Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: OFCrmXnt3TM2gqZ+FWgSLbiO20GA5XbDd4532jJ3yJs=
Subject key identifier: A1:91:73:75:4F:FF:DA:AF:6D:BC:13:D2:24:54:68:1F:68:6D:C5:37
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 019749D61191556AF409780315302BC9C796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 10:00:55 +0000
Manifest this update: Sat 07 Jun 2025 10:00:55 +0000
Manifest next update: Sun 08 Jun 2025 10:00:55 +0000
Files and hashes: 1: CXV5h4NnxextID8ps-zs1B6iIxg.roa (hash: H0fWCwenw+LaQh1zQTvHX9xYl9ZHHPd/qzueTxfRIcY=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: hYBDChyR7Nivgl42mWi6z+Klvq/nNWxH8BCyZntwZrw=)
3: uXuzZdEmcXhnurqd_jWF8YOUHrw.roa (hash: 0tKKSAqCxTZYYBM2R7eXZ3g3GCiHz3+8Vn0Oldh70rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:11:91:55:6a:f4:09:78:03:15:30:2b:c9:c7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Jun 7 10:00:55 2025 GMT
Not After : Jun 8 10:00:55 2025 GMT
Subject: CN=a19173754fffdaaf6dbc13d22454681f686dc537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:11:d1:17:c3:4a:3d:79:c0:20:55:b3:44:
9c:af:5b:26:f5:7b:4b:22:13:27:86:7d:95:64:5e:
64:7a:bc:38:fb:70:3f:24:39:78:b1:ef:81:88:9b:
4c:cc:cd:d6:84:05:87:41:37:d0:c7:26:19:96:62:
54:82:7e:c3:ac:30:9e:55:42:cb:e1:b4:14:85:82:
0a:4f:06:0d:88:ff:64:25:17:9c:ff:fb:c3:d3:f7:
77:1d:7f:58:ec:99:7f:dc:ee:28:dd:23:15:12:1c:
90:fc:a4:f5:fa:0e:51:3c:66:e2:2c:93:87:67:7c:
d9:b9:e0:d5:c9:7c:d2:2f:82:eb:2a:bd:93:d3:a0:
4a:eb:b1:a8:37:49:7d:30:62:83:d7:4c:1b:79:c9:
97:c4:55:36:7f:c2:14:bb:70:8a:c4:fa:01:c1:6b:
52:7f:06:eb:de:98:41:07:d4:3a:ab:d4:7e:a2:7f:
b2:6e:32:f4:6f:2b:1b:be:53:83:0d:f1:b3:6b:7d:
34:c7:77:72:fe:a3:9a:67:f9:42:49:7a:95:84:86:
3d:ce:08:2a:5e:9d:0d:09:6b:0b:8a:8b:ce:82:fc:
40:c2:fb:2f:10:d9:23:ed:c8:17:06:b8:06:99:4d:
82:7f:4b:6e:64:58:ed:fb:04:48:52:81:c9:e2:54:
4c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:91:73:75:4F:FF:DA:AF:6D:BC:13:D2:24:54:68:1F:68:6D:C5:37
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:37:76:8a:9c:c1:54:e1:d9:16:89:4d:bb:30:34:64:0d:ab:
a5:20:d7:66:fa:12:c9:67:ca:05:4a:0f:05:33:69:6d:5b:b7:
99:9a:44:66:5b:31:ea:cb:9e:e9:18:5a:f6:21:49:70:56:96:
7d:26:44:a6:aa:e3:01:98:fe:d0:0d:f6:d1:b6:90:d5:9b:29:
69:fe:66:0a:ae:f4:25:85:50:6b:91:41:6b:bc:7f:5a:43:4b:
d7:80:20:b3:62:dd:23:d4:fe:0e:45:60:36:a9:eb:d5:11:3e:
42:3c:c6:77:c8:8d:94:45:ff:f7:f9:bf:b6:d9:99:6b:c0:82:
62:b2:8b:e0:fe:62:d2:d5:81:92:39:01:12:a0:cb:17:74:9c:
47:07:b2:26:4b:93:6c:6f:96:cb:cb:9e:1c:4f:1b:89:f0:d6:
b7:02:ed:1d:bf:8f:a6:70:35:e5:ee:aa:62:91:ed:1e:0f:23:
63:3f:69:1a:45:c7:6d:8b:66:09:76:73:fb:18:4b:1f:48:31:
d5:4b:fb:86:41:21:a2:18:3a:14:bb:60:c6:41:1c:88:f7:f5:
11:b7:d7:3c:f7:3e:ba:c3:74:00:cb:6f:af:8e:67:ed:88:98:
bc:1e:f6:1e:32:cf:97:de:3f:58:4a:30:49:42:53:e4:02:35:
62:cf:33:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:05:47 2025 by rpki-client