Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
File: s6dYkEx1hW41haRDOuXsV_7xo8c.mft (raw, json)
Hash identifier: 6iIFdjMpJcUMYo/VYTn81u3o6p3OrVgaugC7qWi+FpY=
Subject key identifier: 9E:47:C1:31:02:A1:F5:D2:82:30:39:3A:7F:50:19:9C:CF:30:87:52
Authority key identifier: B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
Certificate issuer: /CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Certificate serial: 019748C30305EC75467809002C43BF90391A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 05:00:29 +0000
Manifest this update: Sat 07 Jun 2025 05:00:29 +0000
Manifest next update: Sun 08 Jun 2025 05:00:29 +0000
Files and hashes: 1: mD7Z7YeNOfK8jp-WeYlQt4uS5Qk.roa (hash: foJEvw+8/1mri1uVePD4Fo8lgGoj9wOcsREdvsruLoI=)
2: s6dYkEx1hW41haRDOuXsV_7xo8c.crl (hash: rFs9iCHf8Qpci0IIGx4TD7zCRKkRFtG89Yt+DM7K8+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:03:05:ec:75:46:78:09:00:2c:43:bf:90:39:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a758904c75856e3585a4433ae5ec57fef1a3c7
Validity
Not Before: Jun 7 05:00:29 2025 GMT
Not After : Jun 8 05:00:29 2025 GMT
Subject: CN=9e47c13102a1f5d28230393a7f50199ccf308752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:54:f4:6a:01:62:4e:f6:7f:22:4d:33:f9:e6:
08:10:26:1a:3c:5d:c0:f8:43:a6:30:56:da:42:93:
45:04:c8:08:9d:1a:ba:08:a8:6e:f9:14:19:58:c7:
45:a4:8b:74:a8:d5:ba:de:15:9a:07:24:bb:fb:1d:
bc:88:8b:1e:13:50:e8:a3:c4:ff:48:c6:9c:94:4d:
e0:92:81:81:94:e2:c3:cc:1e:75:ab:75:f6:70:aa:
48:85:75:81:b1:5e:79:af:7e:a7:6a:13:0c:15:40:
d7:bb:ce:d1:96:c2:55:87:65:d6:ac:93:97:c9:95:
5f:05:8b:f9:75:97:47:53:9a:8a:f1:37:2a:f2:05:
5c:f8:f6:85:06:d2:24:9e:72:a7:1d:b2:3b:ed:68:
b5:b2:6d:b9:d1:ad:87:91:a6:50:c7:f0:c3:2f:e2:
38:c6:57:76:4b:37:b9:84:92:ee:62:5c:4c:0c:41:
43:89:14:a7:2b:94:bb:d1:33:7a:cb:03:2a:da:87:
d4:48:a2:34:ab:38:4f:cb:b6:56:a3:fa:49:7f:61:
1d:c9:34:3b:6b:55:f5:ae:4c:3a:31:d6:10:8e:fc:
7c:6b:75:a5:4f:da:24:8d:d8:92:c6:95:75:ff:f9:
6d:cf:aa:21:f1:85:70:1f:e2:36:67:4c:55:09:59:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:47:C1:31:02:A1:F5:D2:82:30:39:3A:7F:50:19:9C:CF:30:87:52
X509v3 Authority Key Identifier:
keyid:B3:A7:58:90:4C:75:85:6E:35:85:A4:43:3A:E5:EC:57:FE:F1:A3:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6dYkEx1hW41haRDOuXsV_7xo8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/149c01-840d-45f6-823f-e2f0e1c26105/1/s6dYkEx1hW41haRDOuXsV_7xo8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5d:ee:7d:b5:af:77:e6:a2:8d:0b:eb:aa:87:79:c0:c4:c3:
24:45:54:e6:6b:68:73:c1:5e:d4:0f:16:66:75:e3:3f:88:48:
36:86:d4:f4:f7:89:15:53:29:96:f1:9f:61:7a:8f:a8:68:f6:
0d:c1:2e:08:64:18:c1:94:30:84:80:79:97:03:28:c7:da:30:
db:5a:b2:3c:94:59:89:d9:53:33:6d:8b:58:8e:2f:11:17:07:
ac:cc:39:f8:79:75:52:dc:1f:4c:97:4a:71:e6:b4:3c:a8:0f:
98:07:63:0f:52:ff:2a:5e:af:c6:04:e2:7a:58:78:85:e9:90:
43:e8:90:bf:ea:ce:63:a3:2d:64:52:60:fb:5f:cd:19:0e:78:
75:ef:24:a0:76:e6:1a:70:d2:1b:42:3c:fa:1a:2a:18:dd:f0:
4c:f4:f8:57:b2:1b:11:46:b7:c1:78:56:8a:73:02:22:cf:5d:
bf:4d:7d:59:27:c3:71:c6:cd:2b:e5:fc:f8:78:25:bd:53:84:
29:1f:a4:76:e2:77:94:11:94:4f:14:c9:3e:ff:52:d9:8c:d8:
19:5a:46:8c:59:15:67:0d:02:8b:05:d8:fd:fa:d3:e3:b6:b1:
6e:b3:80:bf:31:4c:50:55:31:78:f8:6d:b2:c1:27:b6:bf:e3:
d7:c6:4f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:26 2025 by rpki-client