Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: ck4/Np4YjZQ62qVYfX2K2VLp39UDVxJ9tfZQvdECN7Y=
Subject key identifier: D0:13:34:DC:28:5B:C7:CA:B4:5E:EA:B0:6F:72:97:9F:1C:AA:BB:63
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 01974B8D3A9A31099CD9C2DD3D1AB62B6BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 18:00:36 +0000
Manifest this update: Sat 07 Jun 2025 18:00:36 +0000
Manifest next update: Sun 08 Jun 2025 18:00:36 +0000
Files and hashes: 1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=)
2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=)
3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: dvjSYANn7WevSbsz3PVLUjwJMe+Rl2GquH58xubMCVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:3a:9a:31:09:9c:d9:c2:dd:3d:1a:b6:2b:6b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Jun 7 18:00:36 2025 GMT
Not After : Jun 8 18:00:36 2025 GMT
Subject: CN=d01334dc285bc7cab45eeab06f72979f1caabb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:1e:e5:7c:67:40:48:d3:f0:85:13:1d:51:
86:4e:d1:b0:71:11:16:2c:c1:bc:20:32:c0:f0:3d:
8d:ce:be:33:ec:06:8a:f7:d1:f5:3c:91:d9:d1:be:
65:e3:b6:28:a2:62:21:f2:8c:b2:f1:21:09:07:2f:
28:1e:9b:e9:49:e3:0b:cd:2f:a8:68:3f:9d:16:3e:
9a:28:81:6f:1e:9d:a7:24:fa:c8:10:ec:bc:34:e9:
6d:7c:de:90:97:4f:49:9e:7b:11:26:2e:b8:a1:f3:
fe:69:4f:6d:47:22:8c:b3:ba:7b:28:61:e8:22:c9:
62:d6:c3:8c:a9:9d:7a:e7:33:ac:de:01:ad:88:33:
69:a4:34:f0:17:1f:f6:38:8d:36:fc:29:9c:78:64:
1a:15:fa:02:b6:0c:a2:4d:ec:a0:90:9f:c8:91:86:
50:8d:a1:6d:65:94:2c:f7:0f:8f:cd:8f:0a:71:dd:
9a:f4:0a:c6:2c:03:b7:cf:8b:e4:db:5c:cd:1a:fa:
19:53:cf:ec:f4:18:98:23:95:f4:85:14:c1:eb:fe:
45:c2:c7:8b:d3:6a:b7:ee:20:c3:d5:18:3b:b9:8e:
6a:3a:08:a8:96:b8:8b:13:4b:75:ec:5a:2c:5e:c5:
0f:90:3e:74:47:a2:4a:1a:ba:22:96:35:37:56:f9:
de:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:13:34:DC:28:5B:C7:CA:B4:5E:EA:B0:6F:72:97:9F:1C:AA:BB:63
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:16:2f:f4:6f:2e:5d:bb:89:6b:1c:d1:7e:63:0a:55:36:12:
d9:2a:95:da:9f:2a:b6:8e:9c:d0:16:5c:9f:83:79:09:6f:d2:
a8:bd:a6:45:f7:52:4c:3d:27:9d:c1:19:00:18:6c:23:2d:62:
de:14:6c:04:7d:c7:86:3f:f7:28:cd:74:51:6d:fa:08:e4:69:
1e:01:ce:b1:31:f1:3f:bd:23:9b:20:01:67:39:86:17:6d:a9:
f7:58:22:13:d6:ee:86:02:33:27:19:8e:7a:9b:51:6e:56:ab:
42:16:a6:1f:d6:73:5b:6c:70:c5:ab:a7:14:98:3d:c0:3a:7f:
d3:a9:2a:09:79:bb:8e:73:a2:61:83:d0:7f:e2:a1:c7:eb:bb:
c0:33:48:7f:c4:6f:ec:1f:00:e5:23:a9:89:90:fd:ba:71:1d:
8f:c9:9e:ba:39:13:83:a6:90:50:5f:11:4f:7d:d0:5c:47:08:
fe:5b:cb:69:3a:5e:33:38:9e:d3:00:92:17:dc:6c:8f:aa:9a:
5f:94:16:f5:1c:5b:8e:15:fc:67:cf:6a:22:74:a1:4f:6b:37:
cf:da:2b:89:6a:81:5b:ce:af:bb:61:22:0e:a9:02:d7:59:3b:
81:0c:55:55:8f:c3:04:3a:5b:eb:36:69:88:c5:cf:ba:5d:85:
18:b2:d9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:40:12 2025 by rpki-client