Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier: RGqbBXTfSvDWt1Fjh5YsON1dxL0w6UyXZ+BRLkzXVwo=
Subject key identifier: E4:70:96:E1:8E:CB:E8:0E:91:CD:B3:83:CE:A2:03:8E:2E:42:E4:66
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial: 019749D5E6097B9593CF3EEA0AE0A6F01CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 10:00:44 +0000
Manifest this update: Sat 07 Jun 2025 10:00:44 +0000
Manifest next update: Sun 08 Jun 2025 10:00:44 +0000
Files and hashes: 1: 3SOTukwSWrR1Nu1I7c8QHUHDj5Q.roa (hash: 4YWkgAQs57y3jWp09RgMoPwSBLEZe+2Hmh3qEftE0D8=)
2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: T5NCZRVtfzbHt37fQ2X6eciprVro1Vm0zJBhzD5QJvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:e6:09:7b:95:93:cf:3e:ea:0a:e0:a6:f0:1c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Validity
Not Before: Jun 7 10:00:44 2025 GMT
Not After : Jun 8 10:00:44 2025 GMT
Subject: CN=e47096e18ecbe80e91cdb383cea2038e2e42e466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:55:26:08:07:35:c0:10:0b:28:ed:6d:c8:d8:
18:7c:86:7f:ab:ed:39:2a:13:21:02:b1:a4:b9:3c:
f6:e4:1d:d8:96:47:5f:86:89:94:7d:30:69:6f:54:
b6:81:c2:fe:c8:47:d3:0e:cd:1f:a0:63:41:b0:25:
af:44:3d:f3:66:1b:8f:7f:6f:be:7b:0d:40:18:a3:
f4:51:1f:55:81:8a:19:bd:65:1d:ad:43:78:af:98:
e0:df:f2:66:32:98:ef:a5:88:32:2d:21:de:57:20:
ad:17:d0:27:7a:28:74:a7:aa:b5:20:31:da:39:fd:
71:44:f7:be:b7:3d:58:86:46:89:5d:19:21:64:59:
2b:83:78:8f:33:9a:e9:75:77:05:25:0a:f0:f9:fd:
9a:ef:6e:0d:14:be:ee:a2:b1:54:1f:60:2b:ef:c7:
52:90:1d:87:c0:00:91:81:f1:33:a1:e4:ea:47:1f:
52:ca:94:76:17:e8:fa:e4:23:e8:bc:b3:ab:95:35:
db:c5:ca:af:c0:c3:88:fb:41:8f:b6:81:46:b6:71:
15:9b:4f:3c:c7:68:3d:7c:89:5f:f2:0a:02:ce:70:
a0:be:02:02:b2:a4:c9:c1:e1:27:36:3b:7f:f6:d7:
a7:2a:72:49:bb:7f:69:8e:7b:04:01:2d:3c:05:22:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:70:96:E1:8E:CB:E8:0E:91:CD:B3:83:CE:A2:03:8E:2E:42:E4:66
X509v3 Authority Key Identifier:
keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:54:a7:af:2e:95:ac:f9:a8:02:7c:be:83:90:f8:b8:a3:47:
29:41:3e:2d:e6:b8:87:1a:98:c0:b3:2a:a8:4b:b0:ec:40:e2:
d3:7c:ff:3d:8c:4b:41:9e:4f:69:4f:50:29:4b:0b:8f:93:cc:
e3:17:dc:86:cd:6d:67:93:06:95:4f:20:c1:1a:93:f3:05:0b:
57:fa:3d:cd:80:01:35:55:75:4c:75:46:fb:2a:8f:57:9c:37:
fa:59:40:df:1c:86:2b:25:29:7a:4e:dc:df:13:b3:00:d5:d7:
28:21:55:b1:73:0f:fc:9a:72:89:87:2f:19:da:53:78:c3:75:
36:55:32:1b:e9:cd:47:3f:1b:a4:f5:ac:57:ef:a7:7c:c8:7f:
19:2b:e4:44:fc:20:8f:f6:89:d8:21:3f:15:ff:4d:94:6e:02:
3a:28:97:23:f0:59:9b:9d:19:4e:39:f3:f6:c1:cd:ed:e5:c4:
57:47:b6:5d:af:62:7c:0c:b9:b3:cb:65:cd:0f:25:6f:ad:4d:
68:e5:4d:99:e5:b6:b2:32:d5:eb:b3:8e:2f:33:0e:73:6a:a0:
e6:08:61:08:f2:c0:73:78:4d:8c:6f:82:c9:a9:6a:22:e9:94:
8d:cb:bb:ae:a6:6c:14:4f:76:23:3e:10:cb:9c:be:47:57:f8:
76:ff:d9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:09 2025 by rpki-client