Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
File: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft (raw, json)
Hash identifier: +jd2fVllBpcr7Khe5+l90m3rHniN5XGEeZiUYWt4+VE=
Subject key identifier: B5:9D:19:1D:76:3C:9C:59:67:22:90:6A:CD:A2:4D:7A:1B:50:3E:4F
Authority key identifier: 77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
Certificate issuer: /CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Certificate serial: 0197488CA7FC8FE2EAE6A1BA93E1DE79CE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 04:01:06 +0000
Manifest this update: Sat 07 Jun 2025 04:01:06 +0000
Manifest next update: Sun 08 Jun 2025 04:01:06 +0000
Files and hashes: 1: TsaeWiaMsP1j_z_xMCDhi5soRx0.roa (hash: cFv4JeYxc6KlGhF0oX6eBMNahY8RJkA5Wg3CLEjEyhU=)
2: d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl (hash: u+YDL8Yc9fGIyiHe6pHvRN5VxCxjjrGUoEeGzrXldHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:a7:fc:8f:e2:ea:e6:a1:ba:93:e1:de:79:ce:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776564fc206c4bc5db58f7efbbb1e8f88499e233
Validity
Not Before: Jun 7 04:01:06 2025 GMT
Not After : Jun 8 04:01:06 2025 GMT
Subject: CN=b59d191d763c9c596722906acda24d7a1b503e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:cf:c8:a7:6a:f9:86:06:b6:7a:8e:2c:59:
02:97:f0:73:61:38:bc:ef:e4:e4:46:b6:c8:75:47:
8f:78:5e:c1:87:4e:a6:a1:de:18:cc:49:de:62:01:
ed:04:37:19:65:2b:9a:60:7e:db:4a:a7:98:8c:f4:
b1:8e:6b:86:16:62:8d:e2:42:e4:1f:6e:4b:99:0b:
1a:25:2c:4b:10:89:15:10:c4:ce:5c:28:7e:8d:58:
65:d3:2e:64:a8:5f:60:39:52:6b:e9:0c:7b:26:b4:
0b:2e:e3:cf:10:9d:c6:82:52:49:37:22:57:e9:f8:
a0:5b:16:e3:2e:80:e2:00:46:2f:92:84:e5:37:c8:
63:95:4a:c3:05:5b:88:4e:11:60:cc:ba:b0:a4:69:
ae:90:ac:83:9a:cf:b4:8f:bc:ae:28:8d:ca:57:fb:
ab:a0:bb:72:72:be:92:04:79:72:c9:a0:f2:22:80:
7d:a3:11:b4:92:7e:b9:16:d1:88:a2:1c:a5:fb:3b:
c5:fc:d0:48:7f:88:71:86:ca:d7:89:1c:9e:09:cf:
fd:d3:99:da:3d:97:9c:35:3c:40:f0:f9:b3:52:50:
2f:d2:d8:e9:7e:bf:1c:0c:4f:3f:d9:ed:cd:d5:d3:
89:7d:26:ba:88:72:16:8b:1d:14:92:b4:d4:1d:7b:
34:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9D:19:1D:76:3C:9C:59:67:22:90:6A:CD:A2:4D:7A:1B:50:3E:4F
X509v3 Authority Key Identifier:
keyid:77:65:64:FC:20:6C:4B:C5:DB:58:F7:EF:BB:B1:E8:F8:84:99:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/861937-99fe-4b48-99b2-dd907b774f22/1/d2Vk_CBsS8XbWPfvu7Ho-ISZ4jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:38:62:05:fc:8a:8c:03:46:45:ce:2f:c8:9e:14:36:81:2e:
5e:62:ed:13:4b:a2:d4:f6:10:cf:46:04:08:88:f4:c7:01:3d:
b2:f5:ab:9e:6c:8d:bc:82:9f:8a:04:de:53:aa:84:59:7a:1d:
cc:04:c0:f4:fb:3b:3d:31:b7:7e:a3:ce:d7:04:2a:2a:00:9b:
97:2c:5a:03:17:44:67:f8:cb:ef:8f:b7:c5:bb:70:19:79:d9:
b1:47:dc:d6:06:dc:34:f8:31:53:de:4c:75:09:a9:dc:0f:f8:
80:53:0e:cf:5f:64:90:40:31:19:40:d5:34:1e:44:5d:16:75:
8b:8b:25:80:9e:a0:53:c8:74:55:a4:ef:00:09:43:c4:32:d2:
a7:c3:81:bc:64:9d:a9:18:93:b6:8c:b0:81:7e:54:8a:49:2d:
c3:75:c3:9d:05:31:3e:35:f8:4b:32:aa:dd:43:06:a2:37:f4:
07:fb:35:09:2a:15:62:bf:ed:64:b5:5d:19:25:08:bd:ec:9b:
ed:a8:29:0e:9f:0f:ff:73:68:04:c3:f5:3e:46:c6:ee:09:1b:
b2:c1:3d:ee:fc:43:bb:0a:35:ab:34:5a:08:71:77:71:a9:d2:
53:ad:97:d9:25:02:61:bb:fd:fd:c8:cc:19:ca:eb:da:b2:12:
90:ce:1f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:19 2025 by rpki-client