Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
File: pJuD9b3hodyT3mlHaDfp46N3l68.mft (raw, json)
Hash identifier: y/vnFAYOczJmFORl+nuXSxJ/+gvGuxIHyAeqqmURKGI=
Subject key identifier: 3B:8A:2B:57:5F:03:EF:A5:99:7C:17:09:40:03:47:87:04:48:1F:04
Authority key identifier: A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
Certificate issuer: /CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Certificate serial: 01974AB1940A623A3150804D2C7A961F4C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 14:00:41 +0000
Manifest this update: Sat 07 Jun 2025 14:00:41 +0000
Manifest next update: Sun 08 Jun 2025 14:00:41 +0000
Files and hashes: 1: ivIvX3ybfrEo6-_TJQtybec7lto.roa (hash: AYMx34pgwR2VT7P45blq8Gv6Ax5FOOQvXf8mR5QOiWI=)
2: pJuD9b3hodyT3mlHaDfp46N3l68.crl (hash: 3jL1sGnDWxvR/PnkHAiqh4XTZrVlC10cJxMPO2HcvbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:94:0a:62:3a:31:50:80:4d:2c:7a:96:1f:4c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49b83f5bde1a1dc93de69476837e9e3a37797af
Validity
Not Before: Jun 7 14:00:41 2025 GMT
Not After : Jun 8 14:00:41 2025 GMT
Subject: CN=3b8a2b575f03efa5997c17094003478704481f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:2b:63:53:65:9f:f6:4e:8a:c9:a7:e8:db:
29:c9:41:25:c3:e5:78:0a:0d:f7:bd:c4:2b:d5:a3:
8c:d9:f0:f5:9b:08:d7:e2:32:39:df:03:3c:92:cc:
5b:d8:db:0c:d6:b3:f2:31:e5:73:09:31:98:e4:cb:
71:92:45:11:00:ea:5e:80:9d:9c:d1:9f:6a:60:51:
52:8e:2d:3f:ac:06:00:39:c9:49:24:e0:69:df:4d:
48:72:4c:5c:6e:5a:bc:4b:c6:2c:46:28:5a:a7:af:
5c:32:f7:fb:2f:2f:9b:ab:89:de:54:b9:60:3c:d1:
55:72:c1:23:2d:ad:82:20:32:ed:e4:5b:5c:00:2b:
df:a5:8e:bc:8c:24:a9:e6:17:fc:d1:e5:c1:70:4d:
ce:fe:d1:c1:21:f9:86:02:9e:72:5f:da:7c:8c:9a:
c3:58:96:b0:3e:bf:da:40:fd:6a:81:3b:56:52:3e:
c9:50:0d:1f:f7:7c:89:de:10:70:7e:4d:38:02:de:
ef:a8:30:86:11:ea:49:65:5a:d8:be:f0:4f:24:f5:
a6:d9:94:05:83:4d:ca:f4:82:2a:ce:93:26:0e:34:
1d:b6:53:4f:f4:ac:bf:e8:fe:fa:ad:7d:1c:0c:ae:
67:54:ba:4e:a3:39:27:01:00:62:a8:9c:b7:97:ee:
4b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8A:2B:57:5F:03:EF:A5:99:7C:17:09:40:03:47:87:04:48:1F:04
X509v3 Authority Key Identifier:
keyid:A4:9B:83:F5:BD:E1:A1:DC:93:DE:69:47:68:37:E9:E3:A3:77:97:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJuD9b3hodyT3mlHaDfp46N3l68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad1c69-ce56-4eda-87ea-987719ee6a0c/1/pJuD9b3hodyT3mlHaDfp46N3l68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:02:31:96:d7:e2:67:95:17:4a:8d:99:49:56:0e:2c:54:bb:
75:f6:6b:c3:b3:00:51:95:e0:f3:6f:30:5f:bc:33:42:63:19:
ca:96:5d:7d:86:10:51:08:8b:ae:77:01:9e:53:77:64:08:c9:
a8:4d:62:22:7e:d2:bd:64:11:0a:07:af:0d:26:1e:8c:1a:25:
ca:4d:49:0b:2d:15:7d:06:5f:45:5d:56:18:23:24:aa:d6:32:
36:c7:d2:35:bf:c9:d0:20:5e:d0:03:95:d4:20:27:db:e1:ba:
07:85:2b:41:79:b8:93:e3:bc:1a:94:8d:67:f6:ff:03:bb:2b:
1e:e8:a5:4c:ff:3f:14:1f:c1:28:48:8f:76:0a:3d:d3:b1:2a:
ad:12:3a:85:7c:b0:15:d2:f6:4c:ef:34:5f:b0:c6:92:25:7b:
1f:64:e9:52:68:33:c2:03:dc:4e:42:34:79:a4:bc:74:c4:e1:
d0:12:c8:cc:7b:18:4b:dd:61:b4:b1:39:ce:f5:49:8e:90:e4:
9e:b1:fc:dd:21:42:a1:06:e4:13:9c:b3:e6:65:bb:c3:25:e4:
9b:6b:07:0c:2d:e3:03:14:95:00:6d:35:1e:76:17:00:9a:af:
cf:2b:9f:75:89:bd:02:cf:39:d3:83:32:68:15:3d:01:4b:82:
25:64:61:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:32:36 2025 by rpki-client