Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File: fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier: RRWO5EbSNDskvXe8bYn4kRX/SW0ZvE589sm8Xh1CXw8=
Subject key identifier: B2:86:D0:C2:92:58:F5:4C:39:BA:11:ED:65:57:B9:70:4C:D4:ED:A9
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer: /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial: 01974B1F9C2C057D6C7BA41B54E8FC9F64AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 16:00:52 +0000
Manifest this update: Sat 07 Jun 2025 16:00:52 +0000
Manifest next update: Sun 08 Jun 2025 16:00:52 +0000
Files and hashes: 1: QHrCJn-3TWWMCJDQELy3q8dJt_4.roa (hash: DTg0RQCOqWT4OxprKyTz2OGsk5mW9uMRzOSYKDRAWp0=)
2: dvNIb3T0U0mU22w-yMo6gNRu98k.roa (hash: KB6r0yPVxOXp/PVpdxcqc3971j0F/zVlsLjdreh6UUk=)
3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: HC8CNhWYmbdTPNS0AXtl4i0fyZEC44teEqFEYfoTER8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:9c:2c:05:7d:6c:7b:a4:1b:54:e8:fc:9f:64:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Validity
Not Before: Jun 7 16:00:52 2025 GMT
Not After : Jun 8 16:00:52 2025 GMT
Subject: CN=b286d0c29258f54c39ba11ed6557b9704cd4eda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:11:53:d1:30:f0:cf:2d:39:cc:e0:58:2d:
3a:01:80:ab:ef:c9:71:e4:8b:7e:13:70:7f:ed:3b:
5b:69:47:da:44:f1:49:0a:80:c4:97:bc:d9:cb:35:
11:87:e5:eb:4c:14:cd:f6:ba:c9:a0:2e:ff:8c:04:
d0:7c:3f:c1:ec:ce:4d:f8:89:9d:17:6d:2d:96:b8:
0d:f7:7c:7c:eb:31:92:68:96:a5:cd:5b:5d:69:2e:
05:03:8e:ad:8b:b6:b3:fa:d0:b2:7a:65:a2:06:53:
6d:4e:8c:5d:e0:68:9d:c8:79:ea:4c:6d:0f:a6:e7:
25:4f:dd:94:28:4d:c9:5b:b7:3c:d8:05:2e:8a:12:
15:b4:3d:82:b7:10:da:a4:8e:e9:35:d6:c6:94:41:
92:3b:5a:fd:f9:0c:5c:65:f5:81:7c:dc:69:57:1d:
1f:2d:65:14:0e:72:e5:8e:fa:ac:1b:ee:ce:22:c4:
ff:c4:f1:3d:05:7d:8a:8a:20:7c:f5:7f:d3:2d:02:
b1:66:12:d8:fe:a7:6d:76:c9:5c:4b:5c:69:e9:a6:
36:bc:fa:a7:53:1c:cd:7a:00:8c:2f:fe:a8:8e:8f:
d6:e4:6e:7e:bc:da:56:41:72:f0:ec:68:0c:1e:bf:
3a:3b:53:e6:c2:02:33:6f:74:95:3a:89:c7:6b:79:
53:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:86:D0:C2:92:58:F5:4C:39:BA:11:ED:65:57:B9:70:4C:D4:ED:A9
X509v3 Authority Key Identifier:
keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:41:28:b6:d3:0f:6c:12:c1:a8:3c:a8:55:b1:2e:54:45:f2:
4e:7f:d1:78:67:0d:89:cd:6a:3b:c5:7a:5a:5c:89:c4:15:ba:
02:2f:bc:8c:47:7b:c4:25:d8:f1:46:1a:41:94:2a:25:cb:5a:
29:a4:48:ba:d9:98:f4:7e:22:14:b9:c1:3b:ab:98:e2:9c:f1:
60:7c:cc:3f:34:a8:25:a3:7d:d1:a7:60:27:5a:25:05:08:cb:
74:2d:fd:8f:46:b5:16:52:20:b1:95:e2:64:ed:fb:53:fa:2b:
19:56:c7:ed:d4:a8:2d:40:2b:ce:5c:65:9d:be:f4:50:8e:cc:
40:ea:93:83:78:8b:c6:d4:1c:ef:65:fa:d3:fb:92:70:ad:56:
cd:41:17:de:05:98:b5:03:69:a4:3b:f3:ab:d7:63:01:ba:cd:
52:f8:99:bc:63:55:98:68:67:3a:ef:d6:37:db:ae:80:3c:0e:
15:34:94:16:3e:4d:72:df:fb:b7:33:45:c9:07:78:d5:65:a1:
2d:79:5a:fe:5c:27:23:f9:d5:e4:e6:aa:5f:47:39:d4:ab:e7:
aa:4a:f2:0e:e7:98:e0:96:61:78:db:02:f6:36:e6:1e:af:35:
ce:1f:d4:97:76:78:28:dc:7a:3f:7a:ce:04:8b:31:fc:27:e7:
e0:89:46:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:12:59 2025 by rpki-client