Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: SnhnVf/ThsPPc9CNF+ROeTxNoXKvuiDgkWKv26NacNw=
Subject key identifier: B6:F7:F7:60:97:8B:0C:7F:D5:8D:E8:9B:91:07:B4:34:7E:FF:9F:AA
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 01974DE9D47810B1A9FF7EF38FD2E03437A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 05:00:59 +0000
Manifest this update: Sun 08 Jun 2025 05:00:59 +0000
Manifest next update: Mon 09 Jun 2025 05:00:59 +0000
Files and hashes: 1: 7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa (hash: j6xn4MHIGZVJXA81hfabdadaay1xFRv4GfnwCa5VtAQ=)
2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: lLfdWXI7b1z6dolifLyGX/pA5tqe1Mkk7qZ65mDSVdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:d4:78:10:b1:a9:ff:7e:f3:8f:d2:e0:34:37:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Jun 8 05:00:59 2025 GMT
Not After : Jun 9 05:00:59 2025 GMT
Subject: CN=b6f7f760978b0c7fd58de89b9107b4347eff9faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:ef:a5:77:61:fc:71:91:00:9d:d5:c3:01:
2e:96:37:b6:65:99:c6:21:f3:f2:7d:b3:c4:69:b8:
4e:5e:ba:80:3b:fb:14:61:5a:df:c0:74:ef:c6:5a:
1d:c0:80:40:f1:28:c0:b1:04:d9:ff:ea:ad:d4:64:
82:9c:b8:40:c3:71:48:32:52:ac:86:d0:32:6f:81:
da:dc:4b:20:d1:84:a4:3c:b3:a2:f4:8f:c0:81:a3:
b7:eb:c2:e1:8c:10:83:4e:2b:e8:27:3d:50:b0:0e:
9d:c9:88:25:ba:64:99:02:f5:c3:01:e4:74:39:50:
b0:56:93:8a:cb:44:18:86:8e:ec:c1:1d:4f:11:95:
fc:aa:65:f3:d1:4c:0d:91:54:f3:46:99:2f:c5:60:
be:88:88:9a:26:1a:60:e2:97:f5:2a:d3:e5:86:9c:
a3:48:eb:c2:c5:75:55:a9:f2:6b:7d:b6:71:56:97:
97:6e:77:1d:3c:72:5a:c6:8e:76:ae:4b:dc:50:25:
af:47:64:85:f9:3d:be:8c:ab:fa:c8:d5:81:24:a4:
da:25:31:db:d5:2a:8b:eb:dd:0a:51:18:b4:1b:01:
fb:3d:b3:d6:97:20:ad:2b:2c:64:9f:f6:c9:9d:2d:
8e:bf:f7:4e:c0:41:2d:2c:34:9a:28:af:d2:3f:68:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F7:F7:60:97:8B:0C:7F:D5:8D:E8:9B:91:07:B4:34:7E:FF:9F:AA
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:00:9d:90:a4:53:6e:fd:e2:0d:37:22:f1:be:5e:e6:af:bc:
c7:91:ee:42:a8:dc:d4:2c:f7:f0:f5:03:b1:c5:87:36:68:f6:
e6:5e:65:44:82:5e:f6:83:37:70:64:17:02:fa:9e:cd:88:36:
38:9d:d6:b8:73:30:63:46:59:b3:66:da:c5:4c:b8:a8:60:d6:
c5:e1:c9:7a:e4:1b:18:7d:34:3a:db:df:ae:57:3b:a3:08:e5:
eb:d0:f8:fb:9c:b1:ae:a4:b7:95:91:13:e6:72:aa:ed:ad:9d:
13:73:ce:e6:13:59:3c:06:7c:f4:f0:f3:8e:66:19:9f:be:f8:
1e:b2:9a:92:c7:1e:a9:b2:22:de:ca:5b:bb:ed:08:45:bb:e7:
65:8a:4b:b6:f3:5c:e5:53:9e:52:d9:f3:7f:8c:28:3b:53:41:
5d:a7:ad:76:5a:a6:9b:e7:4a:d0:f8:62:28:a9:5a:58:9e:f6:
d3:17:b5:52:ce:19:37:0a:1e:94:ad:fd:d3:5c:7f:cb:23:8b:
60:5a:d8:fa:3f:61:f4:74:d4:45:23:83:c6:48:d8:b2:d0:4a:
10:7e:ef:63:b7:87:63:ea:e1:48:66:50:c2:0c:2e:33:c0:90:
65:9f:b6:0e:99:eb:cb:a2:86:03:6a:73:bb:9d:66:13:e8:c4:
5d:b7:7f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:21 2025 by rpki-client