Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
File: idOpFFlzx5o-e5VTHj0N99KMSgQ.mft (raw, json)
Hash identifier: TdO7/HQGQuk9/QEL0H/9iknlIZ9iFE0KShA7ycHEsyM=
Subject key identifier: 2E:8E:0B:81:87:36:40:E0:40:57:F8:63:86:1E:4B:1F:2C:FE:F2:C6
Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Certificate serial: 019746D4A359A962B3AF7A1D36CEB32390B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 20:00:29 +0000
Manifest this update: Fri 06 Jun 2025 20:00:29 +0000
Manifest next update: Sat 07 Jun 2025 20:00:29 +0000
Files and hashes: 1: 2PjElAAJU3KrVInjZlxeKaqsURQ.roa (hash: E5/GwvtnZzLjYWDNMf6Xqpe3KvrLvjhM7f3dCAih0vU=)
2: idOpFFlzx5o-e5VTHj0N99KMSgQ.crl (hash: 7s5TjFhp5doXSwzuC0AWOoeUgMkynF1kj3uvl71zezg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:a3:59:a9:62:b3:af:7a:1d:36:ce:b3:23:90:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Validity
Not Before: Jun 6 20:00:29 2025 GMT
Not After : Jun 7 20:00:29 2025 GMT
Subject: CN=2e8e0b81873640e04057f863861e4b1f2cfef2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:66:3e:9d:18:11:9b:2f:de:e8:c3:36:b6:
65:52:ff:a5:da:7b:56:2e:a6:7a:4c:c8:d7:50:15:
5a:ea:31:d9:22:49:e6:19:e4:47:50:5a:69:a8:0c:
20:c8:61:aa:d6:a3:45:08:8a:46:75:e6:8a:2d:01:
21:5f:7b:1a:dc:02:09:21:8b:26:a2:d1:4f:14:0a:
99:aa:62:9c:3a:6d:6a:22:ca:45:d1:44:49:dd:3e:
c7:eb:80:8c:59:01:95:18:f7:ac:a6:3e:ad:39:9a:
85:9f:03:9c:a3:6a:bf:9d:50:dd:72:aa:aa:33:7b:
06:79:be:46:5e:e6:4f:eb:4d:14:27:04:50:d6:e8:
1a:51:be:4c:f6:fc:a1:68:81:a7:dd:e5:78:fa:31:
5b:61:da:a7:95:ba:67:fb:35:aa:e8:9d:01:89:41:
72:91:c7:29:02:e4:71:7d:1f:bf:02:e9:c9:d3:b3:
8b:b1:fc:6c:39:0a:ea:7c:ee:02:0e:70:a0:71:0f:
b3:73:d5:66:52:87:49:ca:01:d2:4d:5a:32:86:5f:
76:d8:54:92:ee:86:c0:41:c5:92:b1:97:00:87:a8:
51:ce:08:b9:84:ff:1b:e2:fc:5b:09:37:18:b5:a5:
7f:98:e0:d8:b8:6c:52:27:3a:03:6b:8f:79:1b:44:
1b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8E:0B:81:87:36:40:E0:40:57:F8:63:86:1E:4B:1F:2C:FE:F2:C6
X509v3 Authority Key Identifier:
keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:5d:ca:f5:12:95:69:d6:db:6f:b7:0e:37:49:61:12:6d:12:
7e:80:95:73:61:08:0a:b0:11:2d:3f:ff:3c:ef:c1:e1:3e:aa:
b8:c7:e5:dc:74:c6:f0:4e:fb:f8:38:64:58:49:94:31:33:7d:
9e:44:16:b0:05:bb:bb:47:22:1f:96:02:cd:d7:ea:4c:2a:be:
bd:24:45:40:e4:ba:a6:e2:7e:df:2e:3f:dd:96:ba:2a:de:2d:
ee:8b:3f:b9:d4:44:56:b7:a4:3e:0c:67:28:d7:cb:83:62:f6:
07:a3:aa:af:c1:26:8b:70:b0:c3:51:0c:4f:18:93:86:80:15:
39:70:4c:ea:f6:66:fe:41:88:1e:56:b6:36:06:d1:63:f9:f8:
0b:18:bd:cb:b7:1f:83:92:e8:2f:a7:b4:a0:73:2d:ee:7c:f4:
62:57:f0:4a:42:e2:79:a9:ed:62:06:5f:a7:9d:b7:08:84:bc:
32:70:63:95:95:25:fc:e0:45:63:4f:e9:a2:40:70:53:cd:26:
6d:0f:02:db:b3:ca:80:3f:5b:60:56:3d:0b:e3:33:e3:a5:28:
5a:c0:36:85:8c:bb:b2:bc:4b:21:a6:1f:77:f2:80:17:dd:90:
22:85:ca:0c:bd:17:74:dc:f2:82:9c:ce:53:95:d2:f5:e3:3a:
6e:be:ed:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:09 2025 by rpki-client