Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
File: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft (raw, json)
Hash identifier: 2S+km/eQWeqyBeyHiHD622sOvnmgXldSKQcWbVvHEsY=
Subject key identifier: C3:33:7F:75:ED:36:8F:54:C0:AB:EB:78:D0:E1:9B:BD:51:71:20:42
Authority key identifier: D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
Certificate issuer: /CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Certificate serial: 01974D0DEF28EF1E9EB7FC78DDABF2A3A1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 01:00:47 +0000
Manifest this update: Sun 08 Jun 2025 01:00:47 +0000
Manifest next update: Mon 09 Jun 2025 01:00:47 +0000
Files and hashes: 1: 1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl (hash: hx/E2nZLpkUYqgFy4opTggas2VQJzJSQhrpezwQ/M90=)
2: KzggZS0_EU2z31ZVy2dRybNt5fE.roa (hash: 0/EVa9A1y2LsZKtv+12bHp3FGMOEZd7rpEDZ7/wagAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:ef:28:ef:1e:9e:b7:fc:78:dd:ab:f2:a3:a1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f357c54949f20b400883ed8c98d3731c3cb495
Validity
Not Before: Jun 8 01:00:47 2025 GMT
Not After : Jun 9 01:00:47 2025 GMT
Subject: CN=c3337f75ed368f54c0abeb78d0e19bbd51712042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:79:b6:7c:c1:3b:d0:f1:52:30:87:bd:6d:92:
2e:e9:bd:4c:e9:39:21:55:04:2e:46:61:87:74:aa:
8f:68:2d:1a:b6:57:a5:f8:cc:94:f6:75:6f:71:04:
76:ba:64:5f:78:37:fd:c9:e0:ed:2e:95:15:3e:24:
e6:fd:16:94:db:5a:22:8d:06:45:49:b9:8b:fd:c7:
a7:13:ad:92:e4:a2:33:77:30:70:f7:81:3e:57:6f:
8a:c7:fa:01:17:ba:76:0b:b6:33:bb:59:e4:92:2a:
b3:90:bd:47:7b:60:73:9d:b3:57:50:f4:12:ae:a7:
1e:43:8a:53:00:49:9a:67:28:74:fb:70:29:7c:93:
36:6d:12:00:b3:ad:b7:02:8c:32:f1:8d:8b:8c:5e:
48:05:aa:ae:0f:68:c0:59:b5:8b:87:79:4a:81:e1:
a6:69:42:b8:ee:c9:a9:e9:a8:a9:5a:e0:a7:f8:bc:
e3:8d:dd:48:45:6e:9d:53:b4:14:f8:3e:54:b8:90:
d0:28:29:0b:8e:79:04:e2:51:70:d5:b9:24:95:7f:
ac:f6:38:12:d8:4a:a7:b1:04:ad:c1:d0:9d:0f:c1:
fb:70:45:37:1e:5d:0e:a8:1a:31:5b:86:22:c1:6b:
61:fa:bd:94:a9:f3:65:96:64:00:65:04:02:5c:8d:
86:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:33:7F:75:ED:36:8F:54:C0:AB:EB:78:D0:E1:9B:BD:51:71:20:42
X509v3 Authority Key Identifier:
keyid:D6:F3:57:C5:49:49:F2:0B:40:08:83:ED:8C:98:D3:73:1C:3C:B4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vNXxUlJ8gtACIPtjJjTcxw8tJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/281edb-0d42-407a-b459-05f09ef86e7b/1/1vNXxUlJ8gtACIPtjJjTcxw8tJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b3:39:51:19:2f:d0:50:0f:7e:06:2b:d8:b4:33:7b:05:82:
0e:ca:ab:e7:88:72:86:e0:51:8d:ce:ce:37:16:77:09:fc:d3:
81:cb:d7:d4:f0:cd:63:b0:ab:67:d0:d5:bc:1b:c7:7a:3c:d0:
a2:b6:56:b9:61:50:9f:5c:b8:c7:b3:59:10:ac:73:02:83:87:
f9:b5:ca:27:de:cd:33:5d:4d:9a:57:08:d7:cd:69:10:9f:bf:
58:c3:44:72:73:86:f6:22:f6:f9:9b:6c:7c:95:9f:cf:2d:4b:
0a:00:08:f6:7d:9a:70:2f:10:d5:37:ef:48:23:b9:26:16:cc:
43:a3:53:ff:c2:e8:38:27:21:f9:bd:52:4b:af:4d:23:c5:47:
37:35:8b:d6:a1:73:65:d9:54:85:0c:4b:94:a1:2c:52:04:9b:
53:05:08:38:61:d4:7b:da:3a:c2:04:05:d4:ea:fc:42:d0:fa:
e3:65:bf:e8:8f:69:34:90:35:79:a6:2d:8b:40:14:76:00:91:
ca:47:82:b0:1e:4e:20:ed:d4:3f:b1:b9:9b:fb:f0:6e:22:c2:
9e:86:71:b0:2f:40:e1:be:3f:56:c1:61:bb:fe:18:e9:74:48:
d9:f1:1e:0b:48:08:3a:d5:6b:d7:e5:17:b2:15:c4:26:3e:88:
39:b9:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:14:48 2025 by rpki-client