Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: OaPLp8q1Sz3E+BG+FcTlN3QzwQdZ2GkF0VfG2X4R9js=
Subject key identifier: 2A:6F:A7:16:BC:5C:C9:E5:17:19:99:84:8C:C6:C6:93:F3:B5:4E:6E
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 01974AE856B348DC46BD490A2A03E705EFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 15:00:29 +0000
Manifest this update: Sat 07 Jun 2025 15:00:29 +0000
Manifest next update: Sun 08 Jun 2025 15:00:29 +0000
Files and hashes: 1: 1-OVd2lrgp3V2rXsCVF3GooeWhcE.roa (hash: KipoSrKFnoRi0oHmHkcFIq8GeOt3ELUBmEPs2x8pv/4=)
2: KR7i1VGMfp6wOUHzM68qa6NoxyE.roa (hash: ndyzcu48CDHqz3NgyXeDet5mZyI1DmpInGav6pQo5SI=)
3: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: B/RB/xh1J2pWeZQThFFuRQ0RfyNM8DudwyrEPq+PfJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:56:b3:48:dc:46:bd:49:0a:2a:03:e7:05:ef:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Jun 7 15:00:29 2025 GMT
Not After : Jun 8 15:00:29 2025 GMT
Subject: CN=2a6fa716bc5cc9e5171999848cc6c693f3b54e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:97:b9:96:5a:bb:46:6d:5f:73:27:8e:42:
19:fd:cd:97:cd:05:10:a7:b8:1a:8b:8b:19:06:d6:
d6:ce:2c:ea:e6:94:a6:e0:f3:1e:fa:ab:b8:02:be:
d4:ba:26:44:52:e3:4c:d1:da:36:99:11:50:40:27:
06:20:b8:4c:64:ab:d4:63:f4:8e:02:45:74:b3:ed:
30:b2:2e:f0:72:0d:ba:cf:3d:6c:75:88:55:85:8a:
64:1a:b0:d8:6c:9e:3f:ab:ec:17:87:30:d8:6f:36:
cc:04:68:d2:4c:65:79:1c:f8:df:f7:fc:bd:14:32:
a7:0a:40:02:fd:02:1c:d2:52:e1:18:3f:28:a2:58:
5e:4e:7e:90:69:e6:94:24:dc:0d:b9:45:4d:59:05:
57:26:37:a6:12:b7:e3:d8:cd:9d:e9:93:55:9f:0a:
17:e7:cd:16:a8:ce:fa:fc:b6:69:c1:77:a5:7c:24:
41:71:54:c4:cc:cb:92:1d:18:c0:a5:e9:c5:8a:ca:
88:36:5a:f9:d0:25:21:ff:47:a2:94:26:01:57:c9:
73:c7:6d:9f:ca:30:ae:f9:12:4c:23:95:e7:02:c5:
12:3c:93:7b:da:92:49:e7:a1:40:fb:08:cd:b6:be:
07:36:08:b9:19:5e:dd:a0:7d:48:c1:5a:78:18:54:
55:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6F:A7:16:BC:5C:C9:E5:17:19:99:84:8C:C6:C6:93:F3:B5:4E:6E
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:68:48:b2:77:ca:1b:24:32:17:a4:2f:42:df:bc:f7:68:17:
bd:11:ec:5e:90:c8:7e:90:38:c2:71:a3:9d:23:b2:27:80:f7:
20:6d:9b:d4:13:63:00:8a:97:7a:4d:05:f4:36:43:f0:91:14:
c1:78:47:28:32:bf:6a:73:07:af:bc:03:41:3e:49:e3:f8:c9:
6b:84:d6:f2:8f:05:2b:f8:c5:44:4f:28:8f:72:71:16:3a:c1:
d8:33:33:99:4d:4d:c9:84:00:b0:da:09:55:d8:0c:c3:93:da:
c9:06:69:c9:89:1d:0e:05:47:e2:7b:6f:44:db:0b:ca:46:25:
84:d4:7f:b4:74:ba:85:a4:e4:62:8c:e1:3a:72:36:73:5e:0d:
b1:f6:f2:a9:2f:78:d7:bd:b9:c3:2e:ed:1d:47:d9:f0:12:4f:
55:be:d7:ad:ba:8d:0d:80:ce:95:d7:9a:f3:48:0e:e0:50:a8:
f5:8d:9b:49:10:3a:a4:62:fc:11:82:ae:87:6c:aa:79:43:bb:
14:77:58:6b:59:d6:82:c8:35:9e:0f:fe:ce:6a:3a:30:b3:fe:
17:80:2c:e0:1e:16:df:5f:21:ee:7a:fb:df:65:77:fd:fd:2e:
ef:78:eb:41:f7:f2:d2:5b:82:68:ac:7a:e8:db:c0:92:d5:de:
54:44:3c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:47:11 2025 by rpki-client