Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: ImgjL3Ei8iu2ASjcvMSL8HCCT9GG/3vTWwmKN7Rpt9A=
Subject key identifier: 56:A0:4B:66:39:B6:57:35:22:8C:62:F6:F1:FD:56:0B:D1:1D:6A:0B
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 0197493157FE5C88AEC633ED91D2810540CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 07:00:59 +0000
Manifest this update: Sat 07 Jun 2025 07:00:59 +0000
Manifest next update: Sun 08 Jun 2025 07:00:59 +0000
Files and hashes: 1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=)
2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: Jad7CEkLZaP8R0a4og3SE0EDUqT6zbTQFYKvY6fP7EY=)
3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:57:fe:5c:88:ae:c6:33:ed:91:d2:81:05:40:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Jun 7 07:00:59 2025 GMT
Not After : Jun 8 07:00:59 2025 GMT
Subject: CN=56a04b6639b65735228c62f6f1fd560bd11d6a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:da:3a:3c:6c:dc:c0:7c:e7:8c:90:46:b3:
fd:23:e0:2c:d9:0a:74:b3:c1:2b:aa:60:d0:42:90:
e3:c9:51:b2:d9:d8:d0:72:fa:c6:3d:48:91:7c:71:
49:48:af:ab:38:aa:af:ec:3c:69:e5:1f:6d:ef:26:
cc:4b:6f:32:ca:24:73:66:9a:63:a3:b3:71:ec:50:
db:4d:08:de:24:60:bc:ff:8b:13:6f:95:a3:c2:3b:
51:e8:73:16:65:88:7e:fc:77:e4:6f:9e:6c:0b:64:
bf:e0:62:8f:aa:2c:b7:4f:a9:0d:f0:22:ab:9c:82:
2a:93:04:16:b5:8e:bd:8a:f9:8a:0e:30:0b:f2:26:
16:b1:6d:de:f2:e3:aa:99:50:aa:1c:de:49:9c:a1:
9e:fd:b8:cf:0b:40:36:d7:ce:4f:17:9c:9f:e2:b7:
9e:9f:26:f7:d2:d7:23:1c:df:6e:6a:1b:bf:41:af:
6a:84:fa:e1:45:c7:d7:d0:a5:40:68:56:a9:41:ce:
41:94:ee:61:b8:f8:95:26:f6:fc:a4:87:5c:34:95:
06:d5:dc:15:e5:84:4f:58:33:ae:a0:30:54:61:2f:
cb:53:1b:c7:c5:73:21:e0:c9:bf:eb:56:6c:2b:0f:
6e:31:b1:b7:f0:c9:05:65:1d:d8:6b:58:71:35:99:
d3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A0:4B:66:39:B6:57:35:22:8C:62:F6:F1:FD:56:0B:D1:1D:6A:0B
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8f:d6:02:86:e2:c6:5e:a2:17:62:50:b2:92:f0:e9:ed:e0:
da:9e:a1:fd:56:30:1d:9e:88:35:a1:0c:fb:6e:06:a4:69:5f:
10:17:f0:45:a0:11:fd:b4:73:fb:3b:b9:98:fa:7d:0d:a8:4f:
ac:42:6b:b5:f0:98:c5:57:72:f3:59:40:e3:9a:2b:41:68:43:
14:53:3d:06:89:e5:82:f0:f4:d1:04:36:68:d3:b8:5b:7a:e1:
99:c8:5a:2d:0c:64:e7:94:ea:06:cf:d8:fe:c1:6f:e1:37:fa:
8a:92:13:2f:4b:98:90:c7:1d:9c:84:e9:fc:d6:f4:34:f9:86:
8d:b6:10:51:28:a2:27:74:79:ff:76:82:d1:54:3d:5d:57:f8:
97:7c:f4:16:8d:54:16:99:50:f9:7c:43:e4:d3:1f:e7:3f:bb:
72:c2:fb:46:15:c8:df:33:84:7f:da:c3:15:69:d0:93:bb:8d:
28:42:1f:02:c2:7e:68:42:2b:00:ab:34:4e:43:50:a0:d3:63:
0b:38:3e:80:f6:f4:a3:25:bb:37:5e:56:d8:f6:b8:9c:ab:f0:
01:4b:78:d9:8a:f1:38:a8:4e:c0:2d:b6:64:18:4c:e6:e6:a8:
c3:8e:3c:68:ed:47:06:9d:d5:cc:d0:e8:3e:d6:25:d2:ad:6d:
da:70:f7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:42:44 2025 by rpki-client