Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier: SvpxYDhKL9H8bM/vMfMWacnwUvZpHiCEGkkptzfuA0Y=
Subject key identifier: 5F:27:58:53:ED:16:92:0E:AE:B2:8E:42:23:66:54:A6:9B:FA:A4:3F
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 01974C9FAC7A562EFCEAE159D1FA595DAA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 23:00:22 +0000
Manifest this update: Sat 07 Jun 2025 23:00:22 +0000
Manifest next update: Sun 08 Jun 2025 23:00:22 +0000
Files and hashes: 1: DTYyZuafFj4qXWfudssAoo7YyUc.roa (hash: XFaAmLI0e2ldAKL+t4MvCZW7ieWrsLzA21ljUa5d0Uc=)
2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: 2mfk2MNrjWODFZgJILfcNT6MaCpQHuM15ZpGv74u5g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:ac:7a:56:2e:fc:ea:e1:59:d1:fa:59:5d:aa:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: Jun 7 23:00:22 2025 GMT
Not After : Jun 8 23:00:22 2025 GMT
Subject: CN=5f275853ed16920eaeb28e42236654a69bfaa43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:9c:7a:cc:2d:30:1c:b1:07:cc:bd:80:2c:
fc:92:94:5f:de:bb:fe:63:d3:ce:55:46:45:5e:aa:
fd:55:71:ac:08:03:7f:0d:66:03:30:74:56:b3:f1:
dd:ea:4c:46:9b:e7:8a:9a:c6:2d:02:19:57:01:7e:
85:f2:fd:a6:ea:a0:2b:ed:5d:7a:ff:89:d8:68:b4:
82:79:b9:df:f1:76:d1:2e:e0:82:1f:1c:1b:d4:c6:
35:05:87:47:03:a7:cb:41:81:ae:9c:79:16:eb:ca:
6d:24:10:f7:b5:99:74:cc:24:41:0b:ab:5f:92:2c:
3e:c4:b6:08:d5:85:ea:18:b7:50:90:fd:67:f3:e5:
6d:ff:a2:7d:3e:bb:d0:85:11:80:e7:6a:48:94:47:
96:91:8b:d2:09:74:68:51:6a:89:ce:af:d1:61:5f:
7a:f0:d5:24:55:ae:48:0c:fb:69:85:d9:15:74:e6:
27:f1:ec:1e:55:86:29:1c:de:29:92:1b:ea:88:14:
08:b5:2a:06:e4:a2:35:15:09:f1:0b:94:6b:0a:a3:
56:45:6a:80:fa:f6:b4:23:07:07:dc:09:c5:aa:d1:
2e:c9:fb:ad:21:0a:c0:9f:90:71:77:44:0a:4b:86:
b5:a0:c7:f7:30:dd:25:88:2e:2d:22:e5:98:d1:7b:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:27:58:53:ED:16:92:0E:AE:B2:8E:42:23:66:54:A6:9B:FA:A4:3F
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:be:6b:d7:3b:21:d6:b9:12:05:ac:b7:d6:94:cd:00:c4:ab:
14:be:7c:49:cf:ef:87:1e:ec:f3:a2:15:0e:c8:77:c6:bc:23:
d1:2a:f1:21:62:36:ed:07:bf:68:af:43:32:01:5f:a0:56:8b:
be:ed:d3:1f:bd:5a:1f:14:46:85:03:ab:7c:b5:0b:4d:d1:18:
94:2e:e8:bf:d3:d0:13:43:9b:75:60:4d:7c:96:83:52:9e:56:
ae:f9:7e:db:1e:57:44:2d:06:04:33:21:4c:64:29:98:4f:5b:
58:84:a4:52:7a:be:08:8d:e8:81:39:c9:04:d7:df:12:ff:08:
ad:94:c6:e4:2e:4b:bb:27:cf:7b:aa:38:ba:f6:48:97:45:d8:
5c:4e:31:a5:6f:fa:b0:f5:64:e7:1c:75:7b:47:78:07:d4:4c:
c8:c9:d3:e4:b1:92:8d:15:75:b1:58:d7:e7:b9:3c:a8:76:40:
bf:51:65:48:a7:fa:c1:20:0f:20:04:84:e4:70:29:c0:af:74:
03:21:90:b6:00:27:ce:fd:55:d8:22:34:a4:4a:a7:df:53:81:
82:ae:91:b4:d0:2b:35:a8:00:20:00:37:91:3d:97:36:11:c0:
f5:56:11:4b:c5:22:a3:d0:b8:28:34:b0:19:75:f1:4d:6a:1e:
20:54:ae:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:28:45 2025 by rpki-client