Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier: +u7LWkjS5JM5z9XtUU279dsWvTa4MOJ6/8RXjgsgkgo=
Subject key identifier: 54:F8:8D:74:B6:D0:3F:F9:BA:79:90:E5:FB:30:97:89:3A:AD:C9:DB
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 0197782EDC921D9FC5CC2FF48F7BADC1D9A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number: 159F
Signing time: Mon 16 Jun 2025 10:00:26 +0000
Manifest this update: Mon 16 Jun 2025 10:00:26 +0000
Manifest next update: Tue 17 Jun 2025 10:00:26 +0000
Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: CnN7euge8tb+1caoNhtLjpLyeM7ATNk5JEAcwtAUUzs=)
2: JjxG5JBV-4sLSO9ydbLM49BAtzE.roa (hash: cqElNxOa+f907x34fYoberfp0CD4VgTc1FzaMtoENtc=)
3: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (hash: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2e:dc:92:1d:9f:c5:cc:2f:f4:8f:7b:ad:c1:d9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Jun 16 10:00:26 2025 GMT
Not After : Jun 17 10:00:26 2025 GMT
Subject: CN=54f88d74b6d03ff9ba7990e5fb3097893aadc9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:21:34:f4:5b:ce:4c:f1:95:b7:ff:4c:82:
eb:1c:e6:06:37:bd:2d:a8:c4:7e:48:97:64:86:cc:
2e:cb:2e:82:f2:25:33:50:bf:d0:b6:be:c7:47:d3:
4c:9a:f8:85:76:3f:0f:45:fe:9d:36:6d:18:66:5e:
2c:65:30:96:70:d6:65:0f:39:c8:b0:b8:f3:1b:fb:
99:56:53:9c:c3:c6:be:15:f8:cf:2f:cb:92:fd:3e:
40:56:c3:75:ab:f3:26:10:7a:5d:69:72:2b:86:2e:
6a:fc:7a:3a:43:0e:3d:0e:f4:46:de:e7:e8:f4:47:
a6:db:d6:4e:b3:dd:ce:c9:52:99:00:60:9f:99:4b:
d1:8f:32:24:6c:6c:43:25:98:8a:f9:70:7d:80:9c:
3c:55:46:6c:67:08:9d:6e:c8:78:b8:92:84:fa:24:
19:a6:b1:dd:9f:4b:68:35:cd:1d:34:32:5f:40:e6:
1e:c4:0c:47:13:dd:14:7a:1f:98:5d:d9:c4:f0:ea:
84:ca:f0:89:b6:50:91:7d:c0:24:63:d1:07:92:d4:
78:af:92:12:a8:05:9d:3c:8e:61:4c:43:5c:92:42:
8f:20:06:be:97:ce:84:17:e1:0f:da:d4:fa:f6:18:
24:63:51:54:3f:85:c5:7a:cb:f1:08:8b:7e:55:9d:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F8:8D:74:B6:D0:3F:F9:BA:79:90:E5:FB:30:97:89:3A:AD:C9:DB
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c7:8a:86:da:17:1f:57:d7:9d:91:dd:88:18:20:a2:7d:a8:
1a:8e:a0:40:80:1b:ad:35:20:77:62:bd:52:9e:c0:50:0b:97:
6b:40:6d:1d:41:14:66:4b:ae:09:fa:57:90:db:a3:51:94:88:
4d:0f:c0:c9:67:34:91:ac:10:25:40:a4:fd:75:8f:1e:57:b0:
c0:03:33:68:a8:31:7e:06:06:33:89:7f:7a:9a:0a:63:57:12:
51:37:b5:c9:c5:b9:b5:94:cd:f2:bc:98:db:df:95:09:1b:a6:
b5:38:d7:90:bc:db:e8:8f:7e:b2:3a:f1:58:d7:2a:05:f0:ff:
86:c6:ea:54:7f:ab:85:d4:e3:a7:10:a8:c0:27:ea:10:d7:11:
8a:3b:0c:02:15:b1:d0:f5:c8:68:2b:d6:04:84:dc:f5:05:7a:
33:65:86:98:5d:11:8f:23:a1:df:db:ea:17:38:6b:d4:8e:04:
c5:df:0f:02:ce:8e:44:92:df:3d:0e:79:86:79:f7:84:00:bd:
63:98:65:df:ef:35:11:14:18:9e:35:34:4c:66:a7:5d:08:4b:
94:d8:ce:cd:38:e1:06:12:34:bb:79:66:57:80:cc:95:db:a2:
fe:22:cc:d7:0a:b1:cb:6f:dc:60:07:f2:ee:26:96:0b:c1:04:
85:60:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:33:26 2025 by rpki-client