:4c:53:57:30:f8:43:1c:03:79:b2:42:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97aaa555a329edd86606cc0e3e296bd478ac73de
Validity
Not Before: Jun 7 05:00:57 2025 GMT
Not After : Jun 8 05:00:57 2025 GMT
Subject: CN=0adfac87b039101fc0f7cf7f8623ae8860b7a7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:b2:f7:66:5e:9d:1e:83:97:93:af:7f:e1:
14:f6:ec:8d:8d:42:e6:e0:a9:19:5b:e8:b5:7f:79:
74:63:24:ef:23:b2:98:39:73:f9:54:b7:13:3d:94:
25:23:9e:82:31:56:78:cc:f6:79:3d:65:99:b2:87:
9d:d1:1d:65:fe:2e:94:6d:ef:ef:ee:af:4f:dd:91:
f2:50:7a:24:b5:06:59:31:1e:15:70:94:26:0c:f8:
99:5e:fc:f6:2c:77:af:8e:a0:6e:10:ad:d4:f1:47:
09:42:47:d0:b0:66:64:0c:7e:62:16:c8:f3:cf:d3:
00:4d:2a:e2:8a:89:f5:09:f3:db:d6:70:ec:c2:17:
0f:b2:95:8f:46:15:81:7c:5d:9c:6a:c3:6d:40:71:
24:f1:23:f7:51:44:99:5a:61:71:c8:3c:1f:9a:55:
68:7f:60:5b:38:4e:8d:62:80:af:00:69:91:54:5e:
c7:f7:66:23:31:67:ea:11:4a:c8:fc:6e:05:f6:46:
24:a1:6c:fe:13:71:c8:a2:96:0c:10:93:a2:77:72:
c4:b0:fd:7d:e1:98:f9:61:ae:c5:87:52:18:20:d1:
fa:f8:9e:b4:21:f2:42:47:8f:56:fb:e7:c2:86:d0:
8e:07:78:10:3d:a3:29:c9:e8:b7:1e:0f:c0:ef:2f:
3d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DF:AC:87:B0:39:10:1F:C0:F7:CF:7F:86:23:AE:88:60:B7:A7:CA
X509v3 Authority Key Identifier:
keyid:97:AA:A5:55:A3:29:ED:D8:66:06:CC:0E:3E:29:6B:D4:78:AC:73:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l6qlVaMp7dhmBswOPilr1Hisc94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1195ab-ed41-452f-bc22-7fd0deae32c5/1/l6qlVaMp7dhmBswOPilr1Hisc94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:de:8c:92:43:28:29:d2:8b:15:09:89:c6:37:a0:02:02:32:
d9:cb:e4:3f:85:67:f2:cc:1c:55:da:13:61:d3:30:11:27:4f:
65:38:fa:d8:87:ca:f8:8f:99:a2:2a:61:f6:7c:4d:41:d7:63:
b8:60:48:bc:8a:90:8a:0b:2f:1a:28:b7:0a:7c:c5:9c:bd:aa:
06:a1:31:b3:f7:86:3a:cb:14:78:1a:8f:5f:b3:56:3e:e7:d3:
0e:82:39:1c:73:07:f6:8a:12:fd:dd:9c:a6:af:c1:fa:00:81:
e4:69:a9:01:b3:9a:f8:e6:cc:b5:8e:a1:e6:a5:78:f2:3b:de:
20:17:4f:cd:d1:72:d8:00:e9:31:92:c6:8f:0f:69:51:d9:97:
90:4b:bd:10:6e:36:a3:53:62:8c:8f:81:e2:cf:45:8e:82:ba:
89:d7:64:d8:3c:18:15:a0:89:39:56:63:c3:42:ea:cd:60:51:
88:61:0e:8c:50:e6:e8:6f:25:29:49:36:69:98:c8:6e:20:f5:
d4:16:78:65:d1:45:b9:a7:9f:0d:c6:c4:95:7e:d8:cd:a8:96:
84:8e:3a:61:19:25:35:59:f8:8d:95:28:cf:6a:b0:79:fa:d9:
b3:77:e9:f1:f6:95:f3:43:89:06:82:19:1e:c9:dc:99:37:65:
83:5a:af:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:03:08 2025 by rpki-client