Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: U+E141jLoOGKXVpI8ws+god0HmdEjB/NTeMxB8r/NlY=
Subject key identifier: 22:C8:24:AF:CB:BF:A2:C6:B8:D4:9D:C8:54:7F:13:7A:2D:DC:7C:C4
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019785B3BC54CBC366AAA125A9CC38A0ACF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 159D
Signing time: Thu 19 Jun 2025 01:00:38 +0000
Manifest this update: Thu 19 Jun 2025 01:00:38 +0000
Manifest next update: Fri 20 Jun 2025 01:00:38 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: 6pfsvrqx31NJI03mgUTX7n01I6J5gm/zC+OpawfVRVc=)
2: ghOgZScInzU-k80H-uXo6Z44fh4.roa (hash: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=)
3: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (hash: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:b3:bc:54:cb:c3:66:aa:a1:25:a9:cc:38:a0:ac:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Jun 19 01:00:38 2025 GMT
Not After : Jun 20 01:00:38 2025 GMT
Subject: CN=22c824afcbbfa2c6b8d49dc8547f137a2ddc7cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bb:d0:70:28:f5:07:34:6a:85:31:8d:0f:14:
88:6a:2b:b4:d1:dd:7f:a4:d2:72:6f:d0:7e:11:cb:
4a:7f:dc:fe:da:00:45:59:74:fa:02:b6:f0:80:0a:
99:1b:0a:91:61:e4:f9:65:c4:eb:f8:e0:e0:67:69:
6b:93:26:d6:e9:51:ae:3f:ad:41:22:4d:86:12:8c:
e5:99:72:48:00:1e:88:7a:3a:ec:93:42:cb:30:a8:
05:16:26:dc:62:f2:c6:fb:2f:e4:27:cb:e4:ef:dc:
85:8d:59:2f:a0:34:5b:0a:7c:d9:d4:61:e2:ef:4d:
e3:2a:31:d0:ea:ff:b1:62:0b:18:d9:13:66:d6:59:
b0:5a:73:15:8a:ad:2a:15:b8:a0:7e:5b:a6:a3:da:
e0:29:0c:6b:0d:dd:3f:2a:6b:60:a9:80:e3:69:71:
b7:13:fb:50:f3:e0:48:1a:2f:88:c5:f5:7a:8a:24:
c4:ec:0e:23:b5:e3:f3:7b:03:46:c1:35:29:2f:ba:
8c:64:a7:d3:c9:6b:76:00:0e:18:01:41:3e:4e:a1:
b3:39:05:1c:93:68:0e:42:f1:ab:10:a8:b8:33:84:
c7:24:d2:e8:3f:62:5b:8c:36:5e:72:be:d9:7a:4e:
8e:fe:62:0c:73:8b:ef:74:ba:f2:fe:b1:6e:4d:58:
4a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C8:24:AF:CB:BF:A2:C6:B8:D4:9D:C8:54:7F:13:7A:2D:DC:7C:C4
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:44:1c:9c:9a:16:fb:d9:9d:8b:bc:6d:3e:a8:87:45:dc:16:
d5:55:6d:36:78:ef:e4:db:54:0b:e8:0a:f5:7f:61:92:08:21:
f1:2c:09:e5:c5:a3:9b:d9:4e:dc:cd:b9:ef:c6:0f:5d:d4:02:
ac:75:54:d9:7f:92:56:8a:0e:31:a6:3f:ed:88:73:db:88:01:
d3:f7:e6:ca:b6:24:b3:8f:68:de:da:61:fb:ce:31:6c:d9:e7:
fe:82:29:45:33:2f:3f:ff:e8:9d:29:71:fb:7d:53:7d:41:b4:
c9:6a:3d:11:e8:93:f4:89:d7:1e:60:f3:45:a6:16:40:5d:10:
d0:67:38:d9:9f:62:d9:10:a2:e7:85:5a:3f:19:22:34:86:3e:
8b:61:0b:cf:72:64:fc:88:23:37:e2:a9:23:c8:19:25:9c:75:
76:2b:41:fd:f6:05:02:4e:33:47:ef:8c:a5:3d:74:8c:0b:e1:
f5:91:6a:a5:98:a0:7b:49:2a:d0:69:87:9b:b6:ba:fe:7a:ae:
c7:fa:50:d9:aa:37:c4:19:87:15:8b:68:70:10:d3:5f:cd:cc:
a1:85:58:91:05:41:0b:0e:20:4a:60:41:a9:7c:b1:38:be:bb:
0e:36:54:c6:2d:71:4c:91:8c:30:43:e9:15:cd:3b:cc:df:15:
98:4c:5a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 10:59:31 2025 by rpki-client