Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: JI5z+R0ZaFhAEMp4CsvC0jTwvwmITY2qR57lLQTlEPY=
Subject key identifier: 22:B3:D7:9F:D9:0F:06:26:F5:96:0A:24:AB:86:32:78:3C:5B:3E:49
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 01974BFB157195743781CEDC62D2B5D3C298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1584
Signing time: Sat 07 Jun 2025 20:00:35 +0000
Manifest this update: Sat 07 Jun 2025 20:00:35 +0000
Manifest next update: Sun 08 Jun 2025 20:00:35 +0000
Files and hashes: 1: 5yD7BMGOx_QxkEbApVWEDtAyJTc.roa (hash: 7HUgyfi698gsVlFHfeKtkaA7m5SlO3zRzjiuZrYZF5I=)
2: RqGemHASq4a3yEktWB8WjU_L-0c.roa (hash: vaorPMqPLbSGClI0kn7HOZCELp91/Z7k6rtXVGnH8yc=)
3: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: CxH2ttRLw/Cuu7hEcrjDSkhOHp/7nF81j8qxn+My1Vo=)
4: ryABSBgMLByw-XFfZ_8SVzjoEH4.roa (hash: Qmf/YZ6xzpzD9CwzHR2N62ZnpRrAxDW7s9aRsiehW1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:15:71:95:74:37:81:ce:dc:62:d2:b5:d3:c2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Jun 7 20:00:35 2025 GMT
Not After : Jun 8 20:00:35 2025 GMT
Subject: CN=22b3d79fd90f0626f5960a24ab8632783c5b3e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:48:7e:01:f0:f8:a7:81:12:f1:7c:01:0d:
a2:45:8f:60:07:6c:a7:03:e2:77:b6:a9:7e:a1:17:
4a:07:3e:6f:fe:6d:d8:4b:73:61:1c:64:b5:40:86:
4c:b0:e5:6f:68:99:ef:cb:7e:da:79:f3:6a:4b:7b:
69:cf:d0:d5:6c:6a:93:3e:44:30:e1:17:a8:fc:d6:
37:72:29:6d:22:6c:ad:3d:6f:30:03:34:8e:f5:10:
06:55:8f:72:c0:4d:5d:97:a0:6e:b9:11:64:98:cd:
45:7c:85:bc:28:18:ef:fd:ae:80:05:17:4f:17:56:
9b:cf:de:e3:8f:c7:28:99:b2:10:f5:eb:b7:60:e7:
2d:ae:bd:aa:d6:99:01:08:cc:66:b7:54:0c:69:27:
b9:9b:85:71:8d:ce:68:74:54:3c:58:e9:fd:7c:09:
15:a5:b3:45:8b:82:b8:82:c4:d2:60:c6:56:e4:f8:
4d:f1:f8:47:f3:36:1d:08:7f:35:fc:0d:7a:1b:48:
2e:9d:6f:b5:f3:39:de:f0:83:19:45:c1:59:85:51:
cb:1c:ec:6c:fa:89:43:4a:b0:e2:70:51:1a:52:ef:
79:9b:a8:a3:3e:c3:2a:c4:93:05:c6:6f:5f:d1:e8:
bf:68:c8:c8:3f:88:c5:57:6a:48:7d:34:cd:d1:8a:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B3:D7:9F:D9:0F:06:26:F5:96:0A:24:AB:86:32:78:3C:5B:3E:49
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:01:86:1d:4c:de:3d:75:e4:00:99:c7:1c:98:c6:ed:4f:b2:
e6:5a:d9:c8:1a:7f:68:0a:35:72:a9:f6:cf:9e:30:d6:cc:83:
58:5f:96:7e:fc:8e:e7:5d:d2:79:33:5e:bf:d4:3e:81:87:ef:
db:ed:2e:f2:a2:b4:4e:ef:2f:12:4d:e5:7f:be:77:b9:6b:88:
cb:22:8f:d7:f4:12:2e:17:71:c0:f6:db:a1:6f:b0:e8:82:d3:
db:49:f4:93:b6:4c:c8:dc:f3:77:de:67:59:91:29:d7:0e:39:
25:9b:e7:41:80:68:3e:49:99:cf:16:8c:36:ae:72:30:0b:1f:
d8:92:c8:a5:ca:1e:cb:e7:c0:8d:e1:4c:c8:76:f3:25:af:74:
8f:88:1e:b3:65:ec:a6:bf:7b:d5:15:21:5d:14:9d:cf:b5:ba:
df:59:0f:f0:53:3a:3f:58:e9:53:9e:e7:6e:d4:48:f0:78:0e:
53:26:4c:ff:44:2d:6c:09:28:b5:6f:24:6d:31:83:88:e8:1b:
85:eb:3d:71:70:fa:59:55:00:82:7c:cf:70:0c:ff:22:de:48:
77:d9:16:aa:4a:9c:61:32:2f:52:9b:f7:b1:2d:f3:1e:f7:bd:
c1:f6:40:a8:f3:45:26:d2:a6:73:c4:6e:93:51:d0:e0:ea:71:
3c:a0:1f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:25:48 2025 by rpki-client