Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
File: Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json)
Hash identifier: pMv5w4Eehfdr98meALZzD1IsaDQ1ugRL3qoPEeIgxl8=
Subject key identifier: C8:70:5E:11:DF:33:68:0E:E0:F6:C3:28:F7:A2:F4:1E:FB:60:4A:39
Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
Certificate issuer: /CN=49bf32abf77f412c210f409822d1398ec3beda9b
Certificate serial: 01974DE9EF7E8B31B026942BBB7A6139C9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 05:01:06 +0000
Manifest this update: Sun 08 Jun 2025 05:01:06 +0000
Manifest next update: Mon 09 Jun 2025 05:01:06 +0000
Files and hashes: 1: 5syV7PgPBQbiBbuoFj10-aiKKG0.roa (hash: lK1gem+kZrAq5cKIs+CpHdM5BUtwnIwQ62pWDxE9JKs=)
2: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: bTG3YZggNhSC36ubMgEsvJtqD4CtICHAP+20UEsz1dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:ef:7e:8b:31:b0:26:94:2b:bb:7a:61:39:c9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b
Validity
Not Before: Jun 8 05:01:06 2025 GMT
Not After : Jun 9 05:01:06 2025 GMT
Subject: CN=c8705e11df33680ee0f6c328f7a2f41efb604a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:15:6d:bd:55:e9:e2:7e:cd:98:b6:37:b6:
f3:d7:d4:b1:51:62:0e:b3:c8:34:25:38:5a:84:87:
1f:79:af:35:f8:5a:ab:66:86:6f:da:48:eb:24:a1:
ef:cb:a4:d2:cb:72:4d:1c:7a:64:52:b2:ce:3b:e5:
08:85:ca:fc:15:50:b8:72:39:c0:dc:62:15:d2:73:
7c:8f:72:f2:c1:94:11:5b:94:8b:bf:67:30:e8:d4:
1d:45:9a:f8:98:90:ed:06:eb:d9:dc:32:4a:6b:1d:
04:bf:f0:8d:45:1c:a1:d1:fa:88:17:a8:a1:9d:22:
59:2f:a6:5f:25:68:e8:64:f4:b4:11:fb:de:76:10:
cf:56:0b:24:14:3c:ab:6c:f7:0d:1e:d6:36:cf:0e:
5a:97:a9:ee:45:43:d7:bb:0d:44:6b:6b:a7:d2:3a:
d2:1f:ba:3e:7d:23:43:d4:58:42:57:d3:1a:09:2e:
42:eb:11:8b:dc:cd:6d:2b:b5:14:8f:da:4a:a7:6b:
53:91:5c:2d:c1:d5:0c:af:89:0c:b5:87:1f:0e:1c:
60:57:ea:a5:4a:90:9b:3c:85:f4:be:c5:e6:24:5c:
6d:c6:c0:5e:81:0a:48:8e:a4:87:a8:a4:a7:8a:ca:
bd:79:b0:c0:14:43:28:9f:95:80:28:5e:38:3d:e6:
a6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:70:5E:11:DF:33:68:0E:E0:F6:C3:28:F7:A2:F4:1E:FB:60:4A:39
X509v3 Authority Key Identifier:
keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b7:14:97:aa:3e:6d:a6:62:df:02:b8:57:8e:7b:ce:8b:63:
c4:de:d7:90:40:a8:b7:99:8c:38:d3:b1:ba:ff:7e:29:e5:90:
98:b8:5c:f1:83:b8:d2:19:1d:1f:ab:07:aa:75:60:8e:7e:80:
d5:4e:8b:50:71:d9:21:4d:e1:78:14:f6:a2:c0:88:64:e7:be:
c4:8e:b9:e2:88:98:0c:89:77:6a:f7:74:9f:c2:96:5f:6c:f6:
39:d1:c3:e2:46:ad:fe:fc:d9:38:c8:e7:54:fa:db:99:f5:f4:
ae:fb:97:df:d6:9e:50:a0:f7:bb:3a:f6:8d:96:57:76:d9:7d:
ba:23:66:43:c3:9f:6c:dc:4f:39:16:3b:e2:52:86:bc:14:6d:
25:cf:f2:67:cd:ef:15:18:24:30:b1:4b:30:e7:02:45:95:89:
39:be:5a:72:a6:8a:9b:12:9c:20:b6:b8:17:96:98:78:fe:bf:
0d:84:84:98:2a:33:e5:2d:3a:90:93:08:4b:a6:b4:ef:7f:87:
67:18:90:be:4b:51:fd:c9:36:2c:b6:78:e1:38:fc:65:64:7d:
d4:75:ec:86:a4:8d:76:ec:7d:59:5d:11:86:1f:24:fd:91:63:
d4:d5:49:45:1a:67:60:3b:b9:94:5a:82:af:15:7a:a4:de:b6:
89:74:78:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:16:18 2025 by rpki-client