Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: 15CyKyzZupv24TCuhO3tdREZrVcVwC+/Hgy8EAP99Qk=
Subject key identifier: 75:29:95:DC:6E:6B:32:E2:8F:73:2B:67:7A:32:35:B6:D4:CD:6F:48
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 019749312D37A215F443F2CC1BC788BB252D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 07:00:48 +0000
Manifest this update: Sat 07 Jun 2025 07:00:48 +0000
Manifest next update: Sun 08 Jun 2025 07:00:48 +0000
Files and hashes: 1: MkBFGKrOUFJR_PtFzbIm_0Kt8Os.roa (hash: MWAGOdYdWLQQEq03DBK0C/7h2rvKgHmATNjHLt1oAQQ=)
2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: FHfaqkw82oPlTfyw4ZAEuRmhfLw7mZM3Ci0GQ2YOphw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:2d:37:a2:15:f4:43:f2:cc:1b:c7:88:bb:25:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Jun 7 07:00:48 2025 GMT
Not After : Jun 8 07:00:48 2025 GMT
Subject: CN=752995dc6e6b32e28f732b677a3235b6d4cd6f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bc:00:9a:a0:02:67:28:21:04:5f:30:71:52:
07:a5:85:ab:91:eb:0c:f9:1b:2e:c0:c6:69:ae:a7:
be:0a:2a:53:8b:7c:82:da:95:57:51:4b:ca:d5:ff:
63:0c:c7:4f:04:37:68:e5:84:50:f4:fa:37:c8:24:
2f:12:ce:21:65:57:25:f9:7e:e4:3c:91:c2:e6:77:
1a:27:1a:80:6a:02:70:67:ac:38:aa:8d:07:10:b4:
ab:b7:67:35:cb:db:ff:da:13:0b:dd:a6:63:d1:c9:
c8:4a:c9:61:7f:94:9d:b0:43:6c:30:b3:c1:f9:ae:
dd:86:83:f4:61:aa:b7:6b:a0:95:20:de:16:8a:fd:
b4:f8:d7:51:17:14:cd:b8:3b:ca:4a:e2:e4:77:3f:
27:c1:08:21:1f:3a:6c:18:69:1c:dd:92:c7:1c:d3:
ab:77:23:36:7a:9c:09:a2:cf:44:6b:a9:07:23:68:
15:62:14:57:5a:f2:4c:2c:60:73:3f:de:74:db:10:
17:5e:7f:b2:ad:f6:29:c1:bd:a3:b5:aa:54:ec:c3:
f5:00:0d:47:cd:7e:4b:df:b3:69:6e:e3:ef:8c:a9:
9d:aa:55:12:fc:36:26:ff:e6:59:79:74:c6:6d:19:
47:aa:33:86:8a:3b:5d:31:62:c1:22:13:59:0d:54:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:29:95:DC:6E:6B:32:E2:8F:73:2B:67:7A:32:35:B6:D4:CD:6F:48
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ed:e5:14:6e:af:84:47:a8:f7:d0:08:26:cf:8e:e8:fa:57:
37:26:28:a8:2b:0f:71:71:a4:ce:d9:db:0c:93:e9:24:37:80:
e5:53:05:d5:72:61:3d:3b:a9:71:dc:1d:a8:7e:3d:1e:37:46:
1b:3e:ab:54:f9:d1:29:b7:8a:30:6a:be:39:ac:41:45:cb:94:
5f:a0:20:94:43:0f:51:04:52:0d:1d:17:5c:06:8b:30:89:e0:
55:7f:b4:b2:75:48:71:06:90:05:00:87:5d:4d:5d:b1:c7:78:
e8:46:58:d9:17:60:e4:47:8e:3e:f5:6e:5a:63:68:9f:a6:c1:
56:7d:69:a5:b3:ad:a5:a7:b3:ac:eb:24:78:50:1b:f2:df:e3:
2c:41:64:24:1b:3f:7e:99:72:7e:29:14:c6:a3:9a:80:ac:d8:
12:2a:f4:50:51:07:71:a4:35:d1:29:47:aa:93:88:2f:96:67:
67:95:fc:aa:49:88:7c:7a:27:04:00:22:b4:fc:f0:a4:dd:11:
9d:ef:40:0e:60:db:7e:14:d9:7a:85:e8:51:a3:0f:2c:86:a1:
5a:05:24:4d:ba:c3:c1:ef:e0:0f:78:7c:63:5a:3d:7e:55:4e:
44:de:f7:b2:c1:c0:88:eb:da:63:11:bd:09:24:59:e9:d4:13:
be:d2:a6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:38:44 2025 by rpki-client