Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
File: i58lgoNRffGYWTiOE7rRrgJopfs.mft (raw, json)
Hash identifier: 5ixiPibAqFuDInK2x/l9kZHiqRNNyGpM4Zy87wtu/dg=
Subject key identifier: 95:85:F8:64:E1:01:CB:49:39:A5:EA:6C:F2:92:6A:D5:90:96:30:F7
Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb
Certificate serial: 01974AE86EE71C3E189B55B3B9A0CCF477A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 15:00:36 +0000
Manifest this update: Sat 07 Jun 2025 15:00:36 +0000
Manifest next update: Sun 08 Jun 2025 15:00:36 +0000
Files and hashes: 1: aUEo_6I1NIoEpJrfmKA_-34y2x4.roa (hash: qf/pPhy348tojuz4A7OR24KHAsQ8d6peWd65flxSoJ4=)
2: i58lgoNRffGYWTiOE7rRrgJopfs.crl (hash: kJo52BAxJFGjm7nu6LBtC9eU0eSR6DyMRRsECxa2mqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:6e:e7:1c:3e:18:9b:55:b3:b9:a0:cc:f4:77:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb
Validity
Not Before: Jun 7 15:00:36 2025 GMT
Not After : Jun 8 15:00:36 2025 GMT
Subject: CN=9585f864e101cb4939a5ea6cf2926ad5909630f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:26:12:6e:55:c9:a3:26:1d:e8:94:7e:ba:9d:
66:34:69:9e:1f:1b:14:1b:ea:71:95:f8:c5:64:11:
00:88:94:fc:aa:03:5c:49:40:24:77:c7:6a:0b:3d:
e6:29:25:51:8c:8f:64:b2:47:0f:97:db:eb:50:8d:
37:be:5c:ec:cd:1c:d5:cc:8b:07:57:2e:0d:57:8c:
6e:4a:c2:ff:bb:de:72:8d:da:bc:c8:44:df:1c:3e:
5b:f2:99:e6:9b:4f:9a:97:93:50:e3:79:b3:b1:39:
15:f0:b2:fe:1e:08:00:e8:9c:ed:a4:99:45:b0:97:
16:87:7d:65:ef:1e:d8:b1:e3:ce:e3:bb:03:f5:b1:
21:c7:cd:dd:14:31:0f:80:b6:a8:32:fb:08:9f:3b:
26:e7:a1:f0:fa:5a:81:7b:70:ea:4d:17:cb:c4:55:
79:a7:24:df:83:39:e6:63:71:06:f0:64:d1:0a:d9:
4e:dd:7f:9a:82:80:68:63:b1:92:bb:50:ae:93:5d:
14:d6:c8:c4:52:bb:b8:59:f0:5a:2f:72:46:3b:da:
1c:88:77:72:d4:a7:c6:dc:f4:a8:d7:6a:8f:49:2d:
8b:82:1d:8b:69:e1:83:4d:e9:ad:50:b5:13:ef:4e:
b0:ee:6c:1c:35:11:f4:96:b9:da:b6:46:6d:07:55:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:85:F8:64:E1:01:CB:49:39:A5:EA:6C:F2:92:6A:D5:90:96:30:F7
X509v3 Authority Key Identifier:
keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6c:79:64:22:55:c2:9b:a9:3f:01:53:8a:21:36:12:6c:7f:
5d:1b:8d:ee:4a:78:71:48:e2:f6:15:58:f9:43:cc:a5:42:b3:
18:31:28:58:28:fa:06:35:13:b9:43:25:9e:cb:01:7f:17:6d:
56:e2:2a:c9:ff:ce:cc:c5:2d:51:e4:f4:70:73:00:38:c4:c9:
b6:6a:2e:91:4c:28:6c:49:a5:27:c5:ec:b0:1e:69:53:22:ba:
b9:0d:54:9c:71:0c:66:f7:69:f8:82:32:a0:2a:99:2f:d5:2c:
79:a5:10:bc:be:bb:96:b2:f4:36:5c:a9:28:dd:ca:86:5f:8b:
70:33:55:37:fd:06:8c:30:2d:72:b3:d2:12:0e:55:c5:9d:4f:
3f:46:4c:54:2f:2c:8f:62:25:39:cc:9d:27:3d:f9:3e:10:a4:
60:7c:de:59:db:1b:4b:37:6c:17:2d:08:e9:31:70:9a:d2:b6:
6d:68:99:fd:93:f9:4a:1e:91:48:a8:c6:db:cf:ba:fb:ee:b5:
f6:35:99:e4:1b:75:06:88:c3:64:07:0c:20:32:10:94:52:49:
fe:37:e1:e8:bf:d8:4a:13:b1:bf:b2:fe:eb:79:c1:08:0b:08:
03:1f:18:f2:5c:cd:ab:6c:91:2a:59:bd:56:b2:25:d6:73:98:
ee:07:78:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:33:11 2025 by rpki-client