Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
File: cZLyKnioBxsCo2Ko2zPo8_ct00g.mft (raw, json)
Hash identifier: WTqe9dbSimsAYjCbhOapLEYv18YsqjdLJ2Vk8mkXvEo=
Subject key identifier: F6:8F:FA:AE:89:A6:F3:53:80:78:F3:DD:31:81:09:8E:FD:79:83:80
Authority key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Certificate issuer: /CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Certificate serial: 019748C347529AB91182C19CD66DC57C263D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 05:00:46 +0000
Manifest this update: Sat 07 Jun 2025 05:00:46 +0000
Manifest next update: Sun 08 Jun 2025 05:00:46 +0000
Files and hashes: 1: cZLyKnioBxsCo2Ko2zPo8_ct00g.crl (hash: egzexBV8eveWnXft6u/KDVrurqBIMswM+sqW8UwmmSw=)
2: iySxd4tMbCEPkoMPKxUDu_5FR6M.roa (hash: aI0T28ewsgkic6wSWjP7Zq6jLamL49Y0wJiPkH5nxZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:47:52:9a:b9:11:82:c1:9c:d6:6d:c5:7c:26:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Validity
Not Before: Jun 7 05:00:46 2025 GMT
Not After : Jun 8 05:00:46 2025 GMT
Subject: CN=f68ffaae89a6f3538078f3dd3181098efd798380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:b6:e0:9b:b6:9d:60:b1:ae:b6:07:81:c1:
dc:f2:85:73:09:ff:27:65:46:c6:c5:09:bb:69:3e:
f1:51:ac:45:68:f6:23:2f:f4:81:d2:22:a8:8f:97:
84:27:4c:72:cb:60:18:37:87:25:4e:f4:a6:1a:55:
6a:d0:56:6f:86:1e:af:eb:fa:87:73:db:b5:1b:d8:
90:d8:c0:0a:6b:2d:6f:81:4e:ac:e2:9d:ef:1d:37:
6d:e6:97:0c:a0:98:fc:27:fc:68:f0:b9:91:a9:bb:
58:fa:6b:13:9e:8f:03:19:c8:b4:4c:cd:72:af:ad:
df:fe:06:b7:88:b0:de:ce:e1:e4:d6:89:3a:b8:e3:
00:e7:26:36:94:af:25:6f:ef:c9:a7:c9:de:3b:89:
58:a2:86:eb:10:c3:a5:6e:b3:e4:dc:49:ff:c7:13:
be:8e:44:de:72:48:b0:a7:94:4b:ed:9f:63:98:2b:
59:7b:99:70:0f:a0:4f:7a:3b:76:b6:b1:e5:db:f7:
85:12:d9:50:81:1a:2a:70:5b:32:c6:fd:77:d9:80:
0d:9c:9c:60:8f:42:c1:07:ae:78:f1:f9:c3:72:16:
84:6f:e8:89:3a:e7:c9:ef:49:fb:67:1c:74:ee:54:
63:ed:d7:b0:df:bf:89:a0:39:42:9c:04:b5:5a:bf:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8F:FA:AE:89:A6:F3:53:80:78:F3:DD:31:81:09:8E:FD:79:83:80
X509v3 Authority Key Identifier:
keyid:71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a1:b3:e7:40:81:8a:61:fc:c0:24:39:61:8c:4a:6b:19:bf:
21:c8:08:bf:c9:ae:3c:04:df:f7:11:d0:94:55:b7:aa:83:75:
64:f3:20:e5:d4:3f:23:7d:df:ef:f2:46:57:d5:e2:b3:90:b1:
4a:ab:fd:fe:6f:83:a3:fd:47:5b:80:d1:9e:b5:48:a7:35:a8:
45:ce:27:f3:20:71:7c:fb:47:fb:6c:60:75:c8:b0:9a:39:1f:
3e:de:ac:14:e2:08:c6:9c:de:a2:8d:2d:1f:0a:a7:04:d6:c7:
93:b3:31:d5:98:b3:ed:f0:dc:64:73:11:7a:ad:c3:dd:fb:bf:
97:80:c7:87:fa:f9:4f:3d:35:3f:c0:ff:3a:45:0b:2d:fd:55:
5e:b5:1e:ba:01:cf:12:74:ba:e7:25:b4:8f:55:98:ef:89:e1:
ae:2e:ca:5b:71:1b:db:16:91:9a:6e:4c:f1:eb:be:6b:b9:93:
2f:4d:91:21:02:87:63:cc:e6:1a:dc:08:8b:15:34:d3:b2:ae:
1c:d1:c4:fb:7b:13:57:a0:ff:b2:01:6b:68:2e:4e:7b:b2:13:
74:e9:9f:7b:4e:f7:f0:41:a5:0c:ca:b0:cc:d6:9d:d5:56:20:
27:36:53:d6:00:57:28:bd:52:0a:20:80:3b:a3:75:e0:60:f1:
41:9f:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:04:48 2025 by rpki-client