Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
File: M1etQG35k0tQSLX6Id4xRQuTb6k.mft (raw, json)
Hash identifier: KtcNAz2bBg06uSw/hat+5tSbA8ZjR+/XC7I/StBH3Hc=
Subject key identifier: 70:13:30:25:88:50:6B:63:CF:C4:8D:06:39:43:3C:03:D7:8E:2A:1F
Authority key identifier: 33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
Certificate issuer: /CN=3357ad406df9934b5048b5fa21de31450b936fa9
Certificate serial: 01974A7ADF1E87BBA9758683C13A1543DDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 13:00:55 +0000
Manifest this update: Sat 07 Jun 2025 13:00:55 +0000
Manifest next update: Sun 08 Jun 2025 13:00:55 +0000
Files and hashes: 1: M1etQG35k0tQSLX6Id4xRQuTb6k.crl (hash: Kx2iyknoGyWO63lus5I+ljswlhWqdpZRMJFQTIOSfsk=)
2: m9KlvtpTq4Ql79O_O_rULA1w-zY.roa (hash: +h4/STkGCXYgH/sIOVE5dquJUDdEfzAIpbql2yKK20U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:df:1e:87:bb:a9:75:86:83:c1:3a:15:43:dd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3357ad406df9934b5048b5fa21de31450b936fa9
Validity
Not Before: Jun 7 13:00:55 2025 GMT
Not After : Jun 8 13:00:55 2025 GMT
Subject: CN=7013302588506b63cfc48d0639433c03d78e2a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:81:3f:66:ec:5d:4d:7e:ec:b8:64:42:88:
ba:03:6b:a9:4f:69:4a:dc:49:0d:0d:f9:9c:12:05:
e8:80:54:25:fb:b7:82:07:fe:46:b4:de:5d:29:7e:
f6:7d:a5:04:3e:84:73:21:f6:dc:d2:a8:6e:11:24:
5a:1e:6c:e4:16:bb:33:16:7c:79:5d:2f:33:48:28:
48:89:5f:20:33:41:53:cd:3e:1c:90:b5:b4:24:8a:
ab:b2:7b:06:29:e2:a9:ec:92:73:d9:35:50:8e:e3:
19:5f:b6:f5:e2:ac:dc:32:b3:37:ae:37:08:5b:90:
b6:de:08:96:3f:fa:c1:79:63:f7:97:c5:fa:b9:e8:
db:61:a3:f5:08:66:43:70:b9:b0:ff:cb:bb:b0:aa:
03:ac:5b:8c:61:db:9f:d3:08:8e:64:81:98:f0:cd:
45:41:a2:62:dc:71:06:ad:fb:73:a8:3a:fe:ee:84:
d2:3d:7d:eb:9b:0b:38:08:fc:95:5d:e2:aa:11:d2:
70:26:66:8f:5e:fd:42:dc:0e:fd:20:ef:a2:07:b3:
d1:40:f5:44:61:80:8c:ca:ae:be:2a:11:33:1a:27:
7a:f8:5a:fe:8b:58:7a:d1:9f:0c:4c:dd:d2:61:f8:
f0:f2:0c:02:4d:ee:19:ec:c0:6d:fd:23:e2:10:85:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:13:30:25:88:50:6B:63:CF:C4:8D:06:39:43:3C:03:D7:8E:2A:1F
X509v3 Authority Key Identifier:
keyid:33:57:AD:40:6D:F9:93:4B:50:48:B5:FA:21:DE:31:45:0B:93:6F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1etQG35k0tQSLX6Id4xRQuTb6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c6d4ec-a072-4f3e-acda-0cf6384a5610/1/M1etQG35k0tQSLX6Id4xRQuTb6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:17:b8:ab:82:24:8a:11:49:b0:91:43:d0:7c:ff:ea:00:8f:
22:3e:81:3d:71:41:73:d0:3e:a3:0e:b3:e3:b1:89:55:e0:a1:
da:31:d9:a9:7c:ca:9e:41:78:ba:fe:82:8a:85:cb:39:58:23:
33:87:5e:f9:51:eb:a0:45:97:cf:32:31:96:e5:ea:4d:c1:6f:
fa:0c:a4:0c:54:3c:23:a3:14:d1:9f:6f:20:c2:90:58:d4:15:
1b:7a:35:fb:92:fb:69:e8:fe:96:9a:ee:31:4b:7b:a1:4f:f8:
17:dd:06:a5:9d:84:3c:f1:0f:27:ae:bd:fb:70:b3:2e:40:18:
7e:44:9f:32:57:47:bd:f8:10:69:85:08:aa:97:9e:dc:46:cb:
bd:05:a7:1f:01:42:37:1e:6b:82:e5:33:7d:d3:37:b8:90:60:
e9:3e:63:b8:a3:d5:a2:ed:68:4a:1d:68:f4:57:9b:7b:91:e3:
d8:36:ee:63:01:2c:a3:af:50:da:eb:29:3e:13:81:ba:92:7b:
d2:52:91:42:12:dc:ae:13:76:8c:ce:d3:d6:1c:01:aa:4a:a2:
5f:bf:a6:2b:c4:9e:5b:b0:8c:3e:c8:4f:95:b9:ae:a9:a6:6e:
e7:4b:11:c7:3d:f4:38:05:a5:ba:df:eb:e6:6e:bf:62:78:2f:
3c:45:94:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:36 2025 by rpki-client