Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: DIUANIKYZ5a/Xrg/w3LTaAVv6C/2VySG4VjNjb0L5a4=
Subject key identifier: BB:3B:F6:77:7D:FE:57:88:9F:82:C4:BC:B0:22:07:5E:F8:1E:CC:F3
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 01974967CFB260DC1562B8247BD65E4C790A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 08:00:29 +0000
Manifest this update: Sat 07 Jun 2025 08:00:29 +0000
Manifest next update: Sun 08 Jun 2025 08:00:29 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: QTKFGulG1MOEeAwpqSQSdAgdhgHfgmvIeSQLB78Um+c=)
2: abknUv3T7rts3ssSLjO_9zGCj5A.roa (hash: ZduEHW/sDPXFbLZot8EAZU2ihlH8afniaTCGOengHk4=)
3: mP8GRv_PEh-gTNQakjVb0KSi0yk.roa (hash: lWbTaNbVD/rMCUMDyYuELByYeBZBnfrpjytIyODTMiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:cf:b2:60:dc:15:62:b8:24:7b:d6:5e:4c:79:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Jun 7 08:00:29 2025 GMT
Not After : Jun 8 08:00:29 2025 GMT
Subject: CN=bb3bf6777dfe57889f82c4bcb022075ef81eccf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:42:88:8e:ad:1b:0c:3b:5d:3f:bf:85:63:9f:
ab:cf:0f:71:29:e6:26:f9:0e:f3:7a:77:3d:5c:95:
94:70:07:c8:fa:ff:49:76:37:fe:a6:1e:ad:25:1f:
5d:bc:16:3c:a6:84:2d:06:9a:31:42:4d:87:88:33:
51:d9:d0:ab:82:72:94:2f:03:47:ad:d3:24:c4:15:
94:85:a6:04:6a:06:1d:9c:cc:3c:46:7a:96:ad:5f:
6b:88:07:7e:ec:5d:94:79:b9:a8:74:64:18:05:e9:
43:6e:fe:d7:8f:bf:6b:60:4f:ee:bf:c2:d2:ca:3b:
00:81:78:ed:8d:8d:cd:7e:80:f4:2c:32:5b:b3:0a:
1f:0c:c0:99:18:2c:8c:0c:03:57:7f:c6:bb:6f:7c:
2f:56:61:f7:bc:53:e2:3c:b5:fb:10:bb:d2:5e:de:
18:b8:0c:a5:04:bf:59:75:33:f9:65:e1:7b:07:cb:
07:1b:47:77:14:e3:d1:d5:df:16:ab:80:a6:b2:03:
96:6d:c2:44:95:e6:45:a2:99:76:97:25:c4:8f:fc:
72:85:d6:e5:de:e8:e8:f5:da:1b:35:16:81:a9:80:
a7:4d:d1:c7:77:c0:87:b7:77:74:5e:96:15:ac:be:
6b:fd:f2:e3:a0:2a:e0:8c:73:20:75:fb:0e:11:13:
ae:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3B:F6:77:7D:FE:57:88:9F:82:C4:BC:B0:22:07:5E:F8:1E:CC:F3
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:93:f0:04:29:73:b0:b5:2a:86:55:2b:b9:f5:a2:82:54:6a:
e2:50:9e:be:70:c8:97:0f:f5:d4:33:37:77:88:ca:49:6a:d1:
18:4b:7e:a3:27:9b:f6:c8:88:c4:52:e6:e0:e3:23:84:0f:c3:
2a:a2:32:40:a7:72:b3:45:ec:b4:3e:dc:13:d5:f6:32:44:a9:
a5:38:b2:4d:5e:1e:d7:2e:4a:52:03:d0:f8:f8:f0:a5:de:1d:
aa:5d:b0:02:8c:1d:6b:37:99:a3:ed:29:c1:6a:71:f2:dc:2d:
8d:60:db:8a:73:64:05:8b:95:06:8c:16:e5:47:1c:d5:18:aa:
a4:9b:e3:2e:ed:9a:f8:94:c3:99:86:a5:88:cc:19:3e:0d:0c:
a8:3a:95:24:03:89:41:0d:11:a3:d5:e0:da:69:59:f6:ec:f8:
a7:92:de:f7:6f:5d:cf:61:51:9d:fa:43:1a:c4:6f:c1:fd:bb:
5f:7c:99:49:0e:62:ba:7e:ef:90:56:4a:f6:c8:a3:30:58:46:
3a:60:77:ad:e6:f8:00:a8:2b:42:09:62:69:86:fa:22:b3:90:
f7:90:49:35:6d:54:45:8e:67:b5:5b:a8:b1:a0:c1:dd:cb:0d:
0b:18:f4:82:8e:06:c3:fc:41:c5:a0:62:b6:14:05:7f:31:9e:
5c:8c:c9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:08:50 2025 by rpki-client