Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: afJ22LpJ2Cj8F8h/LSjS8AVv4nODdGJKkYHgtZkOyOY=
Subject key identifier: 2A:AB:DC:B3:3F:8E:B8:B1:06:5B:12:B6:6D:10:60:4A:00:4E:87:89
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 0197458B7DE8AE3DB0E6EDF2638878902C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 150F
Signing time: Fri 06 Jun 2025 14:00:59 +0000
Manifest this update: Fri 06 Jun 2025 14:00:59 +0000
Manifest next update: Sat 07 Jun 2025 14:00:59 +0000
Files and hashes: 1: aXSOEWx3tVF7ynpp-Q3fBbDZg50.roa (hash: RSnTxORBukbARx6FRTZpYXAyjlGDaMBXkz61tBk9AhY=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: MD/e57S6cA6ZW7DZytil2xvtVc4YLcHzwJBcvynaG3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:7d:e8:ae:3d:b0:e6:ed:f2:63:88:78:90:2c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Jun 6 14:00:59 2025 GMT
Not After : Jun 7 14:00:59 2025 GMT
Subject: CN=2aabdcb33f8eb8b1065b12b66d10604a004e8789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:83:2c:2b:5f:60:a8:59:3e:4c:95:b5:53:
47:46:12:f5:39:12:c4:21:10:5e:8b:c1:62:b2:b3:
cd:dc:b0:a5:d5:78:58:33:91:12:33:68:29:2e:78:
ba:1e:00:97:c9:71:17:47:41:7b:eb:f8:b5:ff:b5:
2e:94:20:c4:5e:d6:69:7a:46:e5:c0:c8:df:56:c0:
8a:25:62:a9:b4:27:b2:ae:e0:44:f6:11:ed:4b:a1:
56:26:94:94:ad:16:02:7d:43:57:9e:71:d8:3d:7d:
cb:ab:f0:ce:b0:e7:dd:3b:b6:46:af:ca:69:12:39:
ae:dc:00:9f:00:97:c1:6c:0c:18:da:e0:be:73:22:
7d:b6:85:f9:31:2e:06:bb:f3:f4:fd:a2:8e:ae:75:
64:f8:15:aa:b2:9e:e9:c2:6d:7a:f9:6f:c2:ca:20:
77:55:c7:12:1e:78:a5:38:29:9b:3b:bc:a8:d3:43:
06:ed:e3:9b:4a:1e:07:f2:82:7d:ac:60:28:7c:3a:
18:9d:5a:56:dc:6c:5a:61:33:9f:52:0f:e4:3b:2f:
36:46:4d:5d:15:e1:86:c6:34:37:de:a5:5f:8f:3d:
ed:2a:41:9c:df:76:53:be:64:dc:bd:fd:94:9e:06:
d6:2d:29:c4:4c:12:2b:0c:1f:8c:e1:8b:72:8d:0a:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AB:DC:B3:3F:8E:B8:B1:06:5B:12:B6:6D:10:60:4A:00:4E:87:89
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fb:d2:f7:5c:b4:73:a3:08:31:ac:18:ce:f4:e1:ab:25:6b:
4f:a9:c8:a9:73:fc:0a:9a:45:d6:1f:ce:7f:27:ac:8d:2a:0e:
b7:5c:41:4c:2d:bd:b4:ff:38:a3:d2:29:a9:62:f6:2f:e8:a6:
31:95:c7:2b:12:75:a5:88:3e:a2:ba:39:fd:db:6b:be:bc:87:
9c:21:55:74:39:27:99:76:ed:46:a8:4e:0a:59:df:eb:99:c0:
9a:ce:43:c9:1c:bc:f8:8f:c9:a1:2e:a8:b4:1a:8b:7f:d2:2e:
57:f7:af:ae:b3:46:90:9e:ad:a9:9f:fc:bd:e6:4b:b2:c1:66:
4c:da:e9:93:61:f5:3b:fa:4e:72:a1:aa:b6:a3:08:dd:5e:4e:
3c:40:39:17:df:cc:09:9a:56:92:34:7f:39:61:29:7b:70:a4:
74:03:80:40:ba:5f:f0:ea:39:ab:a6:d9:f8:58:36:70:eb:50:
7e:5d:17:d8:6c:38:65:f6:88:24:eb:e1:b3:b6:79:af:d9:62:
08:a4:a0:33:f2:c8:15:70:4d:d8:00:65:3f:34:a9:1d:e5:30:
b4:7e:d5:54:47:80:6e:80:bc:5e:9c:bf:62:c5:ed:87:db:e3:
5c:ae:e3:7b:99:71:4f:ce:50:eb:37:9b:27:1e:1f:56:da:cc:
fd:63:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:37 2025 by rpki-client