Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
File: bIRL1iy_ta3M-03Bbsojy1yd3rY.mft (raw, json)
Hash identifier: u24FRiyFFiyKqqQK+NdZccnG1ZM6xmNJQhSYmSOEp3s=
Subject key identifier: A1:34:B3:7F:D0:9A:DB:DD:49:2D:96:99:1A:F7:B7:FF:4B:38:AE:C0
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial: 019742C1B249A98B5DCDFCF76EA5340325CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 01:01:19 +0000
Manifest this update: Fri 06 Jun 2025 01:01:19 +0000
Manifest next update: Sat 07 Jun 2025 01:01:19 +0000
Files and hashes: 1: bIRL1iy_ta3M-03Bbsojy1yd3rY.crl (hash: 3GhOVKpHCv2BL4Q127+YwX8KUwegmchweg/tbDxy+TE=)
2: oWKu84UqN6ZoGtWTr_LqmwizRJo.roa (hash: sXjtat/2eGC0qh1TKvXgZj2qcJea3TA909ZXBXblsyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:c1:b2:49:a9:8b:5d:cd:fc:f7:6e:a5:34:03:25:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Validity
Not Before: Jun 6 01:01:19 2025 GMT
Not After : Jun 7 01:01:19 2025 GMT
Subject: CN=a134b37fd09adbdd492d96991af7b7ff4b38aec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cd:44:8b:bb:f8:a9:73:8f:f7:c4:98:3f:a0:
7b:b0:ee:51:6c:37:d2:56:55:6a:3d:5a:0e:9d:5e:
bd:20:5c:78:30:3a:c7:7c:7a:b2:b5:c4:81:d8:bc:
ff:74:30:5e:16:69:dc:1c:03:05:11:b5:ac:e4:29:
bf:9d:b2:1f:27:cf:d5:e9:fc:14:1d:b0:cd:c4:08:
71:40:8d:6a:2a:9f:fc:f7:b9:c5:6d:8a:89:a5:21:
fa:83:45:cf:f9:82:ed:a7:ec:4c:bc:a8:53:8e:4c:
a5:f1:92:29:73:6b:03:d8:ac:32:71:73:38:07:06:
37:64:41:67:9e:ed:5d:c0:ab:4a:bc:2f:b0:36:36:
d6:35:56:39:a1:cf:ef:a0:e3:3e:be:1b:05:ab:51:
5a:91:e1:e4:88:6e:6c:e2:77:64:82:9b:f5:5d:e2:
39:54:ea:b0:99:d2:6e:b9:40:e7:44:6a:50:4c:4a:
c6:1e:c3:ad:c2:5e:ec:6e:5a:cc:4b:d8:19:b9:bd:
8c:37:6f:cb:ef:94:d7:69:c3:85:5a:a6:72:91:6c:
77:b8:9d:89:75:01:e5:53:d4:61:d1:2d:e5:b4:44:
39:c7:31:d5:07:7c:7f:16:1a:00:1a:fe:d6:98:ad:
34:40:77:1a:87:5e:02:a1:3f:55:33:e8:57:d5:f3:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:34:B3:7F:D0:9A:DB:DD:49:2D:96:99:1A:F7:B7:FF:4B:38:AE:C0
X509v3 Authority Key Identifier:
keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:64:2d:11:d6:fd:4a:df:20:c4:4c:6f:d7:d0:32:88:12:24:
5f:4f:60:6c:6e:3b:06:ac:14:05:c9:4e:64:e6:2a:b0:25:1b:
7b:36:94:4d:ef:4b:c9:be:03:ff:ea:68:03:f4:e8:e2:07:0b:
f2:e3:93:40:11:8d:3f:22:32:f7:33:46:ce:12:7d:2c:ac:fc:
44:63:17:80:69:da:18:0b:31:27:41:de:b2:46:31:1a:8b:cd:
02:2f:18:5e:e5:29:3c:4a:4f:7b:9b:05:49:05:26:bf:e4:c0:
a6:f6:ad:aa:b3:24:f5:e9:c3:2f:24:9e:eb:86:61:75:0f:1e:
a2:05:d5:ca:54:aa:f2:8f:cd:05:00:f2:de:d0:29:a6:2b:ed:
2c:92:a6:8f:70:00:39:f7:bf:cc:0c:49:de:58:8b:c5:3a:44:
96:54:14:90:f9:c4:2b:82:4f:46:89:f1:ff:4a:15:14:fb:71:
36:d8:06:94:bc:29:11:f1:69:bd:e4:78:cf:8a:82:57:a6:03:
69:7e:fe:6d:7a:14:b4:8e:90:7f:8b:cf:0f:16:3c:94:65:8e:
74:a5:68:98:fa:e2:b9:d0:81:37:9a:41:71:81:d5:79:29:66:
d3:b2:4d:d0:05:f1:e6:32:2c:f0:7b:8c:a5:5c:db:03:05:96:
df:41:63:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 09:23:09 2025 by rpki-client