Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: +Rkk1eBvs4cvffWpNN8dZcxp5wCOJ5oLUyVpA04ZQRY=
Subject key identifier: A7:F3:BD:45:82:76:19:C6:A3:D7:A9:42:A1:C5:3A:87:1B:2F:8B:F3
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 01976885290FA37B1B36F49E2D0A1504E1D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 09:00:46 +0000
Manifest this update: Fri 13 Jun 2025 09:00:46 +0000
Manifest next update: Sat 14 Jun 2025 09:00:46 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: lfkFO3sd+R6Aklj+PnTUFnKoldoqhR9seUBs4tXB6W8=)
2: xXvr5N3cdjjVXwcVtqed053TqTM.roa (hash: RPXbgfGCQVhnjZtFi6ez4KE4+8jSRCf133mSXRnDHCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:29:0f:a3:7b:1b:36:f4:9e:2d:0a:15:04:e1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Jun 13 09:00:46 2025 GMT
Not After : Jun 14 09:00:46 2025 GMT
Subject: CN=a7f3bd45827619c6a3d7a942a1c53a871b2f8bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:36:8e:5c:08:c0:df:91:76:a2:b3:b2:d3:5a:
97:f7:37:9b:5d:8a:00:e7:0c:83:f4:fe:6b:8a:9b:
6d:6f:a1:a9:fc:12:7a:86:26:aa:f4:6b:eb:8c:f5:
8f:9e:28:a0:dc:50:29:39:2a:ff:70:d2:ec:08:37:
d4:96:0b:25:66:6d:6a:ad:22:42:9c:c5:ad:86:3f:
56:17:71:ab:29:93:7f:71:c0:d6:69:90:56:f5:48:
54:13:34:0a:d7:59:f5:1b:47:70:bd:8a:b1:a7:c2:
48:07:36:23:68:7a:ab:a0:46:4a:2d:9d:d6:5c:aa:
1b:75:18:1d:20:d4:77:7e:de:76:1a:af:cd:01:a0:
59:23:85:9e:8b:70:da:1c:48:24:83:ab:ad:e9:59:
0c:ff:d6:46:06:59:48:51:66:8b:37:5e:6c:85:7d:
c4:9f:30:cd:e7:35:ca:ab:09:71:d9:a2:91:54:41:
5f:e6:0b:99:2c:bd:93:54:5c:e7:c0:b7:4c:7d:14:
34:5a:08:31:0b:a1:78:ec:69:2f:ee:54:a8:88:be:
13:18:33:00:50:24:60:e0:33:88:dc:0f:d6:3d:0d:
e3:9a:c8:cd:9a:c1:51:cb:4a:3e:da:7a:03:0a:4b:
aa:3f:40:ed:82:0c:ff:37:3d:7f:a0:fb:ef:48:3c:
8b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F3:BD:45:82:76:19:C6:A3:D7:A9:42:A1:C5:3A:87:1B:2F:8B:F3
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:a5:d3:0a:ee:3d:dc:9a:f9:d1:54:02:5b:b9:05:7b:2a:5d:
da:c5:c1:13:c0:fe:bd:2d:d6:39:b5:0b:83:b3:e1:d7:5e:5c:
55:e7:15:00:71:c2:73:d5:08:3a:78:78:a8:c3:11:e4:9e:24:
f2:44:46:85:97:f1:5d:74:c7:40:54:17:37:93:ea:e1:c6:8d:
70:e5:d3:7f:dc:a0:59:68:30:47:45:98:a6:4d:e5:c9:84:ff:
58:00:ac:9d:83:9b:cd:47:12:51:e2:72:59:e9:9f:3a:09:3e:
2d:f7:a7:3a:e8:9d:9a:0c:8e:b1:1e:2c:dc:99:2b:0d:e8:93:
3d:1b:f9:3b:27:f1:ef:25:5f:fe:d8:93:7c:13:83:f2:b2:56:
05:34:ad:00:d2:f2:37:83:c3:d1:12:a4:92:c0:ad:5c:07:54:
79:94:f6:1b:7e:44:4c:a4:46:a0:47:32:66:a0:3f:ae:1f:25:
e0:bd:38:5d:7e:ff:d3:5c:10:49:c1:19:c5:76:57:62:97:07:
37:e4:3b:88:5c:ee:39:fd:e1:45:e5:3e:4b:8e:9b:45:a2:00:
95:9c:ba:7d:af:7c:a0:83:01:f0:2b:73:7a:e3:c9:00:1d:6e:
a3:cb:64:d7:7e:33:22:5d:de:68:d0:5a:76:e6:ba:75:b5:bd:
82:dd:27:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:38 2025 by rpki-client