Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
File: Cl9hKRQr0Kncad_UAkif8l9bPvI.mft (raw, json)
Hash identifier: YrfZ8Kr9JHSPrbXo2GfuTth2rIbFOBPv9rmEfL658M0=
Subject key identifier: 11:5F:8D:6C:16:CF:99:2C:E9:E6:A7:E4:9D:82:2D:45:12:F8:87:F1
Authority key identifier: 0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
Certificate issuer: /CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Certificate serial: 01976D067FD378A856537E634EFA92344C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 06:00:31 +0000
Manifest this update: Sat 14 Jun 2025 06:00:31 +0000
Manifest next update: Sun 15 Jun 2025 06:00:31 +0000
Files and hashes: 1: Cl9hKRQr0Kncad_UAkif8l9bPvI.crl (hash: PqD9h7ab07MvBcf2PNuxvuXBGwm/6LAiWnGgn8nFUS0=)
2: CuosGZsAQa_atOUfAfS4SUVwI3o.roa (hash: Ah8ug2ZnqIvKy7wR+jjWOatqPL6Ooi9wmYyJPajHlvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:7f:d3:78:a8:56:53:7e:63:4e:fa:92:34:4c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5f6129142bd0a9dc69dfd402489ff25f5b3ef2
Validity
Not Before: Jun 14 06:00:31 2025 GMT
Not After : Jun 15 06:00:31 2025 GMT
Subject: CN=115f8d6c16cf992ce9e6a7e49d822d4512f887f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e0:5b:8f:a0:f3:9b:f4:50:d8:88:47:8e:25:
4c:2f:75:88:ad:ae:16:08:c8:90:f2:9d:8e:ca:82:
6a:cc:63:45:80:23:d0:72:6a:8e:73:97:01:df:d1:
c2:a1:ba:90:8e:0e:1b:4e:38:f1:00:a3:b1:1c:53:
7a:c6:67:90:cf:91:8b:29:8c:17:1f:cb:90:e2:38:
17:f1:80:41:9e:b2:b7:9e:37:17:69:a0:c9:38:a9:
a4:82:dc:3c:7c:5c:5a:b5:e6:a2:5e:3d:dd:fa:be:
57:32:2b:4b:3c:2a:bd:fd:66:b3:13:ed:fe:d6:99:
3c:0a:54:7f:f1:71:8b:76:c9:5e:7e:09:f1:77:fc:
2c:0a:1a:57:28:dd:b2:eb:c1:da:6a:45:5c:56:2c:
81:43:a9:b0:16:c8:e5:b5:07:67:62:f4:bd:82:3a:
21:16:5e:af:a0:fe:bb:78:f6:54:9a:d1:e6:3d:05:
32:f6:ee:c1:d6:fe:de:ee:ec:a0:af:30:1c:e6:a6:
33:48:b9:be:e6:7a:f2:2d:70:3f:5e:a0:94:57:fe:
d8:0b:11:35:62:c0:b7:c4:21:4b:39:63:07:8c:3e:
12:1d:5b:e5:99:94:78:64:bd:e7:8e:1b:07:1e:54:
e6:81:f6:b5:b6:d8:39:dd:e4:d2:b1:bd:8c:72:30:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5F:8D:6C:16:CF:99:2C:E9:E6:A7:E4:9D:82:2D:45:12:F8:87:F1
X509v3 Authority Key Identifier:
keyid:0A:5F:61:29:14:2B:D0:A9:DC:69:DF:D4:02:48:9F:F2:5F:5B:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl9hKRQr0Kncad_UAkif8l9bPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0ad264-3a50-4563-a35a-0d2bbe58c145/1/Cl9hKRQr0Kncad_UAkif8l9bPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5c:a1:14:54:1b:c8:ff:99:b0:e6:cd:86:ec:09:98:2f:c6:
ba:29:cb:75:0b:8a:e5:1e:1b:b1:21:e2:92:5c:d5:39:cb:90:
09:44:56:fc:d1:a4:39:32:32:c3:f4:e1:76:d5:5e:d0:74:eb:
e6:17:03:93:b4:c5:2e:5e:e0:6f:ab:9e:a9:78:9c:51:cd:6d:
b5:24:8f:d9:d9:3c:df:5f:f0:c9:7f:f2:ae:c3:98:10:04:a4:
14:b2:02:b6:af:14:09:02:21:14:a5:5f:f1:b7:e3:8f:47:7c:
da:d9:a1:cf:54:e4:fb:bc:a0:1b:d5:40:f2:7b:52:2d:b3:b5:
7a:d2:13:99:e6:1b:60:6d:68:70:dd:8a:cd:d4:1d:e2:c7:bc:
da:4b:27:54:e8:d4:db:71:1c:55:59:3e:db:42:bb:27:f0:4a:
0e:9b:83:c3:31:48:21:4d:d2:e9:34:71:4c:4e:2c:20:63:b5:
20:1c:ee:9e:c5:a3:3d:aa:6e:a8:dc:fe:32:f7:c5:3a:0a:30:
1c:ff:a1:b1:98:06:ae:c5:4f:44:07:af:9b:b4:a4:af:21:48:
d7:22:72:1c:be:51:2e:17:1e:02:aa:2e:3b:5f:1c:ad:72:44:
4e:38:82:22:ad:f3:a4:3c:d7:9d:f6:8e:90:17:ee:33:74:13:
df:d6:cb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:21:06 2025 by rpki-client