Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
File: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft (raw, json)
Hash identifier: YtWFzBkNmLTfoLZz1CYDhA+G7R0Wepvi0T6qdkaxLkg=
Subject key identifier: BF:4C:C2:59:D9:5F:B3:C1:72:5D:A0:D1:1F:D1:35:63:FF:F6:20:84
Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
Certificate issuer: /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Certificate serial: 019769CEC48F2920F9BF66A1906314C245BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 15:00:47 +0000
Manifest this update: Fri 13 Jun 2025 15:00:47 +0000
Manifest next update: Sat 14 Jun 2025 15:00:47 +0000
Files and hashes: 1: 77oIKxIggLvEt0p9QsxiJYQB5eM.roa (hash: Hp3aUI6v9ziixBPGAkVrry5mapxw8BKESYHxJGTP/MA=)
2: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl (hash: 6PyXDhKhqsnYlqzCOgoams4Seeh0+NZNyMzYxzDR3FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:c4:8f:29:20:f9:bf:66:a1:90:63:14:c2:45:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Validity
Not Before: Jun 13 15:00:47 2025 GMT
Not After : Jun 14 15:00:47 2025 GMT
Subject: CN=bf4cc259d95fb3c1725da0d11fd13563fff62084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fd:f4:a1:f5:19:01:5c:6b:e1:35:f3:cc:75:
0d:c8:e2:09:74:de:e8:23:96:af:95:d8:53:4b:c6:
ec:17:fe:e2:1d:ae:6a:57:af:8b:7d:e4:9d:08:65:
8b:c0:77:3a:ae:6e:36:d5:4e:ec:ce:b9:72:d6:5d:
55:47:6e:ca:16:da:5f:2e:1f:b2:38:34:56:34:fa:
4f:94:d5:14:0b:2f:fe:20:12:d1:fc:df:11:27:19:
c0:2b:89:32:06:50:62:a6:ac:8e:d6:68:46:e0:fb:
fc:40:d0:4d:8a:bb:2c:c6:ea:79:9a:03:03:70:e1:
5f:57:34:f1:86:c5:a9:ab:b5:a8:c6:38:d9:d3:ed:
9d:1a:56:fb:7a:7e:96:40:12:7c:e9:ac:1d:3e:11:
3c:29:a3:7b:d8:00:ab:a0:12:e6:6a:2b:8e:af:41:
27:35:c9:c2:8e:cf:dd:56:0a:99:e0:1c:d4:c8:21:
09:f1:0b:64:bf:b9:f5:3e:39:99:e8:6e:6b:67:77:
f2:3c:f9:ee:e1:b1:2f:78:e4:0c:e1:99:f2:73:e9:
b2:90:b7:fb:61:a6:20:82:ba:f0:8e:0f:aa:31:6b:
75:0d:2d:ee:02:97:a9:d8:44:36:0e:a7:f5:3b:d1:
b9:12:b3:e3:f2:47:da:09:e7:40:83:80:33:8b:73:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4C:C2:59:D9:5F:B3:C1:72:5D:A0:D1:1F:D1:35:63:FF:F6:20:84
X509v3 Authority Key Identifier:
keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:98:dd:6d:c9:25:e5:3d:40:e8:c4:0c:ff:6c:05:cf:47:74:
1a:8c:58:a9:f3:77:f7:60:9b:88:d0:77:46:f0:07:51:dd:95:
8e:96:54:36:c3:1f:5d:44:79:22:94:6a:9f:02:e8:37:61:a5:
ae:ca:13:12:cd:cc:5c:e3:1b:b1:ee:63:f1:90:a5:11:69:16:
a9:03:1e:a5:83:9a:93:f5:63:76:13:9b:78:11:ab:71:d0:52:
1a:c8:7d:b7:2f:a3:5a:0d:c0:a1:d0:c4:68:0d:fb:69:0b:65:
05:d7:26:4d:8d:2c:86:72:0f:3c:67:5b:0a:8f:2b:e1:e8:7a:
bf:2f:46:46:55:2f:44:f7:bd:ba:f8:7f:94:d8:30:81:d3:6b:
93:8f:92:1a:79:7f:aa:8d:db:8b:c8:c3:12:bd:35:c7:91:70:
db:9d:98:fb:46:d2:96:10:d1:d8:75:cd:7b:a1:62:f6:c4:42:
87:e8:a4:0e:57:e7:7a:3b:ed:ec:b9:71:f4:9b:a6:72:8b:2a:
ca:72:c3:bd:95:ee:a3:b2:d4:08:5d:a4:fc:6e:b9:10:c5:10:
cf:a9:4d:3e:4e:ea:50:05:09:a6:b7:6e:bd:ee:ca:74:b3:fe:
5a:c8:6e:37:a3:20:6e:92:50:51:5b:4c:0b:0a:de:30:fc:a8:
a6:40:45:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:01:40 2025 by rpki-client