Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
File: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft (raw, json)
Hash identifier: 2q+K/IFu4fJLAof6hhjdyjHs4SboTAP5rKtdZUnsI18=
Subject key identifier: 00:BB:32:4C:64:49:55:F2:9A:9C:B4:09:5F:1E:FB:72:F3:21:49:0D
Authority key identifier: FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
Certificate issuer: /CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Certificate serial: 019769CED5EEC771961C80329DEC29253FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 15:00:52 +0000
Manifest this update: Fri 13 Jun 2025 15:00:52 +0000
Manifest next update: Sat 14 Jun 2025 15:00:52 +0000
Files and hashes: 1: 0LP5ahEEWvnMaK30aMTVzU6uXkA.roa (hash: lB/VdYravFr8twO2oC/vGE6G8jo6civSr7gweO3k+0U=)
2: _Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl (hash: gc1foRRGBF3iRWuhZBmvxqbyZ1EdwwymH7TPfpxvFCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:d5:ee:c7:71:96:1c:80:32:9d:ec:29:25:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2af9060c1f42c628fcfb8f0781d7a5bc21fc02
Validity
Not Before: Jun 13 15:00:52 2025 GMT
Not After : Jun 14 15:00:52 2025 GMT
Subject: CN=00bb324c644955f29a9cb4095f1efb72f321490d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:cd:3d:2d:56:da:a3:cb:2d:1a:c6:84:eb:
c8:8e:1c:00:bc:e4:c0:fa:4b:f0:4d:37:34:8e:05:
4a:9a:49:4c:31:d9:44:9d:1a:b7:6a:5f:17:2d:28:
57:db:dd:69:8b:be:56:45:dd:28:08:34:57:3e:ac:
a8:b4:62:fc:a2:fa:7e:8d:5e:f5:52:f0:d3:fb:4e:
95:bb:ab:69:0b:a0:59:15:05:83:7e:00:39:16:3b:
f7:68:2d:05:fb:1c:31:92:50:cc:cc:2d:b2:b1:40:
c8:12:9a:89:1b:72:cd:23:71:1a:15:d2:2a:b1:4c:
6f:55:97:36:18:40:d5:7e:cb:ac:26:bf:5a:4c:c0:
cd:7e:04:cb:b0:4e:96:40:29:b6:27:af:58:00:9f:
d4:a3:a5:ee:73:39:d7:e9:25:55:18:33:17:7a:b4:
9c:b5:4a:a0:7e:43:78:e2:f5:cf:de:f5:8c:eb:10:
b2:d2:c4:87:82:c0:09:d3:8a:90:f5:bb:9c:47:ac:
5f:20:7d:c7:71:b4:8e:55:c7:7d:0e:7a:12:cf:9a:
6f:7d:d2:1e:a6:12:d9:56:a6:81:e8:49:f6:0c:22:
23:f5:c9:68:3a:03:83:cc:02:28:43:92:4e:15:db:
9d:81:e2:55:58:8d:db:00:c5:a5:12:64:18:37:89:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BB:32:4C:64:49:55:F2:9A:9C:B4:09:5F:1E:FB:72:F3:21:49:0D
X509v3 Authority Key Identifier:
keyid:FD:2A:F9:06:0C:1F:42:C6:28:FC:FB:8F:07:81:D7:A5:BC:21:FC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a98e4a-45aa-408c-b807-bfcf9a922a8b/1/_Sr5BgwfQsYo_PuPB4HXpbwh_AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5e:af:fe:36:d5:d7:39:96:e4:a5:79:5e:dd:61:ce:e3:fb:
48:f8:93:2f:ca:92:0d:79:b2:16:b3:b0:1b:c2:48:d7:de:c9:
3a:b4:fb:e1:a2:2e:6f:bb:82:85:9e:6e:a9:84:b2:e6:19:72:
be:17:1b:d1:8e:a2:14:2f:d9:2e:1a:8e:15:ef:51:b2:2d:f3:
f9:eb:2f:b7:a0:16:c7:d0:ff:fa:fe:af:94:ff:21:3b:6b:53:
68:4f:51:85:c6:f0:fe:16:b0:06:48:64:03:ac:d8:c7:fb:49:
86:50:4e:11:f8:23:c4:3d:b4:11:73:be:07:cc:a2:2c:ee:63:
13:50:84:54:b1:32:52:0e:e8:46:2c:8d:88:27:1f:ce:9d:49:
be:0f:30:65:b5:b5:79:0b:bd:af:17:4f:18:b1:97:59:5a:89:
fd:d4:dc:23:38:92:be:ec:0e:5b:bb:97:0a:72:12:39:26:0d:
36:e7:f6:97:d1:f4:de:ec:49:f4:6f:33:63:6d:e4:1f:bf:14:
ce:bf:92:2b:f2:33:58:8f:2b:e8:4b:2e:c3:6f:7b:df:32:47:
e1:ac:58:6f:f7:3d:8e:c4:0b:7c:07:0b:5d:16:04:f8:89:ca:
f9:43:ec:1b:93:f8:53:b5:42:4d:9e:ab:b5:a9:91:8d:65:89:
f7:bd:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:29 2025 by rpki-client