Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
File: SZ8D5I7WKpaEDrLy15w-whon8c4.mft (raw, json)
Hash identifier: MCkH9t5o3x5EOdASul+tpRD2/bnkByhQteBZjkJZ4yE=
Subject key identifier: D8:23:46:14:20:60:30:FC:36:0A:8F:89:D6:0A:FB:91:AE:2E:A5:72
Authority key identifier: 49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
Certificate issuer: /CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Certificate serial: 0197493158970541B4A14CD1855B47D87A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 07:01:00 +0000
Manifest this update: Sat 07 Jun 2025 07:01:00 +0000
Manifest next update: Sun 08 Jun 2025 07:01:00 +0000
Files and hashes: 1: SZ8D5I7WKpaEDrLy15w-whon8c4.crl (hash: BXXhaTpaCQTjP741zpOnM4fdaqK8MpcVKmg/ofKswoQ=)
2: yzTNOCEQUyiIncYM071wY64qAlg.roa (hash: hLDsFeTn5OhhHpxN9Rt6KZxw/jMGMbLdQEqz1BHAxCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:58:97:05:41:b4:a1:4c:d1:85:5b:47:d8:7a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Validity
Not Before: Jun 7 07:01:00 2025 GMT
Not After : Jun 8 07:01:00 2025 GMT
Subject: CN=d8234614206030fc360a8f89d60afb91ae2ea572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e5:66:f4:89:a5:c7:28:c3:81:d1:61:3a:75:
84:cf:1b:77:93:93:71:6b:38:56:2c:b7:7b:95:e9:
74:e4:88:62:a2:a2:63:8a:3d:83:23:a1:70:33:6c:
ae:dd:6b:29:58:5d:b0:b2:d2:b2:5f:41:07:23:89:
de:8e:da:40:14:c6:d2:ad:e1:dd:96:54:b1:be:a0:
75:6f:fa:3a:12:5d:a5:e0:da:61:34:37:e4:0f:cc:
50:ca:af:62:fd:03:9b:8e:a4:6d:7d:d9:80:d0:82:
c6:fb:c2:5e:0e:f4:53:72:8a:83:4f:77:d6:36:de:
4d:30:63:98:00:72:15:41:54:92:19:5a:55:ba:1d:
37:7e:61:95:9c:d4:62:ef:1a:f3:bc:01:2c:27:5d:
4c:d7:2a:a9:7b:a3:34:c4:00:d6:c6:4b:65:cf:32:
f2:f3:ac:a7:ae:f4:04:35:55:e3:77:9f:35:b4:55:
ae:cb:52:ae:a5:cf:7b:3c:3c:48:bf:cd:52:d2:79:
87:9c:23:45:be:20:94:cd:5d:7d:28:ba:11:85:af:
7f:52:c2:e8:73:89:06:d3:a5:56:d8:b6:3f:69:e9:
4d:e5:f3:01:9b:9c:7d:20:88:f1:b8:1d:41:99:38:
6d:40:18:8e:0e:d9:47:f2:a3:88:51:79:a0:a6:0c:
1f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:23:46:14:20:60:30:FC:36:0A:8F:89:D6:0A:FB:91:AE:2E:A5:72
X509v3 Authority Key Identifier:
keyid:49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:08:67:00:99:73:cd:29:95:fa:00:45:54:bf:05:7e:fe:7e:
72:ff:29:0a:c6:9a:1c:2e:c6:9a:aa:ce:20:74:e8:e0:fe:c3:
2f:8e:94:ac:56:0a:49:f3:03:8e:42:27:3d:0d:24:e0:77:1e:
d0:ad:28:ad:45:3e:bf:54:d2:c4:28:22:0a:7b:d4:dc:57:13:
2d:c6:06:ed:bf:f6:01:26:80:32:3e:7f:2d:ef:a7:58:7f:49:
a6:e8:3d:1b:52:23:7a:e1:97:7b:8a:46:bb:ca:0c:1c:33:ac:
cc:63:a9:bc:0a:9c:ca:3a:82:b3:3b:d2:49:e7:92:c8:64:fb:
32:fb:1c:cb:02:1c:9f:e8:55:de:85:b0:d0:1c:3c:af:b1:66:
f5:e0:55:e4:97:a1:03:26:3e:f6:cf:bd:1b:59:b0:8e:22:2b:
87:ab:08:a7:a8:8f:02:74:51:2a:e4:eb:e7:6f:f9:72:b4:e3:
9a:ce:a2:7b:6f:ea:b8:08:d0:79:82:91:1b:8a:53:66:7c:f5:
62:ad:3b:84:76:c5:88:51:30:9a:44:a7:13:6c:71:41:59:fe:
85:7b:d5:6f:a9:bd:50:72:3b:eb:75:2f:a8:8e:d0:c6:77:cf:
e2:3c:70:a6:84:87:40:ca:0d:aa:3c:29:c9:bb:9d:ee:52:1d:
78:f0:21:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:43:58 2025 by rpki-client