Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
File: CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft (raw, json)
Hash identifier: 6ZrEGKRWFu1F3MQHD4AL0X+5XY0v86cqxlEsK9mBR7Q=
Subject key identifier: B8:EE:54:91:06:DB:7D:62:4E:B0:0D:81:0A:9A:13:ED:B0:01:C1:BE
Authority key identifier: 08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
Certificate issuer: /CN=08561d0de62247e2085bf59a73c87d25a2438980
Certificate serial: 01974AE8905FA96A666C8B7DFFF2EDA51A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 15:00:44 +0000
Manifest this update: Sat 07 Jun 2025 15:00:44 +0000
Manifest next update: Sun 08 Jun 2025 15:00:44 +0000
Files and hashes: 1: CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl (hash: f7oI1HyngRJv5DCpmz2fb27B9VE/UMSh2HakXEDhF4k=)
2: zmnbja1nRto2XEtATOeaSVrIGd0.roa (hash: eDKKE54Qh4oEqttnrIUpZhTx//uupKmmQ9kEyHlylR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:90:5f:a9:6a:66:6c:8b:7d:ff:f2:ed:a5:1a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08561d0de62247e2085bf59a73c87d25a2438980
Validity
Not Before: Jun 7 15:00:44 2025 GMT
Not After : Jun 8 15:00:44 2025 GMT
Subject: CN=b8ee549106db7d624eb00d810a9a13edb001c1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:35:a1:1f:9f:77:4b:d7:c7:36:92:bb:09:
28:39:cd:3f:e4:2d:4f:d9:35:b6:e5:38:e4:4e:1a:
37:42:c3:5e:46:6e:5d:0a:7d:0d:dd:87:b6:1c:0b:
bb:de:f9:44:88:5b:90:a4:22:f0:d7:68:93:3c:8d:
e9:03:d0:e6:19:97:0e:8d:e8:b2:a9:e2:fd:1b:27:
ef:94:7d:74:67:f6:fe:4b:4f:4d:ea:7a:3e:76:82:
25:74:76:b7:9c:84:6b:e4:91:07:8b:22:ad:5d:65:
99:2c:e7:46:2f:48:4d:2f:44:fb:27:de:bb:50:3e:
ca:f7:ef:ad:2e:69:60:0e:bf:e6:dc:03:15:d7:d4:
65:55:3b:ee:d5:da:a3:7e:f0:4c:b3:a4:07:a1:37:
a5:14:e9:06:00:47:75:45:fd:ad:5e:b2:ad:31:85:
27:a2:ef:ed:d1:d2:e7:22:f4:eb:8a:9e:1e:e4:67:
34:d1:6a:13:6b:d8:f2:8c:5f:9a:24:4a:53:23:4c:
74:50:a0:db:2b:3c:5f:6d:b1:c3:6a:a5:9f:de:b9:
a4:44:89:4f:1c:8e:10:1a:33:3a:af:43:9e:20:41:
7c:40:82:29:d4:15:3b:a9:e5:d1:31:b0:dd:b7:38:
c8:21:3b:82:cc:9e:99:17:2e:da:38:65:37:2c:62:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EE:54:91:06:DB:7D:62:4E:B0:0D:81:0A:9A:13:ED:B0:01:C1:BE
X509v3 Authority Key Identifier:
keyid:08:56:1D:0D:E6:22:47:E2:08:5B:F5:9A:73:C8:7D:25:A2:43:89:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFYdDeYiR-IIW_Wac8h9JaJDiYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed9c63-56be-471b-9bab-53ed82d33d84/1/CFYdDeYiR-IIW_Wac8h9JaJDiYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d1:f3:6e:66:73:c3:f8:75:d2:f8:7d:ec:42:cd:d2:c7:41:
f4:95:d9:d1:a7:24:61:73:97:b9:5d:7f:56:1d:53:0d:00:9d:
85:8e:1f:b1:a4:a2:d5:be:a8:c5:be:4c:e9:c7:f6:b5:cc:07:
73:9a:1b:2c:bf:db:89:44:5d:43:db:3f:79:85:82:96:77:e3:
0e:44:5f:11:c0:37:84:b7:8c:3c:ec:e9:e1:fa:d8:9a:1a:d4:
52:7d:ac:99:ba:23:e2:6a:00:e2:cb:97:67:96:d2:50:79:19:
6d:ac:db:3c:84:af:b5:23:6f:03:4a:39:e6:c2:0d:22:38:2a:
28:97:66:1b:62:6d:15:51:0d:4e:78:39:7b:30:fa:52:7c:50:
2c:2b:bd:d0:f9:06:fb:da:8b:46:a8:bb:2c:09:c6:b5:af:2a:
0d:0e:e8:42:5f:ab:37:6f:7a:b1:e9:28:53:62:75:b8:d7:64:
a9:6f:8e:52:4d:4a:e1:b8:3f:ec:a8:2d:6a:7d:0d:1a:21:51:
e5:95:34:68:e1:e7:3d:7f:89:3c:4c:e1:8d:64:38:09:00:53:
37:a6:d7:9e:41:f9:2a:0b:b1:7d:84:00:63:64:c8:66:86:f8:
fb:89:a1:c9:cf:c5:4a:fb:a0:0d:39:6b:58:61:e0:84:7d:85:
a1:bd:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:38 2025 by rpki-client