Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
File: k47pUc2rw86AXsjfC_NAO9-pxlc.mft (raw, json)
Hash identifier: SnW9dQTwOMvYTCUXK7Pdfg3d1WaHrjDr25GUZaLxPyw=
Subject key identifier: D7:DD:EC:74:ED:6C:96:FD:53:5F:A5:DE:13:55:5F:E7:07:93:A4:E8
Authority key identifier: 93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
Certificate issuer: /CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Certificate serial: 01974DB267553A4D55A234C0EF80809FF19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 04:00:26 +0000
Manifest this update: Sun 08 Jun 2025 04:00:26 +0000
Manifest next update: Mon 09 Jun 2025 04:00:26 +0000
Files and hashes: 1: O1ywiFiLkq1fR5di5oR2ZQ0O0VU.roa (hash: SE/6ae9nVewYClVlXFv1//+tibHGjvE3o8ZX8Ja08V4=)
2: k47pUc2rw86AXsjfC_NAO9-pxlc.crl (hash: SDWKRM2+AAA2B18igY4Wl4kymekZuavAA81BxCGuJD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:67:55:3a:4d:55:a2:34:c0:ef:80:80:9f:f1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938ee951cdabc3ce805ec8df0bf3403bdfa9c657
Validity
Not Before: Jun 8 04:00:26 2025 GMT
Not After : Jun 9 04:00:26 2025 GMT
Subject: CN=d7ddec74ed6c96fd535fa5de13555fe70793a4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:3e:8b:39:57:84:05:c1:9e:2a:50:bf:bc:
f1:72:05:d7:2e:27:ec:3f:a5:d1:1d:05:cd:db:d8:
d4:3c:1c:f9:f8:4c:02:96:e3:8e:8f:fc:b4:a4:1f:
f1:d5:54:c2:2f:81:ef:73:bd:36:ad:50:ad:01:a2:
9e:4d:3b:46:80:e9:9c:a8:81:e2:a7:92:a7:41:18:
76:bf:bb:9b:21:af:82:9a:8c:b2:e8:cb:e4:35:86:
37:53:f4:52:51:06:6c:0e:c4:21:64:7c:29:e3:a3:
f6:03:aa:5d:20:fa:e6:a4:d6:d5:ee:4c:a3:eb:e2:
27:9a:f9:bf:da:7a:eb:95:45:2c:75:e6:99:3a:0e:
60:ad:50:51:e0:b6:9b:93:ac:9d:1b:df:97:46:1f:
80:75:37:8e:b6:26:84:8a:dd:57:71:f6:89:37:44:
1c:3c:9b:f2:67:7d:b2:33:cb:b3:20:8b:9e:7b:b8:
1a:cf:0a:f0:37:81:b4:2d:8a:7e:cf:76:5d:0b:0c:
af:76:73:8c:60:f6:21:8b:6a:26:9d:94:66:e8:2d:
88:f3:e4:e0:f3:6e:34:5f:1e:0d:c0:2a:5c:6f:ac:
ca:0a:36:44:92:34:d2:5c:a3:ed:3e:4a:2b:ab:92:
99:a2:3b:18:be:68:6e:b8:75:59:6c:e0:d3:46:77:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DD:EC:74:ED:6C:96:FD:53:5F:A5:DE:13:55:5F:E7:07:93:A4:E8
X509v3 Authority Key Identifier:
keyid:93:8E:E9:51:CD:AB:C3:CE:80:5E:C8:DF:0B:F3:40:3B:DF:A9:C6:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k47pUc2rw86AXsjfC_NAO9-pxlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/k47pUc2rw86AXsjfC_NAO9-pxlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:65:a9:6b:ec:3e:8c:41:f3:0d:0e:01:fc:94:14:90:69:5f:
c7:dc:5c:98:e9:2e:00:a1:ae:e6:c3:20:bb:6e:c9:00:6e:01:
78:82:88:bf:2e:bc:ec:b3:74:c5:68:32:28:14:89:a5:de:01:
f3:b8:a7:4b:4b:9c:32:4e:00:dd:4c:c3:80:74:0b:58:fa:34:
36:bb:85:45:d4:ab:b6:2f:90:55:62:8f:e3:5c:65:34:19:bd:
04:99:23:b3:08:01:8f:18:89:e7:14:89:c5:97:ab:65:6c:fa:
70:1c:c6:61:07:09:ec:53:21:97:d6:96:00:14:8a:91:96:47:
03:69:31:1f:14:18:ab:cf:33:9a:5f:fb:d1:4c:fa:d8:f4:ed:
d3:72:d8:b8:0e:d5:db:da:57:0e:22:7e:e7:b2:fa:c4:ff:94:
60:1b:90:4b:27:2b:df:4e:b7:61:d7:3c:b8:93:80:ad:14:a0:
73:30:16:35:9c:fa:e1:5e:07:d7:73:51:5f:78:10:34:25:e2:
77:f3:63:1e:55:09:c2:8f:31:44:14:dd:91:f3:8d:ac:71:07:
8d:f8:e8:05:04:ff:d4:49:bf:15:ad:53:5a:40:83:24:52:b2:
2f:75:db:4e:72:cd:c3:b1:08:f1:b6:5f:a2:5a:31:d8:a0:86:
db:bd:72:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:17:17 2025 by rpki-client