Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: YZzEOBTocQuBMX4g0VpbYa37lM1D4/pgu6/fB4c+o7k=
Subject key identifier: 5B:C6:1E:50:24:AB:D5:39:3A:F4:5D:CB:77:C7:46:DF:81:43:04:21
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 019779AFA318B001096CC1EF3CEE8C84D6BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 1257
Signing time: Mon 16 Jun 2025 17:00:42 +0000
Manifest this update: Mon 16 Jun 2025 17:00:42 +0000
Manifest next update: Tue 17 Jun 2025 17:00:42 +0000
Files and hashes: 1: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: 3BKVvsiG6qqG2DAFFxkmw48T3ersnI3jLSZfvUX+zBc=)
2: Xi7lkR0c05Etap_dSBWpiwrEM4M.roa (hash: AVQnmWgZkK9yLrT3rnvMnMOzEJkOrW4pUBp2ldNlySk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:a3:18:b0:01:09:6c:c1:ef:3c:ee:8c:84:d6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Jun 16 17:00:42 2025 GMT
Not After : Jun 17 17:00:42 2025 GMT
Subject: CN=5bc61e5024abd5393af45dcb77c746df81430421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:33:d7:69:aa:13:a7:a3:aa:51:fa:ba:41:
ef:99:ea:f8:00:49:1e:ef:9d:7e:c8:1d:37:26:cc:
e7:89:5c:3e:aa:68:2e:c2:21:e3:43:bd:49:98:da:
8a:ff:3c:64:69:e5:1f:3b:69:50:9c:a7:74:52:d0:
90:c7:20:0a:14:1b:10:af:27:fb:d9:7c:61:20:88:
cf:d8:d6:de:0f:08:d1:44:24:59:1b:c7:49:59:96:
23:5b:4e:99:8c:ba:c0:d0:6f:29:b9:93:57:3b:a6:
fc:9f:37:98:b2:79:d1:97:b0:08:4d:d4:a8:10:d1:
4e:af:da:73:76:fa:47:29:01:e5:33:90:9d:51:88:
fa:ed:22:62:f9:0f:94:ed:08:da:13:61:d6:fa:15:
82:06:3c:dd:71:70:10:f2:11:36:5b:3d:e9:6c:a4:
bf:57:22:7f:af:59:b4:18:60:14:1f:96:61:15:fb:
52:87:08:6f:4f:51:e6:65:83:4b:a7:1d:26:22:8b:
60:b5:95:a1:c8:2d:08:99:47:39:07:30:37:6d:a8:
a2:d5:b1:3d:5d:30:30:17:2c:e0:93:c7:23:a5:40:
9d:fb:ea:5b:77:91:72:b9:e3:78:7d:e0:fe:c3:c2:
40:0e:9d:33:96:37:18:7f:5c:15:02:20:e9:2f:97:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C6:1E:50:24:AB:D5:39:3A:F4:5D:CB:77:C7:46:DF:81:43:04:21
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fe:43:4c:4d:8d:76:0c:84:0f:44:b0:3c:1b:56:cb:ba:f9:
00:4e:7d:26:51:0f:72:00:6c:57:4d:24:df:ac:92:75:b7:e0:
b6:b6:c4:66:f5:de:2f:9f:2b:51:c5:63:c6:63:8a:c3:ef:7f:
c2:bc:cf:40:f2:1d:ce:3c:0f:77:a8:78:8e:c4:4f:3d:d8:c3:
8b:65:ea:d8:83:bc:78:db:e6:d4:5b:17:3d:22:52:07:c3:b3:
7f:04:f0:d4:18:ca:4e:f8:74:90:c8:2d:a7:8e:5a:13:c6:6f:
75:cb:da:e4:75:81:f0:f9:e8:0a:2d:ed:8d:c9:dd:d8:74:46:
d8:5f:83:00:9e:36:3e:71:d9:f5:27:98:61:9c:88:32:78:50:
50:27:16:07:69:ee:c0:85:fd:19:8c:45:e9:34:9e:dd:e9:0a:
b0:48:e3:9e:1f:92:b8:18:bf:51:17:8a:2a:ab:20:68:02:4a:
38:51:4f:f8:b9:db:90:0c:1f:f5:e3:f3:83:ea:5d:c3:a5:90:
a8:59:9c:15:b5:5a:0f:97:69:35:23:24:87:4b:4f:ac:25:f1:
55:09:84:cc:2c:9a:a0:73:31:63:1a:98:8f:d9:6a:aa:ff:0c:
d8:41:6f:36:4e:6f:91:51:08:c0:17:dd:81:ff:4e:67:20:43:
57:6f:0b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:47:33 2025 by rpki-client