Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
File: 94Bqw18urALMoEbWUPsivv7mjUM.mft (raw, json)
Hash identifier: o1xwqC6KfGzjsvLc4m9UDdWlKISM84NgPIrOI9vyvmU=
Subject key identifier: 07:FA:B5:AA:93:E3:74:2C:2E:5C:80:C7:5E:AF:80:CA:7B:0E:5B:56
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Certificate issuer: /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial: 019745F8BB891C183DA4CFA808EF9769475B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 16:00:18 +0000
Manifest this update: Fri 06 Jun 2025 16:00:18 +0000
Manifest next update: Sat 07 Jun 2025 16:00:18 +0000
Files and hashes: 1: 0PPKwxGiNMBSbhAVhmxpYBAC0QY.roa (hash: WQQqIrp440ZZBY56ooFkJtOlObbPJTfYbhMoRZRs5sc=)
2: 94Bqw18urALMoEbWUPsivv7mjUM.crl (hash: XSFnTzBGGkaekzxi8ijSh1N5zQ7JbtS60yf+OMcCQN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:bb:89:1c:18:3d:a4:cf:a8:08:ef:97:69:47:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
Validity
Not Before: Jun 6 16:00:18 2025 GMT
Not After : Jun 7 16:00:18 2025 GMT
Subject: CN=07fab5aa93e3742c2e5c80c75eaf80ca7b0e5b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:6b:58:d3:6f:af:be:a3:a0:12:e3:76:85:
93:81:9d:3a:6b:6a:7c:f9:42:2e:39:f2:19:88:19:
5e:cd:f4:e3:3e:91:04:62:c6:f9:2d:2b:f3:b3:cc:
a9:ea:9d:2b:ee:43:61:12:b6:15:72:7e:07:1e:23:
c1:e3:24:34:44:31:c8:f4:54:88:38:42:fe:0b:d4:
86:7d:79:d5:a6:c7:f7:1d:83:4d:14:20:47:19:14:
1f:0c:fa:aa:1b:7a:f4:fd:8d:9a:a9:b8:09:8b:25:
a6:4d:f3:1f:00:84:1a:a9:67:af:ef:7b:71:05:11:
bf:32:a2:ea:3a:61:9b:08:1a:c9:23:d9:08:b3:42:
9c:1c:fb:5d:0a:29:9f:49:5c:49:ca:aa:b2:0e:9e:
c4:64:b2:30:1b:fb:f0:0b:83:99:ba:8b:0f:5d:ec:
67:58:16:69:f1:29:a4:04:b8:9d:84:ca:88:65:3e:
97:00:a9:2f:8e:d1:45:a1:ff:37:cd:fa:9c:f6:50:
2c:6f:05:0a:e9:c5:a0:ad:54:f5:e2:6a:e1:b8:24:
3c:0a:13:d6:c8:00:ac:42:d9:f2:65:14:e3:bf:3c:
24:25:78:c1:75:f0:81:4a:7d:7d:ce:0f:d2:4f:b7:
c9:ad:5a:e4:ef:4d:cf:36:6e:78:f5:0e:25:79:10:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FA:B5:AA:93:E3:74:2C:2E:5C:80:C7:5E:AF:80:CA:7B:0E:5B:56
X509v3 Authority Key Identifier:
keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:be:b6:53:56:f0:5b:85:5b:e2:ec:e4:6d:40:04:24:d8:e3:
34:53:38:08:82:5c:e3:2d:be:a5:3b:91:68:6e:98:9a:b9:a5:
f6:57:be:a9:5d:0e:0d:92:ab:24:9c:9e:fe:7f:12:f5:c8:b1:
75:99:58:04:6a:08:99:70:07:b1:dd:04:32:81:11:63:db:0c:
f1:39:19:18:af:2f:91:fd:7d:75:e8:22:70:e1:d9:ca:cd:27:
d9:fa:54:15:17:72:06:fa:0d:fa:a8:bb:13:7d:93:df:fa:23:
be:a5:95:0b:c2:60:0c:4a:b0:9a:96:c1:47:99:65:88:5f:3f:
ad:3a:30:2f:ef:59:94:e8:d5:4f:ba:68:a7:19:e6:c5:c1:95:
9e:6f:3f:4f:9e:4c:de:8d:64:40:d8:a1:03:f2:a0:b6:be:92:
60:c4:2d:15:1f:69:15:4e:c3:57:6d:26:3b:c3:42:64:54:47:
01:49:83:9b:cb:39:4a:e8:7b:ad:04:16:be:4c:39:69:48:f7:
ec:c8:1e:1f:50:d9:39:19:b8:66:16:f6:3a:f7:95:3d:81:47:
0e:e3:26:c0:23:03:90:29:0b:c0:6b:eb:76:63:c7:fd:4a:24:
41:b5:d9:59:05:25:4d:9d:2d:17:31:8b:9e:e8:87:55:da:e4:
33:07:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:34 2025 by rpki-client