Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
File: 9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json)
Hash identifier: BNedg47wqNMb34VhiZjYvtVQGYI2FDydYPMaNvRU7HU=
Subject key identifier: DD:5D:57:30:58:90:BD:0C:EB:84:E8:92:DD:2E:BD:30:BE:CC:31:C8
Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Certificate serial: 01974AE8D12070BC8A6E7DDC4D0C0A385032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 15:01:01 +0000
Manifest this update: Sat 07 Jun 2025 15:01:01 +0000
Manifest next update: Sun 08 Jun 2025 15:01:01 +0000
Files and hashes: 1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: NDtOpX5urH9glyznAo8+XH6aCWJsPDmgxp2ArYbf0w4=)
2: KPjydIOJaGq7MrGDIyks0pG8OMc.roa (hash: EbMrbtdHkpWfjQpY4PIBNTo9mg3b+j3TofouOP6XhE4=)
3: j-eMIttscanFAqtICoI80Cr1JzI.roa (hash: 9wKinY0pxocac6rpiGpVi4F+dA87gof09Z9RuDhbY0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:d1:20:70:bc:8a:6e:7d:dc:4d:0c:0a:38:50:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c
Validity
Not Before: Jun 7 15:01:01 2025 GMT
Not After : Jun 8 15:01:01 2025 GMT
Subject: CN=dd5d57305890bd0ceb84e892dd2ebd30becc31c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:ff:d0:ad:ee:19:21:80:1c:9d:26:6f:fa:
cf:e0:c5:40:bc:6c:bc:29:4d:90:d8:d6:f7:de:25:
db:e7:89:0c:1b:e4:26:03:77:a1:f6:4e:fa:64:08:
e1:1b:ac:20:0a:68:8b:c0:bb:98:64:2d:de:a6:f4:
92:ec:91:8a:01:49:bc:ea:7b:bf:68:a8:96:54:5f:
70:76:3e:c2:31:a8:7d:21:97:57:6c:7d:a0:1f:bb:
fd:19:83:ad:6b:98:96:f4:20:04:b6:de:42:df:f4:
d1:65:02:b2:70:1d:6a:4e:cb:91:73:1a:11:f8:72:
43:a0:e0:65:77:6c:81:0b:84:95:e2:33:19:f7:1a:
3b:bd:0e:88:3b:6a:c1:84:f6:b9:0a:23:b6:a8:3d:
4f:f3:38:5c:ab:b4:cb:42:ea:c3:56:08:53:4d:9e:
7b:b0:19:d7:9e:b0:19:aa:d1:55:48:bc:ab:1b:47:
47:72:29:cd:b5:15:6e:37:c2:db:e7:e0:8f:fb:62:
16:41:ca:82:0f:dd:0d:6a:9a:24:5b:a1:45:fd:2c:
5b:c2:2e:09:fa:0b:55:bc:fd:08:07:5c:b4:2a:f3:
87:98:99:98:45:f0:52:c9:98:50:54:d0:e6:7a:05:
79:b8:3a:57:5c:a8:47:57:a6:3d:73:ea:b7:ea:5b:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5D:57:30:58:90:BD:0C:EB:84:E8:92:DD:2E:BD:30:BE:CC:31:C8
X509v3 Authority Key Identifier:
keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f3:a0:38:12:c0:84:e0:5d:a4:62:99:7c:35:4f:20:f9:07:
6e:69:cd:cd:43:6b:b8:3c:c9:b6:7f:73:70:cd:f9:14:bb:ab:
c6:4e:98:f2:20:db:cb:b5:86:27:3b:02:e6:3a:bb:a3:98:db:
06:ca:56:22:05:9a:66:c0:e7:c6:16:5e:85:3f:d4:91:a8:6a:
3d:8b:6c:5f:56:f3:23:d3:c3:74:aa:6b:c4:1e:31:fa:75:57:
46:8d:ae:62:08:df:aa:81:70:84:b0:5e:28:a5:1f:f5:8d:5e:
13:94:da:6c:2e:5a:17:7f:cb:01:1d:8e:80:a6:87:94:36:06:
2f:7d:eb:de:00:bc:7c:75:ae:f3:4a:cb:d2:a9:88:45:25:3b:
ad:80:b7:a4:f1:fd:94:d4:5d:30:49:f6:95:6e:ca:26:d8:88:
75:95:9f:d9:34:93:bb:1e:39:69:09:cb:98:dc:e9:e3:ce:05:
f2:a2:85:14:9a:cf:4d:1c:bd:4a:9d:3e:5a:a7:1f:51:b6:84:
24:a2:9b:bb:20:56:fb:b0:71:db:1a:ea:be:b2:44:cc:48:28:
81:2f:4c:a6:1e:8b:c1:69:a6:62:3f:f8:29:a0:8d:46:34:9b:
52:75:91:d0:0f:3a:71:bc:9d:0b:fb:ca:7f:cf:81:40:9a:12:
cb:a7:a7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:48:42 2025 by rpki-client