Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
File: RwFMkm6nbVZunoqW1YYdR1fIsOo.mft (raw, json)
Hash identifier: xgscQZ4OC27PLuuHx4PpHiQKxsjT0oE9+YYlUtjWRE8=
Subject key identifier: 88:44:12:EB:90:53:32:E0:99:45:F0:33:15:7A:FF:74:F6:FD:79:12
Authority key identifier: 47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA
Certificate issuer: /CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
Certificate serial: 01974A0C8B3263798E57BC24F9FA5AC59D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 11:00:25 +0000
Manifest this update: Sat 07 Jun 2025 11:00:25 +0000
Manifest next update: Sun 08 Jun 2025 11:00:25 +0000
Files and hashes: 1: RwFMkm6nbVZunoqW1YYdR1fIsOo.crl (hash: LebhbNrTf9UqfR9SKLbYGMkL/883vRB+ggXJ71KXaC0=)
2: pFLpzrM-iV1fQ_hTxX2xOEHMjt0.roa (hash: aLstNITfJuEBD1I0LdnhTrgtI2g65BeTn/qvRZrCSW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:8b:32:63:79:8e:57:bc:24:f9:fa:5a:c5:9d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47014c926ea76d566e9e8a96d5861d4757c8b0ea
Validity
Not Before: Jun 7 11:00:25 2025 GMT
Not After : Jun 8 11:00:25 2025 GMT
Subject: CN=884412eb905332e09945f033157aff74f6fd7912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:69:3f:93:56:88:72:91:dd:f3:32:0a:11:
85:7b:5a:a1:4a:d8:78:5f:66:bf:78:f8:68:38:0a:
19:a9:77:27:65:43:f9:c2:b1:35:a2:cb:19:1d:c4:
67:24:d3:bc:8f:d3:d8:0f:02:66:6c:85:5a:1a:4c:
af:19:41:0c:bb:4b:83:08:9d:9d:98:d0:2b:48:97:
09:36:fe:ff:e7:60:68:f6:e4:b2:ee:cf:66:8a:4e:
21:c9:1e:e9:66:a3:ca:57:d1:8f:0c:4a:3e:e1:9f:
c1:83:8e:ff:b2:26:64:6c:77:78:de:11:45:0b:1b:
87:6e:4d:87:e2:f9:1c:cd:13:08:58:00:19:a1:ed:
68:86:e8:70:9a:71:28:71:ec:6f:0f:7f:bc:89:7a:
72:06:b8:8c:69:e5:e3:4d:66:cf:92:c5:87:ed:cc:
99:f4:9a:0c:f4:dc:fc:f2:aa:3a:a6:a1:20:3f:78:
4e:5f:33:01:49:da:0c:21:ef:fe:f7:b8:17:33:f3:
3a:27:bf:c3:e6:cc:33:d3:10:b3:b9:f5:ba:29:87:
cf:dc:4e:a2:e5:7d:bd:14:e5:d4:e8:56:7f:e9:e2:
da:a2:09:ba:eb:75:b9:c1:cd:c7:71:60:5d:c8:f6:
bf:2d:8c:46:cd:cc:50:34:62:bd:88:d6:fb:44:f4:
52:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:44:12:EB:90:53:32:E0:99:45:F0:33:15:7A:FF:74:F6:FD:79:12
X509v3 Authority Key Identifier:
keyid:47:01:4C:92:6E:A7:6D:56:6E:9E:8A:96:D5:86:1D:47:57:C8:B0:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwFMkm6nbVZunoqW1YYdR1fIsOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/3123d0-7caa-4df3-ad23-aba4e643058e/1/RwFMkm6nbVZunoqW1YYdR1fIsOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9d:71:83:cc:dd:1a:b8:df:b8:14:52:78:04:d6:35:02:6a:
0a:bb:70:d9:ec:3a:87:f1:dd:76:7c:94:d4:ad:bd:65:ed:64:
30:72:ed:f7:b2:bf:3b:91:10:b6:e1:ce:48:66:69:3a:6f:de:
7a:b3:04:ba:03:78:b1:6d:b3:c9:cc:6b:bf:86:b9:9c:8e:03:
83:a7:f4:24:d0:89:c4:55:09:b7:34:76:c9:7e:ab:9c:a9:98:
a5:27:7f:a8:84:e5:30:18:4d:3a:84:65:e9:2b:4d:9b:04:eb:
31:a0:ec:bc:f8:d2:2d:45:ac:7e:ef:32:40:4a:6c:9f:85:8e:
77:c2:87:30:c3:6b:b7:69:44:b7:c5:12:ff:b2:5f:51:bf:02:
84:f4:d3:e5:e3:2b:78:a2:c6:e3:c9:26:4c:39:a1:f3:c2:00:
d7:5a:32:46:47:e1:a1:5f:e7:8e:8a:07:8a:9e:62:8b:25:f2:
24:07:fa:80:02:8b:dd:45:d8:c8:c6:3b:cd:3c:67:ce:06:eb:
2d:5d:79:13:40:4a:a8:0b:08:7d:60:a5:7f:46:a9:75:ba:ad:
e1:51:2b:63:ac:ae:ac:58:80:eb:fb:13:42:02:fe:eb:4b:00:
8d:b3:04:08:d6:ce:c5:be:3b:bf:84:36:05:ff:5f:d7:bb:3d:
a3:32:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:47:22 2025 by rpki-client