Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: 5qyEc1oEldqzh8DFjDpxGvAB7eewzP+LBGnQMUHd24g=
Subject key identifier: 57:DD:9A:63:7E:D1:59:29:C1:91:AA:D5:2C:4E:43:5E:98:B9:D8:7D
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 01974B8D7BA29EFE253BE03F21A3DF17A5A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 18:00:52 +0000
Manifest this update: Sat 07 Jun 2025 18:00:52 +0000
Manifest next update: Sun 08 Jun 2025 18:00:52 +0000
Files and hashes: 1: 0SO2bdDSFS2jl_PJgU_l_j97XeY.roa (hash: b5x4PF/4pc6ecIpAqqWDUvsSnbLqRaDPB8YvR8rbRKg=)
2: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: FHhiUFZuFHe/k50YkvMTwyi4K5Tkhu/1iwYFQQOrE6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:7b:a2:9e:fe:25:3b:e0:3f:21:a3:df:17:a5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Jun 7 18:00:52 2025 GMT
Not After : Jun 8 18:00:52 2025 GMT
Subject: CN=57dd9a637ed15929c191aad52c4e435e98b9d87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:28:6f:94:c7:94:cd:cd:7f:2b:99:fc:01:
c8:ba:81:e3:91:3a:f7:97:a9:c3:b6:5a:d6:fa:68:
61:3e:fb:d0:f2:89:07:18:0e:da:8d:47:ee:73:a1:
45:fc:e2:e2:86:0f:db:75:67:ab:6d:aa:75:ab:95:
05:93:f8:a1:ac:1d:03:b6:d6:21:20:74:27:9e:f9:
84:d5:fb:92:06:a1:1e:80:b1:fc:0a:20:fd:30:4d:
5c:6b:9e:7d:9e:73:fb:ce:5c:99:b5:3a:9c:43:b1:
56:08:34:1e:63:73:aa:1f:85:f2:05:15:ae:15:c3:
de:34:6e:7d:26:26:f2:20:09:8f:68:3e:e9:79:d6:
25:8f:2d:fe:e2:52:4f:98:18:90:e0:d5:07:78:96:
9a:7a:18:a0:ec:98:b1:01:46:0b:14:73:22:f7:3c:
90:69:71:aa:97:4b:a1:b1:c7:51:b8:c1:b0:0f:40:
5e:19:1e:3d:2a:8b:56:52:92:d6:87:db:92:96:66:
ba:b8:fe:aa:5b:70:ef:ec:4b:8d:fa:b9:39:82:79:
13:43:5d:37:5f:14:dc:1b:ff:a3:99:25:8d:2b:53:
79:59:af:6c:dc:c3:e2:98:e9:f3:a2:63:d9:38:f5:
46:f1:8f:57:81:b2:da:ec:e0:e9:e1:28:8e:b8:54:
f9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DD:9A:63:7E:D1:59:29:C1:91:AA:D5:2C:4E:43:5E:98:B9:D8:7D
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f3:80:13:3b:5c:d3:12:09:59:6e:d3:58:e4:48:27:be:0e:e8:
55:6d:2a:ea:28:e4:61:23:83:3e:b1:02:ca:be:33:64:fe:da:
b1:74:f8:c7:c4:8a:d8:ab:8b:81:bb:be:1d:a4:24:41:77:88:
41:37:49:23:cd:60:bd:10:ab:7b:bc:fc:37:e4:f0:4f:d6:55:
86:14:d9:76:1f:bc:72:df:c6:67:8a:2f:9b:05:aa:df:50:05:
6b:32:19:f2:ef:33:49:9f:92:c4:de:82:31:f7:b4:47:bf:c5:
f3:1c:6b:68:75:90:15:a6:56:fd:ea:9c:3d:a0:56:a6:7a:7a:
ca:8f:53:6e:93:5f:40:92:1c:94:d6:b4:d2:a3:38:9a:ae:70:
bb:e4:d3:5f:03:79:e1:be:d8:fc:4f:46:6c:6f:4d:4a:07:79:
47:29:26:25:9d:a5:87:14:c1:01:f5:dc:79:62:ca:4b:9f:99:
10:31:99:61:6a:ff:a7:2d:92:a8:45:1e:b0:1a:13:eb:02:f4:
f2:d0:59:ba:32:04:85:1a:f8:f6:1d:b2:c3:dd:85:84:d4:b4:
98:79:8c:13:cd:a6:ea:8c:64:a7:ba:9e:1b:80:d5:52:fb:ea:
89:dc:f7:e0:e5:5b:e0:e7:a2:3d:7e:84:b3:4d:b7:8c:5e:21:
5f:96:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:32 2025 by rpki-client