Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File: g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier: 9BImqNztduBdKKYJ/N2FbLk0mF+a6gBD3TInosfaSw4=
Subject key identifier: A0:C7:A2:67:ED:01:0D:88:4C:B2:C5:41:78:42:A8:A3:FA:4E:D3:11
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 01974931686F91299E6B67F5B2EF02BCEBC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 07:01:04 +0000
Manifest this update: Sat 07 Jun 2025 07:01:04 +0000
Manifest next update: Sun 08 Jun 2025 07:01:04 +0000
Files and hashes: 1: fb6wEgaDbLPx8q9w1xJmiSz6jYA.roa (hash: cTH5l3quR1dZhmY8/pVYGOhtfcq0HdpSh+BT0OKf954=)
2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: aBktKeNs6hWSorMHizuTjc1M9SZaCuawt5KanzM2n6k=)
3: owvK-K4xt1xLcc7TBT_SQsn0CJs.roa (hash: i/ROe7RqOf5kAUxhkRxcQuX6NvNJ0cLz8fR53Bhsxmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:68:6f:91:29:9e:6b:67:f5:b2:ef:02:bc:eb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Jun 7 07:01:04 2025 GMT
Not After : Jun 8 07:01:04 2025 GMT
Subject: CN=a0c7a267ed010d884cb2c5417842a8a3fa4ed311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:fa:4b:1b:c1:2f:68:6e:1a:d1:ba:45:ed:
66:b0:80:9c:1d:47:d5:50:4e:c7:04:fc:93:28:5d:
36:47:a9:36:aa:de:99:75:ee:af:af:f8:5d:1f:b8:
5b:f1:28:7d:5e:87:b1:e9:81:25:22:9c:28:0d:3f:
45:95:bc:80:56:ef:92:86:f0:69:c5:ac:00:7d:b0:
f6:7a:19:86:28:5b:85:70:ba:a7:ae:66:f8:aa:52:
0a:03:7b:fd:a3:4c:e3:b3:7d:8e:ca:e3:5b:15:37:
39:2f:c8:fb:8b:0d:32:ed:90:d6:50:32:b2:b8:cb:
87:40:2e:8f:65:a3:eb:e3:87:ce:80:db:3e:9a:e0:
e5:1e:87:24:fa:f3:79:49:c8:f0:ea:92:d7:2c:90:
e2:d9:83:28:1d:c4:86:48:ea:0e:14:2d:cc:a3:b9:
7f:42:6a:99:6a:7e:b1:2f:a8:2a:2e:51:97:5d:bb:
3f:6a:c5:e2:db:e9:31:a8:fd:e1:8e:1e:1f:cb:19:
fe:1a:b4:9c:16:e4:e3:66:19:f6:f3:67:48:51:45:
55:5b:17:64:ca:83:a0:c5:c3:20:03:86:aa:50:73:
a3:36:9b:ed:ab:de:da:c9:cc:83:42:84:f4:4a:75:
af:91:34:46:03:ce:a1:7f:77:33:1a:12:07:8d:f1:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C7:A2:67:ED:01:0D:88:4C:B2:C5:41:78:42:A8:A3:FA:4E:D3:11
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:80:d7:cb:96:8f:f3:6d:cf:af:c5:78:b2:52:60:11:2b:52:
03:4e:3f:cf:e5:0b:29:a4:0c:9a:ba:b4:e9:13:b5:ec:1f:a4:
8d:3e:c4:c1:52:4e:3c:22:0e:ae:36:35:9a:35:9c:74:97:4d:
d7:ff:76:9c:df:fc:c3:98:3e:37:1d:43:22:31:27:ff:68:eb:
d2:df:70:04:5c:20:dc:03:55:f6:dd:47:6c:0c:75:cd:2e:80:
51:be:35:7a:04:96:d6:6d:68:48:97:e8:a7:17:8c:1b:2c:7b:
25:96:4d:ed:d3:2a:7b:7c:eb:dc:61:37:8a:eb:d1:6a:d9:b6:
86:e9:af:9f:65:25:b2:a3:fc:a9:0b:d6:f2:6c:7a:c0:3c:6c:
37:03:66:e7:e6:94:62:5f:a1:17:df:0e:95:d0:fd:bc:dd:a4:
d8:e6:af:9b:3b:31:d0:54:8f:fe:6c:85:b9:20:97:2a:0c:aa:
b9:71:6d:3e:e1:be:39:5b:ab:1e:ce:31:c4:c2:d6:61:c0:d6:
6c:bc:62:0a:06:48:97:d4:59:d8:79:be:cd:01:01:1c:98:72:
dc:64:3b:c5:30:d3:b0:eb:3c:cf:bb:21:b1:f4:e5:cc:c2:dd:
6c:91:5f:d0:1e:b9:cd:7e:a2:04:e5:b5:2a:ba:a6:77:b0:a4:
7d:d6:5f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:39:43 2025 by rpki-client