Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json)
Hash identifier: sYMfpVy69yzLdmypPifvIy4vb593RYhwqn4+Ej6z9fo=
Subject key identifier: 4B:D9:40:C9:4F:3A:BC:04:24:D3:61:7F:63:9D:2F:46:BD:81:2B:1F
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 0197488CBE4969EBF650F8F4978699817D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
Manifest number: 159B
Signing time: Sat 07 Jun 2025 04:01:12 +0000
Manifest this update: Sat 07 Jun 2025 04:01:12 +0000
Manifest next update: Sun 08 Jun 2025 04:01:12 +0000
Files and hashes: 1: 22MFoiE6iwEXKG4ff-0g9Nk9e6k.roa (hash: 8ZAHeiN8JfpnEbf0xNsrPzSUL91MdaXwePhbLZYQBGY=)
2: 63R1CqkRJzCBTqXm_kqr_6UGOC4.roa (hash: QovmpL/thOh4yKhjTn4FNfnRr6OXEgupogya3Oy9KUE=)
3: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: MR0qfTMKKX8nugQddatKQLNfCDeXiICM1/fw6cV9H1k=)
4: kGkGzImsb5Dv_nGgCWEXgWNc7do.roa (hash: x9SmJ5GmGF/t3I5NSMgnwkUR+oRC+nVpi/mDc40npw4=)
5: qF-2BgBNvB9Rp0K_VFhuwpTNLrY.roa (hash: h4z+iViHaDAdXrYk5TZebHBt4+M5KGpzETHGgdp4Ztc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:be:49:69:eb:f6:50:f8:f4:97:86:99:81:7d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Jun 7 04:01:12 2025 GMT
Not After : Jun 8 04:01:12 2025 GMT
Subject: CN=4bd940c94f3abc0424d3617f639d2f46bd812b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1c:8b:26:68:23:30:e7:ab:29:ea:ff:d9:3e:
dd:0a:d8:9c:12:66:b7:5f:e8:cc:c0:37:67:60:90:
75:56:8a:fb:88:35:95:33:32:64:48:d4:db:76:ad:
ca:a3:28:05:5c:13:0a:e2:59:44:04:47:6b:74:16:
a4:68:14:76:11:65:de:63:31:7a:6e:42:ae:6d:25:
d9:2f:5c:db:f2:47:74:23:38:61:ce:68:ad:26:5d:
a8:6e:89:1b:41:2c:de:fd:9a:3b:a5:c4:d6:ab:c6:
11:9a:4e:15:0d:7d:c7:99:1f:72:9b:4d:33:1b:ef:
38:01:b3:3c:6f:87:fd:4f:91:0d:17:1c:6c:43:8a:
ba:c5:82:3a:f5:a1:a8:97:88:80:c4:f4:9c:44:62:
40:e0:f6:ae:dc:e1:64:14:a8:b8:58:64:f0:ed:ad:
ab:4f:98:ca:0d:1b:35:0e:9f:ca:ee:72:0a:55:e6:
56:9c:bb:cf:18:48:12:14:cf:73:1e:07:14:70:07:
eb:0b:aa:50:ad:31:8b:4e:34:8e:1f:b5:f1:94:73:
9f:f5:2a:88:f3:44:86:10:9a:3d:df:a4:d5:20:69:
06:07:52:d5:90:68:0a:38:8d:fb:cb:38:e1:9d:28:
0a:5b:55:de:38:a7:4c:44:dc:91:b4:58:cd:47:5d:
50:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D9:40:C9:4F:3A:BC:04:24:D3:61:7F:63:9D:2F:46:BD:81:2B:1F
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:65:5e:ac:f0:b4:68:79:30:a4:db:3a:ad:4e:ed:52:78:1d:
7b:99:be:6a:da:60:68:c8:52:0a:6a:50:e7:a1:4d:36:1e:99:
72:d0:3d:e3:da:98:cd:ca:6e:44:a5:3d:8d:00:66:74:39:7a:
bc:4a:60:0e:e7:24:d2:27:97:b2:59:6b:1d:27:45:05:3f:89:
0f:88:c5:fe:da:99:9c:92:23:0a:ce:da:2a:88:93:7d:28:96:
f9:b4:10:3c:2e:99:de:64:0d:d6:90:11:e8:26:a0:46:bb:a5:
1b:db:b1:af:93:77:f3:68:54:61:18:64:03:ef:e9:5c:ae:3f:
f6:dd:cb:96:33:66:23:dd:57:59:17:52:c8:14:75:e9:40:fc:
a7:3c:af:de:be:02:0c:e0:aa:76:6a:88:f9:6f:18:dd:ee:ec:
00:2b:76:3b:3d:9c:88:76:52:8e:1f:23:ce:3c:bd:8d:ad:5a:
e2:47:ea:36:ed:a7:87:81:af:5f:98:5d:8c:f9:08:30:ab:5a:
70:9c:93:bc:11:55:9b:74:5d:ae:bc:91:48:17:a9:8e:02:ff:
28:30:b2:3d:a2:5e:97:b8:f8:aa:56:ef:6c:ec:2b:00:17:8d:
60:08:23:bd:49:36:d7:1f:78:eb:ea:ad:ea:27:73:7f:be:85:
41:a7:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:30:42 2025 by rpki-client