Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
File: koCqYVCQTiD4hKRjybZq5tQWG5s.mft (raw, json)
Hash identifier: Ib/cTLEJsZEG0Dvt+uFGSMsIWNYXP9YBsHkUlJD7EUw=
Subject key identifier: B4:C7:06:A5:FA:D5:4F:9E:58:EA:42:48:4A:3D:87:0E:C3:CB:11:E4
Authority key identifier: 92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
Certificate issuer: /CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Certificate serial: 0197470C1E08C760E073E12BE64F9DA45717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 21:01:05 +0000
Manifest this update: Fri 06 Jun 2025 21:01:05 +0000
Manifest next update: Sat 07 Jun 2025 21:01:05 +0000
Files and hashes: 1: 42CIzWao25DIQH989gjkrV7OjrY.roa (hash: J1v5sJHZZ0GbntLAyFYLEEa5CiZuVx8YZ/XB+JD5wdg=)
2: koCqYVCQTiD4hKRjybZq5tQWG5s.crl (hash: suMtE9INp9B9B1LrrRlxV7AkrZG3xK5ofrUzWz6rmLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:1e:08:c7:60:e0:73:e1:2b:e6:4f:9d:a4:57:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280aa6150904e20f884a463c9b66ae6d4161b9b
Validity
Not Before: Jun 6 21:01:05 2025 GMT
Not After : Jun 7 21:01:05 2025 GMT
Subject: CN=b4c706a5fad54f9e58ea42484a3d870ec3cb11e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:d6:29:c3:33:1a:fd:a1:cb:11:63:af:a9:
db:64:54:4b:73:1c:8d:f3:d6:b3:46:19:27:2f:5b:
7b:3d:ce:1f:3c:80:d4:e9:89:4d:75:1e:6a:93:bc:
41:6e:1e:41:4b:66:77:85:37:b0:e5:8f:2e:65:f5:
a1:93:74:29:da:86:20:de:a3:a9:f1:39:5c:2b:24:
37:83:a4:61:49:19:84:67:b9:e2:42:3a:fc:15:35:
67:3a:12:02:3f:00:70:10:3b:2d:9d:de:0a:8d:b7:
c2:3a:dc:05:64:cc:18:05:82:39:11:2c:26:0d:06:
0e:15:dd:8a:07:40:4c:22:b8:c1:e5:af:3b:ed:c6:
b0:9c:8e:ae:79:57:c9:3c:7c:4e:a3:04:0d:4e:d6:
ba:3a:d6:83:6d:ba:94:64:d7:33:65:71:9f:95:02:
bf:0d:54:19:1a:32:9e:38:44:3f:52:e6:8e:c9:10:
9e:c9:0a:9c:5b:56:02:91:07:e2:94:1b:9b:d0:fe:
2e:07:9c:35:18:59:24:f2:82:a3:85:54:81:b4:8e:
a2:40:ef:dc:7b:18:61:2f:52:d1:f3:25:cc:0c:87:
f6:4e:e7:69:b5:ff:7d:ae:3f:00:c3:94:e8:7f:4b:
9c:ca:82:ec:33:d4:b7:d3:19:8e:b7:59:01:a2:1f:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C7:06:A5:FA:D5:4F:9E:58:EA:42:48:4A:3D:87:0E:C3:CB:11:E4
X509v3 Authority Key Identifier:
keyid:92:80:AA:61:50:90:4E:20:F8:84:A4:63:C9:B6:6A:E6:D4:16:1B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koCqYVCQTiD4hKRjybZq5tQWG5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d08bbd-08b0-4a22-8b57-7e0171150cfb/1/koCqYVCQTiD4hKRjybZq5tQWG5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e5:f9:cb:01:a7:6f:bc:55:9d:5b:c9:97:8e:d2:35:66:e1:
85:28:33:47:98:45:1a:6c:51:80:90:a5:6c:e1:de:1d:ee:23:
1d:bc:94:d3:24:7e:63:1c:38:27:ab:02:b3:5a:29:71:60:10:
cb:14:26:b1:72:ce:65:fe:a2:16:1d:dc:24:ce:e9:0c:7a:bc:
4a:94:d6:3f:0c:22:e3:0f:15:2d:c1:84:dc:cd:91:d3:cf:ed:
fa:ad:48:94:6a:f3:68:fb:ed:22:17:d2:d1:40:ca:aa:e5:66:
e7:9b:3d:54:9b:e9:93:61:3a:b2:39:a3:9a:c5:66:9d:a7:f3:
85:89:8f:05:71:4f:10:59:f9:23:ca:6a:c7:04:c5:f8:d5:74:
e9:9d:fd:3a:6e:8e:93:1c:c4:19:f9:3f:88:03:ab:bc:5e:33:
c1:91:53:c0:81:32:ed:3c:06:8d:80:b0:ba:f0:b3:88:06:cc:
6c:1f:f9:55:45:07:74:98:9c:a4:af:9e:21:7a:e1:71:bd:ab:
72:1b:80:f6:88:81:97:2e:a7:37:94:40:57:b0:32:82:58:18:
81:84:f6:45:1f:96:4f:27:18:3a:38:da:b0:ca:76:c2:52:69:
f3:45:9d:16:f9:7a:e0:5a:72:02:3d:e9:29:59:ba:42:f2:55:
78:73:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:35 2025 by rpki-client