Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
File: dh55HzroOuiyY-PNtoKjR1tXB98.mft (raw, json)
Hash identifier: 9d409uk4YNvr+yPaobsBGOJeTVzYShLSm6YOAFPzuRk=
Subject key identifier: 30:9F:9B:F2:AE:6D:2D:72:E3:82:96:5D:3A:96:F9:CE:AE:73:54:2A
Authority key identifier: 76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
Certificate issuer: /CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Certificate serial: 01974BC45A0F6596D50C1ECB7BB175B19F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 19:00:48 +0000
Manifest this update: Sat 07 Jun 2025 19:00:48 +0000
Manifest next update: Sun 08 Jun 2025 19:00:48 +0000
Files and hashes: 1: dh55HzroOuiyY-PNtoKjR1tXB98.crl (hash: 9iOh2qOAsqbUILx49HjQYfMuYutX8FCp/ghXayVgLOM=)
2: e3qYhLR-km5IQlHYrXGIQxD6r18.roa (hash: o3slshWpfwKW/e4DeCSWK9BRzXX7zHWEOnbvJOQywpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:5a:0f:65:96:d5:0c:1e:cb:7b:b1:75:b1:9f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761e791f3ae83ae8b263e3cdb682a3475b5707df
Validity
Not Before: Jun 7 19:00:48 2025 GMT
Not After : Jun 8 19:00:48 2025 GMT
Subject: CN=309f9bf2ae6d2d72e382965d3a96f9ceae73542a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:45:06:a7:52:3f:56:4d:e3:f7:c6:51:68:
8a:be:72:66:87:a2:33:80:7d:17:51:6a:75:8b:4d:
b4:dd:24:a5:dd:8e:1a:c2:a0:24:b3:ca:ef:50:19:
61:8b:a1:35:2d:81:b2:ad:0f:76:e7:19:85:ce:3b:
b6:21:e2:35:9c:14:61:59:5a:35:26:7b:11:92:a4:
71:bd:d7:de:2b:d3:5c:01:41:61:54:22:d5:52:df:
0b:f8:b7:e8:62:b7:ae:ec:f4:f0:da:c8:63:15:1e:
5c:57:a4:08:4d:94:e7:52:17:40:79:4c:49:5b:03:
ee:12:82:1a:ec:12:49:57:3a:6c:66:a0:3f:82:e6:
dc:92:79:42:97:6c:03:35:7c:2e:5a:32:92:b7:77:
a9:ea:49:ec:7b:fe:98:4f:b8:43:32:43:3c:e2:ca:
fa:4f:a2:b3:c3:ac:9c:16:74:96:09:38:bd:e9:6c:
78:49:b5:ca:1c:09:5e:73:a6:d9:f2:b7:68:54:ec:
b5:73:ea:74:3f:0a:c9:19:aa:a8:67:55:b0:18:2d:
31:f6:4a:24:2e:e6:b4:aa:3b:cf:5c:13:9a:be:3f:
6d:3d:97:9d:c7:50:10:dc:74:52:c4:31:1b:58:d7:
a4:e8:29:33:77:49:36:09:ce:b2:0f:b5:91:96:24:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9F:9B:F2:AE:6D:2D:72:E3:82:96:5D:3A:96:F9:CE:AE:73:54:2A
X509v3 Authority Key Identifier:
keyid:76:1E:79:1F:3A:E8:3A:E8:B2:63:E3:CD:B6:82:A3:47:5B:57:07:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dh55HzroOuiyY-PNtoKjR1tXB98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fcd990-72f4-4ebd-864a-92e451877d2c/1/dh55HzroOuiyY-PNtoKjR1tXB98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:87:2b:8b:2f:bc:66:c0:c1:42:11:b2:3d:62:13:0f:70:48:
6a:45:74:3e:49:46:38:ca:d1:9f:20:47:33:5b:65:16:02:01:
59:fd:15:b8:e6:93:3d:f9:43:3c:04:05:d2:b7:01:bb:26:7c:
5a:84:f1:5a:e7:2e:c0:43:7b:04:96:9e:b8:bb:a9:1f:f5:24:
91:e8:b8:30:7f:bb:98:52:8b:12:70:5e:12:b2:f8:10:4d:1f:
ce:27:59:cb:99:45:fa:ef:c2:16:05:39:1e:14:7a:2d:20:bc:
7f:0a:42:bf:79:d2:29:80:15:40:4f:b8:84:32:06:98:d9:9f:
33:38:ff:86:cc:76:63:a3:cd:cb:d9:71:81:20:8b:24:b3:f4:
78:f6:d9:95:46:a5:8d:27:f0:f6:c8:30:2b:2a:ac:9f:e0:07:
4c:cb:cd:85:5b:59:ba:32:e2:02:0d:74:47:c3:44:b2:a0:fc:
5b:b5:ff:97:82:c5:54:39:4d:a7:ae:23:72:8d:32:8a:ec:13:
92:fe:31:b3:a4:c3:9a:c7:13:8c:7d:6e:2f:16:b0:c2:44:9f:
3e:bf:0f:8e:5b:37:af:80:52:40:ab:a1:07:1d:92:8c:3d:65:
e6:4b:b1:84:1a:26:01:7c:76:c6:0c:6b:e6:45:56:b0:6f:fb:
28:48:53:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:51 2025 by rpki-client