Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
File: rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft (raw, json)
Hash identifier: Kqo3BkSWXcYWYiMmnGeqjctrH0BatAQ4ETdeIWRFgPE=
Subject key identifier: D3:38:33:42:39:18:23:F2:39:7F:18:26:0F:6F:AF:91:EB:15:36:06
Authority key identifier: AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
Certificate issuer: /CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Certificate serial: 0197458B6B477FBE73EA3C5347D4F186CB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 14:00:54 +0000
Manifest this update: Fri 06 Jun 2025 14:00:54 +0000
Manifest next update: Sat 07 Jun 2025 14:00:54 +0000
Files and hashes: 1: KfdFKMsjdHv-q7t8wKVB68imJFI.roa (hash: /pY/O4QXO7BvEAN+9S1nVpoPg09znAHFBvFlWdPOJZg=)
2: bChpq7eC8HUZiOWdmJZzTGK-ZCk.roa (hash: Sf8LAE4WGl0MHG0bbn/YLP58QNfCYpZtLL1+SAh0T/A=)
3: rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl (hash: KsE6GzTh4kgcSogXVGAYjzrCnxl1RcRxe4bDnOl7ogs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:8b:6b:47:7f:be:73:ea:3c:53:47:d4:f1:86:cb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc431652cdcf521c55bc4005c0dae32ca0a3ec6
Validity
Not Before: Jun 6 14:00:54 2025 GMT
Not After : Jun 7 14:00:54 2025 GMT
Subject: CN=d3383342391823f2397f18260f6faf91eb153606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:0f:de:f9:34:c5:82:8a:68:67:c9:9f:83:
08:4a:a3:52:0b:0d:b2:d3:3e:5b:f7:2c:89:6e:ba:
7b:85:af:7d:03:72:38:3e:b2:d3:f4:6b:12:21:33:
01:38:b3:32:32:79:6b:81:23:58:ae:35:62:a8:58:
04:93:b6:db:9c:0f:84:96:0f:ea:c4:b9:10:b0:3d:
61:b4:67:3a:ec:35:23:d6:6b:ef:77:ec:75:4c:54:
83:e4:02:29:8e:c0:7c:cc:d5:5e:aa:52:ef:e5:3d:
26:3b:90:06:ec:1d:d7:3d:fc:6d:1e:a9:79:bd:c7:
54:65:60:db:4d:22:19:f2:24:a8:00:b0:b5:d8:b9:
86:bf:cb:a1:a8:e7:7e:9a:8d:0f:92:0e:c9:b9:32:
1c:8c:1e:95:54:84:7d:c0:0d:f5:4e:24:87:34:3b:
34:1f:5e:4f:67:7f:28:d9:2d:90:a4:f0:1e:84:10:
68:da:c4:13:a8:03:1c:38:ce:a5:27:31:2d:81:10:
06:93:ab:d6:0e:82:ba:3d:11:46:70:8d:b1:a0:b1:
ca:df:f6:f1:c4:7b:85:20:9a:51:c9:d2:a3:16:08:
41:73:8e:24:23:12:a8:00:16:92:f8:74:74:56:41:
e7:a5:56:0b:d3:50:1f:4e:54:c6:cd:22:6a:4a:f5:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:38:33:42:39:18:23:F2:39:7F:18:26:0F:6F:AF:91:EB:15:36:06
X509v3 Authority Key Identifier:
keyid:AC:C4:31:65:2C:DC:F5:21:C5:5B:C4:00:5C:0D:AE:32:CA:0A:3E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMQxZSzc9SHFW8QAXA2uMsoKPsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d8d6ba-ef95-4dc5-be98-671bee2bcc04/1/rMQxZSzc9SHFW8QAXA2uMsoKPsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b2:78:70:97:c5:24:07:92:59:26:ab:35:09:88:ea:49:7f:
8c:06:5a:6d:03:f9:aa:71:c4:fd:ad:d9:21:38:cd:70:58:73:
b7:b7:2e:40:fb:ed:f3:0a:9d:75:8a:1b:31:b1:3f:77:58:a1:
57:06:80:8a:cf:16:22:65:30:78:9f:32:bc:08:9f:c8:36:f4:
8c:3d:9d:eb:99:77:7c:dd:62:3b:92:ab:63:ff:cd:6a:df:3b:
6e:e7:92:cf:07:f6:63:4c:73:79:e1:d0:f2:0a:bb:75:8a:b3:
88:ec:4c:ad:12:fc:4d:23:ca:56:e2:7c:ea:1c:42:c4:f2:19:
b9:c7:4f:fd:af:89:e0:30:86:36:2a:5d:df:cd:b6:eb:40:0d:
46:cd:00:14:f2:09:a0:42:1e:b4:15:77:02:28:11:06:5a:3d:
b2:3e:f9:f4:64:d7:98:3e:20:fa:57:d2:aa:0e:fa:fe:cc:25:
c2:81:22:c0:46:a7:d7:34:0f:ac:6b:e5:f5:f9:bc:7a:65:9b:
96:32:cd:9d:c6:6a:65:35:f5:7f:8a:f4:2a:25:50:c7:29:0c:
b9:3a:08:6b:24:bb:b4:53:44:cf:ed:c6:f5:35:1a:d7:97:2d:
79:fa:a1:2a:44:8b:14:2b:04:ae:9e:f3:dd:de:fb:b5:ce:9f:
c1:bc:54:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:57 2025 by rpki-client