Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
File: AsNPg3O-f_saNes4hgVlvDxFG-Y.mft (raw, json)
Hash identifier: f7kwun47Dlg8wX44C/hK9Nav6sMfA6AvKzCdLKEsY/Y=
Subject key identifier: 15:1A:2B:F8:6A:05:FC:43:A2:DE:46:0D:1E:04:92:99:FA:24:13:10
Authority key identifier: 02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
Certificate issuer: /CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Certificate serial: 01974AB1A39961547927A97A12DB737757A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 14:00:44 +0000
Manifest this update: Sat 07 Jun 2025 14:00:44 +0000
Manifest next update: Sun 08 Jun 2025 14:00:44 +0000
Files and hashes: 1: AsNPg3O-f_saNes4hgVlvDxFG-Y.crl (hash: iwpLB4ghQ4n6icqFnF8spCoOhEs0w0MFl0RCoKl/51Y=)
2: d7Ak7uNc6zjZuiBATGf-UCP3x8I.roa (hash: nYxY8j7ezJA29gwV9RA7AxL4/U9w5nA29rCzIVbR+bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:a3:99:61:54:79:27:a9:7a:12:db:73:77:57:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c34f8373be7ffb1a35eb38860565bc3c451be6
Validity
Not Before: Jun 7 14:00:44 2025 GMT
Not After : Jun 8 14:00:44 2025 GMT
Subject: CN=151a2bf86a05fc43a2de460d1e049299fa241310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:ce:3a:f9:8b:12:fb:6a:77:5a:3d:98:59:
5b:65:f9:9e:1d:24:4d:18:87:19:9f:2b:31:b8:19:
13:2e:8e:4a:c4:c0:b5:d1:b7:f4:05:62:5d:e4:e0:
d3:fa:3c:4e:f2:9c:61:ee:42:c7:67:b6:e2:27:42:
52:fb:47:d7:bb:b0:f4:fa:83:d9:09:38:18:97:f3:
a9:c9:19:0f:62:f5:a7:63:7d:c5:b8:e6:f5:1c:df:
46:63:87:82:a6:41:61:37:bf:63:e4:4c:ba:de:3a:
86:e1:66:42:09:80:99:0a:92:1e:ab:0f:c5:ba:2b:
ff:9d:d5:79:f8:28:e3:5b:8a:b1:87:5a:ea:93:5f:
84:e3:00:0a:52:4c:c3:31:aa:fa:e7:21:d5:2d:1f:
d8:3e:06:e4:00:eb:73:18:d0:a7:83:34:fd:4e:5a:
3a:88:8a:07:e5:2b:ed:c5:94:14:50:0b:fb:73:22:
68:5e:e3:05:e0:d7:38:c4:ac:d8:84:d3:0f:c9:cc:
31:da:29:e8:b2:b2:8c:cd:a0:de:6d:45:42:a3:0b:
fc:be:9c:ab:34:28:a5:f5:ca:ce:3e:b1:85:0b:b4:
79:d1:c8:cb:1f:42:11:18:db:d7:af:b8:ac:ee:f9:
83:23:bd:c1:99:bd:a3:94:c8:89:08:e5:60:88:8f:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1A:2B:F8:6A:05:FC:43:A2:DE:46:0D:1E:04:92:99:FA:24:13:10
X509v3 Authority Key Identifier:
keyid:02:C3:4F:83:73:BE:7F:FB:1A:35:EB:38:86:05:65:BC:3C:45:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsNPg3O-f_saNes4hgVlvDxFG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2f5a1d-f94a-4bb0-a014-e451b5907ea4/1/AsNPg3O-f_saNes4hgVlvDxFG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e3:da:d0:0b:54:4b:f8:fc:f5:2a:96:79:a0:d8:91:2e:d4:
f4:14:29:17:f9:76:92:48:1c:52:72:d3:f5:30:1c:3a:fe:60:
1f:50:8a:f1:85:18:ac:a5:1f:7b:ab:7c:66:e1:3a:3b:5f:7b:
92:bc:39:ad:4c:ed:34:71:bf:fb:1b:e8:f6:8c:48:f2:98:ef:
9e:a4:30:ee:07:71:af:96:e6:fd:4c:f2:46:a1:bf:14:50:92:
fa:10:1a:3c:7f:85:0b:bf:dd:df:65:fb:75:4e:94:29:d8:14:
d6:17:65:1c:41:b4:2e:84:20:ce:e7:ff:9a:79:4d:dc:2b:b7:
ed:55:b6:81:ed:77:a0:cc:9b:f5:c4:ff:2c:94:6e:d4:06:67:
84:57:8a:5b:f8:00:b9:c9:49:39:ae:47:50:ea:a4:73:93:e6:
33:2d:b3:04:fa:84:ef:0d:6d:38:fe:36:46:0d:d4:5b:30:f6:
c9:8d:8b:fc:7c:f0:0f:c4:c2:21:bb:44:1e:5f:85:83:d6:80:
ba:a5:5e:2d:a0:ad:bb:be:87:2e:b8:c7:12:92:d7:80:74:4d:
ca:1c:c8:9a:a5:b4:f0:8c:a1:bf:0f:90:b2:40:7e:9e:a6:1d:
b2:51:22:64:60:18:b1:9f:79:c3:17:cb:13:72:51:b8:a6:23:
c8:a5:4c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:01 2025 by rpki-client