Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier: i16vNEJvjZpB5rPIccLs4qceNH6+z7EjOhUqkqQZ65A=
Subject key identifier: 28:94:57:EF:70:4A:90:CB:66:38:5C:AD:BE:E6:19:C0:43:7E:1F:DC
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial: 019748C3365A5FF96D6F5E707F47D3F47A14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 05:00:42 +0000
Manifest this update: Sat 07 Jun 2025 05:00:42 +0000
Manifest next update: Sun 08 Jun 2025 05:00:42 +0000
Files and hashes: 1: 5g1tjgsfll7LK-waAj9bTQ2h-3c.roa (hash: 8D1n33aMnmCgAozOd2zA5z3xSs5pmebBm8HLBHCuK3k=)
2: LH7w3vOlTcRmJHq2EtyJwGzFlEE.roa (hash: BdRuTFIKBfgw0BiPV5lECgqiOEd6ZtJOGCfbNoIAYBE=)
3: Q6nJt5OyB3yAAOcFFRG5qOehAok.roa (hash: KO9C76YDm/Okx701iaZdKEGFLB0y+hfe45N6CADpuPc=)
4: mSE5jFaDyQq229roQ5L8OUwLYf8.roa (hash: 9syYjhG++XjU5LLyMYmj6GtRt7K4tV+VTMTyeR8mVrI=)
5: mrSrlKE7xCslqlPTXvwVWDdiqIY.roa (hash: p/QlzvPV8hfJGKn1J+54dIx9OQB/pBF0YHBs+kQo1HM=)
6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: 8+KwAFMzXj4mbzIvxHK3mKLBr8orH6dWXVhHW5RRmW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:36:5a:5f:f9:6d:6f:5e:70:7f:47:d3:f4:7a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
Validity
Not Before: Jun 7 05:00:42 2025 GMT
Not After : Jun 8 05:00:42 2025 GMT
Subject: CN=289457ef704a90cb66385cadbee619c0437e1fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:30:e5:6e:58:6b:20:a2:69:54:17:87:ff:e3:
df:2b:95:df:f0:dc:79:bd:64:a7:e0:5c:28:c9:f0:
c7:89:0b:78:8a:c4:93:35:9f:2d:33:95:57:bf:83:
0c:92:26:05:ed:e9:c3:42:92:ee:fe:18:94:fb:59:
cc:40:d1:ee:a2:59:3b:95:c4:46:27:a6:a8:91:1e:
2e:26:eb:3b:27:15:d7:85:2f:ec:8e:73:31:72:ac:
e6:81:5e:85:79:96:11:b4:a2:69:4c:db:83:61:75:
d7:20:72:18:4f:4d:e3:fb:db:9b:c2:50:60:53:a2:
12:01:dc:7f:b6:d8:d3:52:e9:18:fa:c2:61:f4:d5:
f8:36:38:14:42:87:5b:2d:03:83:96:0e:9b:e4:f3:
2e:74:fd:0c:62:52:f1:18:69:2e:fd:14:d4:9d:af:
fe:19:05:94:a8:fc:cd:34:9c:eb:fd:82:b9:36:fe:
f0:7b:fd:0c:31:33:b0:fc:58:de:d0:a5:55:9f:f4:
d0:86:ce:8f:be:f2:9f:c5:ab:fc:5f:f7:7c:94:04:
7f:08:fd:2d:19:4f:34:9e:ca:f4:46:fc:82:2c:40:
4d:b3:cb:31:0b:61:12:7d:53:41:a9:3d:e9:eb:1f:
af:38:10:74:40:08:43:c2:c3:d4:55:d8:ec:0a:e5:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:94:57:EF:70:4A:90:CB:66:38:5C:AD:BE:E6:19:C0:43:7E:1F:DC
X509v3 Authority Key Identifier:
keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7c:2d:c9:41:e1:94:70:92:2e:c8:b8:4b:d7:50:70:b3:27:
54:91:9a:ce:bd:4f:a6:44:fa:da:49:b6:ed:90:f7:e6:53:b5:
33:fe:75:c5:f9:23:27:b7:f9:ef:be:43:db:d3:94:14:c0:45:
d3:9f:77:3e:1a:10:05:6c:0f:f5:25:d6:c0:cd:81:13:bf:dd:
ad:3b:14:e8:33:49:a7:19:9a:d9:bd:52:ef:89:b6:1c:9a:68:
0a:65:5e:c5:5f:0c:d5:b1:3a:f7:0f:86:d4:e7:35:5c:c3:d1:
82:02:ca:1e:5c:4d:56:b7:ea:18:91:4f:b4:ac:9f:f3:d7:da:
4b:fe:ac:13:9b:0b:d7:d5:68:f9:8d:7a:7c:63:7b:91:a4:8a:
2c:40:c4:20:ed:47:51:34:d4:32:42:17:ab:f7:a4:9a:75:72:
28:a4:e9:ad:29:1e:3d:cf:02:56:f2:f3:b7:2e:94:54:15:a0:
55:e0:78:6f:0f:75:f4:9b:c4:7b:67:81:6c:85:0c:a3:9b:72:
39:37:16:87:f5:32:c1:77:e3:bf:66:d6:13:6e:b5:b0:00:6a:
c4:ed:30:3b:7c:aa:24:ad:c5:97:4a:43:f6:da:21:82:ec:ca:
c7:35:d3:24:db:6a:fa:32:09:49:d0:65:72:50:c5:4d:b0:6f:
b1:a7:aa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:52:13 2025 by rpki-client