Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
File: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft (raw, json)
Hash identifier: e7VTyo4LY6dWN/Gb2jstATURio/Ds2ZudVT5lcsxJX8=
Subject key identifier: 66:77:55:C5:8E:2E:49:65:A3:AB:73:8C:A0:80:62:35:B0:31:A0:01
Authority key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Certificate issuer: /CN=cfc025a9d55bfd643757da4d499dce17201774d2
Certificate serial: 0197499EE7DC03681D14D671AA5A525113F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 09:00:40 +0000
Manifest this update: Sat 07 Jun 2025 09:00:40 +0000
Manifest next update: Sun 08 Jun 2025 09:00:40 +0000
Files and hashes: 1: 6U3Xs040zPO-wT1n1ipqEnLqdc0.roa (hash: iVKPeVo4dn6/xoX4wf7rwRU8cdeCDU4NP9VqaFlc7Ic=)
2: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl (hash: upY5BEg3GJeG9Yl5XTTLjZdg98P+dS0ScCefEXSb49E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:e7:dc:03:68:1d:14:d6:71:aa:5a:52:51:13:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc025a9d55bfd643757da4d499dce17201774d2
Validity
Not Before: Jun 7 09:00:40 2025 GMT
Not After : Jun 8 09:00:40 2025 GMT
Subject: CN=667755c58e2e4965a3ab738ca0806235b031a001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:f0:d0:25:13:32:20:48:ce:14:17:d3:18:
04:f4:8d:3e:a7:02:21:9c:8d:05:e1:97:0e:0a:bc:
3f:ec:f6:d4:ab:a1:b7:b2:50:52:f3:4d:f6:a1:94:
76:57:c9:c7:a4:a9:c8:70:aa:bd:b8:5d:46:a6:9e:
01:4d:2f:9c:c0:8a:02:dd:e6:ed:68:ae:ff:55:f7:
90:3d:09:5c:72:9a:f3:70:c5:5a:94:0f:da:3e:1f:
b2:f2:d0:69:72:41:10:e2:f3:83:bd:81:ab:4a:99:
df:eb:1b:92:58:27:78:5e:11:20:cb:c8:ff:ca:fd:
6f:5b:99:e7:ad:98:71:70:bf:3d:ca:00:b9:8c:18:
f0:47:aa:f9:b1:05:d1:58:b6:69:94:be:92:86:5b:
02:e6:17:46:6c:66:b0:91:61:30:9d:14:6b:77:56:
4b:ec:93:8b:b5:bc:a4:7a:e1:42:5a:d6:47:c7:19:
62:a7:f1:76:24:94:6f:be:20:e4:12:91:e8:c2:33:
61:96:bc:50:c8:94:dc:5d:7a:3d:08:71:c7:72:ab:
0c:5e:4c:d8:e5:95:ef:73:b5:39:57:b0:73:bd:17:
01:1f:c7:50:fe:55:24:1f:77:cb:15:43:d6:85:5e:
6c:fc:8f:64:8d:14:6a:c4:df:dc:f4:4a:77:93:32:
6d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:77:55:C5:8E:2E:49:65:A3:AB:73:8C:A0:80:62:35:B0:31:A0:01
X509v3 Authority Key Identifier:
keyid:CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b4:68:91:28:3f:42:bb:29:2a:00:7c:31:87:e1:02:41:09:
d1:53:49:77:cc:d4:2d:77:ed:db:75:58:6c:43:96:a5:a9:be:
37:c0:23:68:76:79:6d:60:c0:7a:ee:58:44:47:9c:76:88:4c:
92:ea:3a:d6:43:28:f8:6a:22:37:f5:11:cd:3f:34:c6:6e:de:
18:97:1a:63:ee:d9:61:b8:62:c2:8a:54:71:5e:df:33:6a:4f:
a1:b7:3e:19:98:4a:17:74:ca:9d:9f:c4:e0:66:08:00:f0:b4:
82:a0:91:4f:6e:9d:0a:b9:f9:de:19:f7:ec:1f:7c:cc:8a:72:
76:1b:6f:cf:29:a0:d2:90:5b:8f:c1:47:39:f4:61:82:cc:ed:
05:8c:33:86:94:7f:78:43:d7:99:5f:bf:26:53:23:c3:14:b7:
9a:6b:7c:24:10:a0:b2:f4:dc:9f:8a:42:d5:b1:d8:c1:b7:69:
09:7c:b6:86:3a:11:35:c4:e5:54:6f:f5:4c:a5:10:fe:e9:d4:
17:bb:ce:3a:1f:21:07:e5:d1:9a:42:0e:cc:6a:65:d4:f9:2b:
15:15:08:bb:09:56:af:f8:66:cf:50:bf:8d:49:7f:17:b4:fc:
0c:bc:dc:a3:92:1b:9c:b1:e9:8b:9e:2f:8b:0d:c0:75:91:3d:
a6:19:b1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:07 2025 by rpki-client