Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
File: byDBquA8J08ClCjuoKRCQgjU8-0.mft (raw, json)
Hash identifier: KgZxK7Z4XGQYe+sSbCXWivZckB/BX6/Hb5IZu/to6MM=
Subject key identifier: FD:EF:03:8E:A4:2A:F1:70:7D:F8:1D:80:46:59:0D:41:3A:2E:A8:B0
Authority key identifier: 6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
Certificate issuer: /CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Certificate serial: 019768F3078706930B9EC209DDF07096C8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 11:00:47 +0000
Manifest this update: Fri 13 Jun 2025 11:00:47 +0000
Manifest next update: Sat 14 Jun 2025 11:00:47 +0000
Files and hashes: 1: QR-XfIkw00mD51XnwCvsG-9T89w.roa (hash: a0XDBbD/tQURYMLpVooHaNMf9NXfcD/rGt0gapo+gwA=)
2: byDBquA8J08ClCjuoKRCQgjU8-0.crl (hash: gmk3lhXTUJvqIdhUI1snZ81Nm8rJ/3zrI1WmF4UPqpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:07:87:06:93:0b:9e:c2:09:dd:f0:70:96:c8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Validity
Not Before: Jun 13 11:00:47 2025 GMT
Not After : Jun 14 11:00:47 2025 GMT
Subject: CN=fdef038ea42af1707df81d8046590d413a2ea8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:89:01:39:1b:a6:73:45:d1:f3:49:ce:d6:
c5:a1:ec:f8:69:95:41:94:2c:c0:9b:3d:f8:08:f3:
c5:a1:d4:10:a1:91:a8:76:6a:8c:55:47:ac:90:19:
80:69:58:50:70:36:74:72:d8:b9:e3:5b:e0:a1:1f:
6e:72:8c:7c:17:78:29:2e:ab:93:ed:46:b6:fe:08:
a9:6c:85:40:dc:de:71:16:a7:53:07:8e:32:95:22:
5a:bb:e7:9d:11:47:24:84:18:2d:a5:85:58:65:09:
2e:ca:e9:23:85:6d:28:f1:56:d3:8d:f9:76:51:50:
e1:92:f8:aa:57:2f:5f:ea:32:3d:69:cf:8c:34:af:
13:4b:10:84:75:1d:ef:88:04:27:3e:eb:f9:92:1b:
71:89:c3:38:ba:6e:4b:61:cb:03:ac:14:e3:35:9e:
52:2a:cf:d0:8a:00:9a:7e:31:7d:9e:fa:08:03:fe:
97:33:14:0f:bb:0c:a7:0e:3b:bd:e0:53:e4:24:fa:
61:5c:6a:fb:94:a6:15:78:10:69:2b:30:b7:35:b2:
79:89:a2:36:98:be:20:de:88:76:b2:17:4e:91:8c:
64:06:25:e4:27:b9:a0:17:6b:77:01:7f:10:38:78:
05:9d:37:b3:dd:48:02:cb:1a:fd:c8:52:27:97:2b:
72:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EF:03:8E:A4:2A:F1:70:7D:F8:1D:80:46:59:0D:41:3A:2E:A8:B0
X509v3 Authority Key Identifier:
keyid:6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:48:60:d5:95:1d:4d:06:e0:d9:fc:97:61:0b:49:a9:dd:28:
86:c6:f1:97:c5:e8:0a:06:7b:b9:01:22:fd:25:4e:c0:38:c0:
e1:27:29:43:74:3b:96:e2:69:25:a5:bd:d4:e3:a6:dc:40:8e:
5f:08:8e:9a:24:28:e7:c5:6b:6c:fb:c0:af:05:1d:1a:4f:d6:
27:ad:a8:21:01:38:3a:9f:09:cf:87:4c:4b:72:85:9a:64:69:
71:39:67:88:3d:05:47:23:83:6d:db:d1:f0:79:4e:f2:fa:29:
93:c7:6b:87:1d:7c:37:e4:0d:58:ad:ec:0d:e8:cc:14:20:c1:
4f:e8:43:41:eb:c3:44:b1:ea:7a:ac:66:6d:22:d1:ad:2e:64:
25:71:ec:54:cf:f5:9d:1a:72:31:62:40:a0:cb:30:34:e0:fe:
60:25:16:4d:e9:c4:32:56:a9:56:d1:e1:52:0c:24:00:89:9f:
c8:f1:d6:97:c9:7f:15:6c:1b:84:b7:28:bf:ce:ce:3a:21:7e:
8d:4b:c6:ba:a8:46:60:4c:66:83:e4:39:0c:57:34:fa:3a:cb:
c0:51:73:74:3c:ca:4d:24:7f:24:6f:34:6e:23:23:0e:1d:df:
2f:60:17:80:10:36:25:ca:f6:5a:49:d6:4a:0a:3d:51:eb:78:
39:72:35:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:21:57 2025 by rpki-client