Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier: 0kWzDCAf628agr2pOV1Mj9FLYHCfDrg7b1PaSVLJzO8=
Subject key identifier: E8:74:35:55:82:CB:FB:0A:DB:B7:FE:5A:44:D9:10:64:E6:D3:E6:04
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 0197469E7C66B8982E2EA2A14AB3B0521C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 19:01:21 +0000
Manifest this update: Fri 06 Jun 2025 19:01:21 +0000
Manifest next update: Sat 07 Jun 2025 19:01:21 +0000
Files and hashes: 1: 7MtM04j_v2k1Wph2OgnR4TG2Sv8.roa (hash: 4itzuX/fQ15qNQ7YFYgNHc2z9oC3AqKBZmDxx9ZMouE=)
2: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: VIje8z9oPdoPCDCC23flje9gxWUr9JkSdJaf3jDFsXs=)
3: kx9kPAQ67ntw1Xkq0X26moD-pwk.roa (hash: X9S/3YSjUgYxw6y4t3NQ27+L1d2kR0+Z9uu+3WHTnVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:7c:66:b8:98:2e:2e:a2:a1:4a:b3:b0:52:1c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: Jun 6 19:01:21 2025 GMT
Not After : Jun 7 19:01:21 2025 GMT
Subject: CN=e874355582cbfb0adbb7fe5a44d91064e6d3e604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:18:d5:22:ea:4c:66:c1:27:40:57:03:58:
38:1c:41:a2:54:89:43:04:74:20:dd:7a:36:2d:5f:
e5:aa:9e:42:b2:cd:5e:7b:a9:d9:47:a3:f7:7c:31:
24:09:74:62:be:73:87:51:bc:0b:31:3b:1e:41:d6:
47:f1:30:a0:37:8f:52:6c:93:a6:03:64:da:64:fa:
6f:b9:51:94:5b:2a:aa:a7:2a:89:fb:3a:67:fd:b4:
1f:35:11:09:95:90:24:9d:ba:d4:3e:db:05:f5:d2:
6a:bd:19:13:da:fd:fb:e5:e5:0d:1c:cb:e1:b7:7d:
ba:87:39:14:3a:eb:e9:c6:76:7b:18:09:3e:53:8c:
5e:3d:26:4f:e4:8f:cd:fd:1d:56:3f:dd:49:c1:bc:
71:24:5a:b3:26:dc:8b:27:f0:c3:18:8c:8f:f8:0e:
31:b5:d7:71:7a:50:0c:9f:e0:ff:1f:3b:db:68:40:
e8:57:e6:3a:79:ca:09:1f:3f:0e:d0:78:6b:9d:04:
24:b9:3d:31:1b:c2:8f:c9:b0:ee:39:8a:02:a2:38:
5c:ad:ac:9d:a0:0c:28:79:93:25:fa:5d:47:84:22:
8a:64:5d:04:09:16:4c:46:d3:0a:ce:75:e2:42:8e:
62:72:ac:87:63:0f:42:a9:d5:09:06:70:67:d0:2f:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:74:35:55:82:CB:FB:0A:DB:B7:FE:5A:44:D9:10:64:E6:D3:E6:04
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b1:b6:19:5b:d0:87:75:44:b6:91:f0:42:4f:93:18:a3:7b:
03:4b:7b:ce:17:cc:65:b6:27:db:14:e4:5d:2c:5f:1c:fd:da:
0c:d6:b6:37:58:e6:e4:28:42:8c:db:ee:78:b4:cd:a7:b4:fa:
66:3c:5b:5f:a2:38:19:af:6c:14:1e:83:f7:20:68:28:d8:ad:
ec:35:73:a6:9b:a4:9b:92:c3:5e:54:99:60:15:e6:80:84:29:
ba:4d:82:96:65:09:b3:98:e4:66:10:c2:d2:6f:5c:78:12:1b:
68:cf:68:5d:e1:f5:69:23:99:6e:a2:05:d0:06:69:03:ad:f4:
9c:9c:e0:ff:bc:f4:ad:7a:92:f9:2b:74:66:b1:65:e4:c7:b8:
a2:bc:75:5e:7d:ce:3f:29:08:37:22:e3:9a:e8:f7:eb:79:e9:
9d:82:be:86:17:c0:84:d1:29:58:0b:0b:a2:a7:fb:25:da:ea:
6b:2f:9d:29:42:e0:f5:32:ea:a6:06:28:53:a8:1a:24:83:7d:
b0:9d:8b:42:a5:f4:4b:f6:29:ca:11:b6:cd:45:f1:fe:e8:38:
4e:59:33:a0:98:85:1f:86:74:27:a1:7e:e9:62:6a:43:d5:19:
a7:2b:e4:60:c5:c5:f1:83:59:27:07:df:6a:f8:06:95:83:af:
61:07:4b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:23 2025 by rpki-client