Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
File: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft (raw, json)
Hash identifier: 8FqQy7mnIrg7axPSlLQp/iigis5u0dZi9WooP0sMJrM=
Subject key identifier: E8:AF:00:8D:64:D0:E3:8A:8D:78:65:7C:FC:8C:A0:2B:AF:1A:37:DB
Authority key identifier: AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
Certificate issuer: /CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Certificate serial: 01974F3323CC1043BA8AE3BFA71B255BC39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
Manifest number: 1471
Signing time: Sun 08 Jun 2025 11:00:40 +0000
Manifest this update: Sun 08 Jun 2025 11:00:40 +0000
Manifest next update: Mon 09 Jun 2025 11:00:40 +0000
Files and hashes: 1: NasWHXHMUrneYOPi_YEJHup68SM.roa (hash: vL3Q2Q0+7pnxdL6gd2R9r+dXrTLQulaJB+4Rjiarvgs=)
2: mQMuKDoHnr1LeGkTlxHsfTZ3PWQ.roa (hash: zwJx6M98s8at6u4x9fLfaXSOW6xFzqNRxDzug5GEBAw=)
3: ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl (hash: gN47+i49oIm5xPihPycJQNSsFEAjyCRhAQruwR+pCuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:23:cc:10:43:ba:8a:e3:bf:a7:1b:25:5b:c3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee2f8e53627adc27678063b93d3d9fd6ece9002
Validity
Not Before: Jun 8 11:00:40 2025 GMT
Not After : Jun 9 11:00:40 2025 GMT
Subject: CN=e8af008d64d0e38a8d78657cfc8ca02baf1a37db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:57:b2:e9:8f:3b:ae:16:a5:96:95:ad:95:d6:
1a:f7:82:c5:67:36:7e:d0:d8:55:2a:f2:c2:f5:9e:
c0:a8:c4:51:25:51:b2:b4:67:94:04:ef:d6:1f:2d:
c5:3d:03:57:2e:7d:26:0a:30:76:3f:d3:d0:a2:d7:
16:5d:c8:43:e8:9e:c9:47:52:a3:03:4c:70:97:f8:
71:45:71:66:14:08:fc:55:7f:29:ce:bf:88:b3:1c:
cb:2d:13:52:61:18:bc:d8:d6:31:96:d0:e8:64:18:
83:54:df:6e:46:55:c3:8e:48:c5:b9:7f:ef:91:7a:
ce:ab:03:e6:2a:a8:80:88:d4:51:8a:da:e6:e7:a6:
b2:a6:9c:75:df:25:80:90:2f:7e:2f:b4:07:82:5e:
8b:c8:70:a5:b0:86:71:10:a7:9f:33:8e:02:cd:4c:
3c:b8:3b:67:0f:25:73:1a:40:61:e7:d7:7d:10:55:
78:08:6b:d5:1c:80:11:e2:24:c5:bb:85:d5:20:ae:
05:ce:bd:73:9f:c4:3e:17:ba:33:c6:b0:72:09:63:
62:96:fd:bc:07:36:43:12:a8:27:31:8e:31:b3:07:
a8:81:22:34:5c:ee:96:fb:3e:ff:cb:cd:19:2c:57:
60:01:41:e4:78:32:d9:7f:69:bd:73:a3:ed:92:f7:
d0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AF:00:8D:64:D0:E3:8A:8D:78:65:7C:FC:8C:A0:2B:AF:1A:37:DB
X509v3 Authority Key Identifier:
keyid:AE:E2:F8:E5:36:27:AD:C2:76:78:06:3B:93:D3:D9:FD:6E:CE:90:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/193ed2-b774-42f0-aa3f-a465641a48fa/1/ruL45TYnrcJ2eAY7k9PZ_W7OkAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fd:89:64:48:f7:2c:b5:ca:7d:8f:6f:d8:22:d9:bb:6e:a7:
3d:2c:58:88:7d:e3:f2:70:f4:96:41:ff:0b:29:0b:d5:bd:08:
8d:52:af:34:96:80:6e:99:fc:c9:36:a5:66:75:70:88:13:29:
40:92:27:4f:b2:62:a6:44:5b:d9:90:7d:1f:38:09:41:33:59:
6d:c3:d3:51:e2:7e:95:4a:b8:4f:ec:bb:a2:56:1a:b4:2c:8a:
b9:93:18:02:1a:da:cc:39:44:19:63:56:15:b5:c6:6f:40:1a:
9f:4b:49:2f:22:51:0d:f6:70:94:ac:89:5d:1b:76:08:ad:dc:
ba:12:d7:a5:75:c9:8f:fa:30:c3:7f:69:5a:f6:98:7b:23:d5:
e1:56:7b:62:a5:33:c3:34:a8:be:cc:7e:5a:83:87:ae:88:c3:
1f:0d:4b:e4:ac:4b:99:84:7f:1a:2c:2c:9b:1c:63:7c:5d:c7:
21:35:99:68:51:eb:29:13:dd:ca:15:91:7e:d4:37:8a:5d:93:
22:78:63:4f:67:74:85:d5:84:4f:a8:b5:4e:d5:44:c2:09:2c:
95:0b:99:18:1c:a5:fe:e2:af:12:50:f1:8b:e0:c7:83:a8:ea:
ae:32:8d:d4:21:2a:b1:0d:f5:5e:91:85:35:ce:39:0c:e2:d6:
43:6c:b0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:43:49 2025 by rpki-client