Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: 9VvzFgRANxkGbScTlzLhHsbcXS95cde7YUId80A7N4Q=
Subject key identifier: CD:B2:C2:12:B8:65:F3:3A:94:A7:AE:22:4F:52:7E:9D:DC:4C:43:61
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 01974A7B74EBE99852591168A6ACA3759682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 0A4E
Signing time: Sat 07 Jun 2025 13:01:34 +0000
Manifest this update: Sat 07 Jun 2025 13:01:34 +0000
Manifest next update: Sun 08 Jun 2025 13:01:34 +0000
Files and hashes: 1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=)
2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: 7c0wFDMrgVJFG2C3KEgeRwTgyc/YlOXvBAfu5A/X2HM=)
3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:74:eb:e9:98:52:59:11:68:a6:ac:a3:75:96:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Jun 7 13:01:34 2025 GMT
Not After : Jun 8 13:01:34 2025 GMT
Subject: CN=cdb2c212b865f33a94a7ae224f527e9ddc4c4361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:1f:f7:d0:b4:cf:5e:0d:36:8a:26:6c:e4:
76:bf:56:53:18:53:56:c1:55:6c:84:04:be:04:fc:
a7:47:93:92:a7:e3:15:c6:f2:c6:25:01:34:ec:ea:
c3:9c:da:8d:4e:ae:d9:42:5e:90:aa:8b:95:d3:1c:
89:1c:29:6d:15:d4:ca:cb:0e:7a:91:9d:c5:51:c2:
e2:0a:5a:13:a7:aa:33:1b:2c:0c:57:5a:20:9d:21:
43:ff:60:95:a4:b2:46:34:57:c3:a0:9f:8a:4a:3f:
7b:a7:f8:be:46:05:8b:ce:39:f4:7d:0b:89:6e:e7:
6c:84:93:23:df:b9:29:ed:01:e9:ae:04:fa:f7:09:
6f:95:9f:46:6c:86:88:31:f5:1a:d5:36:ad:2f:49:
6f:fc:32:2e:a4:33:4a:5d:6c:d4:a2:be:e5:3c:4b:
1a:7e:af:df:44:3a:5d:4e:8c:3e:62:45:61:d6:02:
c5:06:bf:91:88:c2:57:a3:d5:fd:15:39:bf:8c:61:
60:af:d0:54:4f:31:f0:4d:7f:02:09:a2:02:c1:bb:
fc:ac:bb:0e:7b:6f:e5:91:31:a4:50:f7:db:66:b0:
03:b4:1e:88:98:93:f2:01:08:45:2a:81:e5:cc:4a:
fe:5b:9a:fc:90:0f:22:b1:91:f5:d2:5a:6b:8c:63:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B2:C2:12:B8:65:F3:3A:94:A7:AE:22:4F:52:7E:9D:DC:4C:43:61
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:eb:c5:fa:33:12:ec:f4:e2:4f:22:be:c8:dc:77:9e:54:b7:
67:c8:e6:20:88:8e:f1:3b:f4:69:cb:3b:2c:f4:67:a6:40:45:
0c:dc:57:3d:a0:dd:0b:a9:d8:e0:18:fd:72:b5:5a:95:61:67:
41:c0:90:d8:32:5d:5c:14:c5:f3:8a:bb:da:d5:6e:23:ac:97:
ef:b3:59:1c:1d:af:15:61:44:69:2f:4e:12:23:31:a4:4c:4f:
79:ef:9c:0c:05:6a:e6:b2:e5:17:d4:73:ef:9a:4b:2e:1a:36:
47:9d:59:fd:ac:f7:a4:6f:16:9d:f6:51:2c:16:08:5f:fb:28:
c6:55:e1:0d:36:83:a1:5d:05:d3:99:cf:e7:35:91:02:c3:6b:
26:e4:53:ce:20:69:47:0f:c6:26:ca:d8:b5:c2:aa:0e:d0:08:
05:99:d5:73:40:67:2c:77:e6:11:89:73:ca:fc:42:2d:08:c5:
b9:82:c8:cd:60:c8:f5:7e:80:18:db:db:88:f5:7e:5e:18:33:
7f:f1:94:2e:ab:f5:b7:7f:e5:6a:c5:c2:a9:16:0a:f1:f1:53:
6c:f6:77:05:4f:ea:f6:90:45:50:de:81:e3:5a:3a:22:8f:a2:
5a:b9:f7:b6:f7:94:9e:44:03:7e:ca:89:f9:de:4b:5b:55:6f:
06:57:c5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:34:50 2025 by rpki-client