Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: at/9Xw0RXeqGzjxKDlbHQ/fwNfzZdE5+Nr+Miz//6rE=
Subject key identifier: CB:C9:E5:0C:5F:E0:09:99:04:BC:87:81:F4:9E:94:ED:F2:7A:44:CA
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 01974A43BB32ADEEF6B1278A354FA4025C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 12:00:42 +0000
Manifest this update: Sat 07 Jun 2025 12:00:42 +0000
Manifest next update: Sun 08 Jun 2025 12:00:42 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: XWReuhY8+19x4RXiliEITnBmdsW+1hEzFP2EBLTIikk=)
2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=)
3: 8mzSvC4v5Ni41t8FB8aiAfYjJcI.roa (hash: QyI7qjDJOZQBTsa2Xsr+TTNwnCK4F/pFTnriXbmvjf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:bb:32:ad:ee:f6:b1:27:8a:35:4f:a4:02:5c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Jun 7 12:00:42 2025 GMT
Not After : Jun 8 12:00:42 2025 GMT
Subject: CN=cbc9e50c5fe0099904bc8781f49e94edf27a44ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:94:c4:4b:78:80:77:8b:06:82:4a:a9:a8:
36:fb:ec:17:35:f0:8e:49:45:df:7e:55:05:5e:4b:
4e:df:e7:6e:02:3c:4b:e7:6e:bb:88:46:62:3d:82:
b4:b3:8d:bc:16:39:c0:ad:f2:d7:2a:85:e6:cc:da:
f9:fa:89:b1:e0:92:2f:70:12:05:15:51:c7:d6:77:
20:d7:f9:c7:49:cf:8d:15:f4:3f:b0:d9:29:66:c5:
8a:e6:05:e7:cf:28:4f:0e:c6:19:f3:9b:08:23:ae:
4a:c8:c5:35:5f:8c:70:83:2b:9c:aa:ea:91:07:b8:
40:2a:3e:5a:5c:d6:e2:68:ed:d5:c7:5b:5b:76:2d:
5f:cd:b1:67:4c:ab:10:f2:b4:3a:1d:62:9d:9d:92:
cb:5c:83:22:81:bf:1e:3b:58:8b:3a:ec:94:56:66:
45:61:ca:12:c7:a7:70:62:f6:97:72:91:d4:ca:fa:
74:4d:cd:dd:36:c3:7b:c5:a7:2c:c4:d4:7c:7f:cb:
5f:7b:72:13:1a:90:65:b0:c4:4c:45:2d:1f:96:84:
7d:c3:33:37:7d:90:f1:12:7f:01:10:9a:bc:e8:db:
91:7a:4a:36:26:aa:95:08:b6:04:8f:b8:60:c0:52:
67:b3:78:e5:17:0c:e5:94:3c:df:8c:c6:92:a6:b6:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C9:E5:0C:5F:E0:09:99:04:BC:87:81:F4:9E:94:ED:F2:7A:44:CA
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3e:8c:64:09:43:37:2c:b7:ac:26:24:a9:47:2e:4c:ae:51:
45:39:b5:9a:6e:2f:06:9a:2b:bc:bd:26:19:0d:a1:2f:80:e2:
69:38:b3:c6:ca:11:5e:31:cd:82:73:05:3d:55:ae:a3:2b:73:
c4:d3:78:fa:ce:ef:67:d4:6d:a4:32:23:6d:13:0d:7f:aa:0c:
cb:21:85:04:bb:dd:b2:98:43:22:4e:8c:19:d8:5e:ad:fd:7c:
07:45:df:1f:58:ab:46:6f:4a:20:2e:bf:86:30:e5:51:49:ca:
60:cf:b7:ad:80:bf:2d:e7:12:51:df:ff:15:9c:38:3e:fc:fd:
29:74:ea:03:f9:a2:2a:c5:39:45:08:1f:9d:30:54:b7:28:a7:
37:15:f7:27:60:3d:98:02:fa:48:fd:60:9e:d0:c4:0d:b5:2c:
de:3a:55:a6:4f:0f:bf:62:6f:8d:d0:9d:85:4d:eb:74:6c:23:
e9:67:bb:37:5d:83:e6:48:86:c4:54:c5:76:9f:81:a8:b1:2d:
5c:18:1b:5e:b5:78:c5:eb:87:29:f2:c2:18:d4:ff:fc:d3:85:
8b:1b:9a:6a:c2:3a:28:0f:65:08:1b:1e:e1:26:b8:94:85:2e:
dc:01:4d:04:45:17:0c:f2:77:fd:f4:93:1c:5c:f0:f6:39:d8:
b8:b9:71:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:54:33 2025 by rpki-client