
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
File: 2gBH2sju-JRNeMG3omhowD4s5GY.mft (raw, json)
Hash identifier: 7Sylxm1gKdEjNfORbl22I8ef2V/tZ+MU+PbHWhnJTJw=
Subject key identifier: 18:03:C8:3B:A5:92:65:38:3F:D6:43:86:10:A0:B6:CE:70:16:94:4E
Authority key identifier: DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
Certificate issuer: /CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Certificate serial: 019748C3456DBE7361A751EAE301BB6C8BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 05:00:46 +0000
Manifest this update: Sat 07 Jun 2025 05:00:46 +0000
Manifest next update: Sun 08 Jun 2025 05:00:46 +0000
Files and hashes: 1: 1HJjsYIKgn5m4aKZWr3wynalRwQ.roa (hash: 4AW+T8DVNHH/qCqGZo07n9kC0wNSFK9esxUBxaOybzo=)
2: 2gBH2sju-JRNeMG3omhowD4s5GY.crl (hash: 8gwr+ZcZF9ONiTsJtcRPjvAGG6KBvRltNTF2V2T+lak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:45:6d:be:73:61:a7:51:ea:e3:01:bb:6c:8b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0047dac8eef8944d78c1b7a26868c03e2ce466
Validity
Not Before: Jun 7 05:00:46 2025 GMT
Not After : Jun 8 05:00:46 2025 GMT
Subject: CN=1803c83ba59265383fd6438610a0b6ce7016944e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:2b:a3:ad:77:77:99:b4:0c:0c:42:d7:a6:26:
73:66:42:8a:e7:42:b4:9b:95:be:ae:40:78:7f:97:
8b:cc:91:d3:00:36:2a:41:c4:af:18:c4:62:bb:77:
a3:fb:df:c9:bb:97:19:1a:88:f9:93:64:50:e3:b5:
ec:56:b2:8b:66:22:be:ef:63:6c:0e:9e:e2:75:52:
68:74:30:f8:15:a3:7c:ab:d0:6a:04:1b:d3:c1:68:
11:18:0b:9c:87:bb:65:39:b2:50:b5:97:79:a2:46:
9b:d5:b1:e6:df:aa:a4:08:7b:4d:45:88:05:79:e8:
e7:60:b1:1b:16:90:e6:bb:a0:b5:7b:23:0b:6a:d5:
63:66:c3:61:86:21:7b:4b:6d:ae:34:db:2b:1e:35:
9f:59:5f:73:7f:08:18:dd:b4:02:f1:4e:65:8f:7d:
99:96:a8:fd:e2:be:9e:0c:20:18:7c:c4:1b:39:32:
5d:65:d3:93:3b:05:e6:ea:a9:d9:4a:f2:de:54:94:
23:ad:19:b9:28:0b:91:51:9a:3b:44:ee:de:a5:43:
f4:2e:d1:c8:76:30:45:2e:32:7e:62:fd:65:2b:e9:
57:88:4a:51:57:a0:4b:7d:04:cc:a6:62:94:ea:47:
82:aa:3a:15:f1:ef:64:02:4f:f7:95:23:da:0d:2e:
92:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:03:C8:3B:A5:92:65:38:3F:D6:43:86:10:A0:B6:CE:70:16:94:4E
X509v3 Authority Key Identifier:
keyid:DA:00:47:DA:C8:EE:F8:94:4D:78:C1:B7:A2:68:68:C0:3E:2C:E4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gBH2sju-JRNeMG3omhowD4s5GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/77959a-41de-46be-a5f1-ac9c8a50f24e/1/2gBH2sju-JRNeMG3omhowD4s5GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ab:59:c3:b9:39:68:c5:bf:25:e5:e3:13:a5:c6:48:e7:a9:
87:cc:ee:a7:6a:04:e0:b8:b8:77:87:82:50:64:a9:b3:5a:41:
6b:d5:aa:5f:4f:b4:5e:00:23:42:3e:b1:18:81:a9:bc:1c:22:
1f:ff:9c:1f:8e:d0:84:0d:16:54:8f:80:d7:9d:bc:01:cb:ac:
98:c6:37:98:db:f5:be:68:25:51:9c:aa:15:59:37:03:d5:a9:
28:16:33:18:a4:55:58:f4:2d:2a:b9:36:57:bb:b9:e7:40:29:
ef:f6:ea:cf:46:5c:d7:be:c1:80:d9:bf:ba:53:a0:cf:e8:d0:
4e:1b:17:0d:b0:d6:ec:cc:98:14:3a:cb:27:bd:b6:64:da:d0:
ab:18:9a:a1:d2:87:08:71:f8:24:1d:f7:f9:02:54:60:81:88:
d9:16:54:58:d1:e1:f8:10:fe:9b:c4:f5:60:81:10:75:a1:a0:
b2:ea:3c:25:39:b5:ac:7e:90:04:f0:eb:67:4f:18:ff:e6:5d:
4a:b7:4a:6c:98:b5:02:78:a0:15:2e:01:ed:d4:b7:8f:ab:1e:
84:a3:24:b8:cd:16:17:01:56:aa:c6:83:a7:84:42:07:35:e4:
e4:fe:f2:77:09:16:a4:6a:2b:53:a3:0d:96:42:92:25:b9:c3:
57:b4:21:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:39:06 2025 by rpki-client