Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
File: t6hswzTG4Oq4PyUr2D7ulWklykA.mft (raw, json)
Hash identifier: QyE+EQ7joBhs+Q8ArWVgq49OsFvhnughWHnJ8dE5Il4=
Subject key identifier: 10:A1:35:22:36:C4:B1:5A:08:93:D4:33:6F:D5:B3:FB:56:69:01:74
Authority key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
Certificate issuer: /CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Certificate serial: 01976BBD54A9C6442E5A7F48D801739BEA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 00:00:59 +0000
Manifest this update: Sat 14 Jun 2025 00:00:59 +0000
Manifest next update: Sun 15 Jun 2025 00:00:59 +0000
Files and hashes: 1: YDZQqJLg6f9-JdbHT4bYmgUJjh0.roa (hash: cInsk0zvLYwt9OlQZPLFwtQxycESn1Vx2ttrJFC0hi8=)
2: t6hswzTG4Oq4PyUr2D7ulWklykA.crl (hash: RS9QGosvaSJ22JB/Fco8SiirHIUuyxQdIgped5HT+YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:54:a9:c6:44:2e:5a:7f:48:d8:01:73:9b:ea:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Validity
Not Before: Jun 14 00:00:59 2025 GMT
Not After : Jun 15 00:00:59 2025 GMT
Subject: CN=10a1352236c4b15a0893d4336fd5b3fb56690174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:3c:a3:97:bf:33:1a:ad:91:93:5e:14:19:
98:a7:3d:55:72:f4:42:20:c6:0e:83:d8:02:2a:c3:
3e:04:b5:15:c4:5f:56:fd:37:dd:80:ca:90:b2:96:
82:52:29:49:a7:46:09:2f:c0:4b:b4:a7:ef:f2:d1:
d8:df:01:d5:55:c2:00:58:48:46:03:5a:30:00:e9:
eb:59:68:82:e5:60:94:1a:48:6d:1e:28:98:22:f3:
96:d6:04:7a:cd:da:51:cf:6c:b4:1a:36:0c:e0:68:
e9:9f:4e:54:22:fa:fe:8c:a9:42:1b:34:85:e7:58:
cb:7d:44:a1:b5:65:86:4e:23:12:b4:54:be:a5:a5:
72:63:d0:5a:74:02:67:d0:6d:c1:f4:59:a9:8d:df:
05:b3:e7:29:27:f0:c8:49:1d:f6:ea:fd:84:a3:f2:
17:cd:75:e1:56:a5:9c:4b:7f:47:c2:16:1c:42:5a:
59:c8:0f:05:70:5c:39:59:01:f7:95:b1:0e:0c:5b:
8f:e0:46:b4:49:ed:60:9a:af:b4:3e:23:0e:ea:92:
ab:0d:c9:f4:73:7c:fd:ed:a6:5b:06:1f:26:fc:21:
bd:71:5d:28:d7:6b:79:3e:0a:76:99:69:57:9e:65:
ac:9c:3b:12:d1:9b:4e:9d:5f:c5:5d:17:1c:23:ab:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A1:35:22:36:C4:B1:5A:08:93:D4:33:6F:D5:B3:FB:56:69:01:74
X509v3 Authority Key Identifier:
keyid:B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e8:6d:c1:35:e3:ff:1a:ce:42:c9:39:a3:eb:3b:96:7d:ac:
f6:fa:d9:5f:6f:62:50:52:7d:1d:d0:da:87:c8:67:5a:fa:24:
8f:e4:89:80:2c:ed:b8:fd:94:af:ba:98:be:33:bc:22:62:3d:
10:63:9b:0f:cb:1f:a9:1f:9b:cc:e6:6a:60:5f:73:ac:88:a3:
1d:6e:fc:98:8b:dd:ba:21:66:a6:62:1f:30:22:d1:fc:7c:a9:
34:84:5d:91:dc:24:bf:6f:83:a4:ea:4a:41:bb:9d:f1:99:65:
06:95:d3:e0:6f:b2:7f:f6:44:1d:e9:99:bf:27:17:66:74:dd:
d1:e6:6d:cb:c7:c4:cd:16:16:93:fa:80:43:4f:37:61:f6:01:
ed:f8:c3:f7:f0:54:72:33:5d:52:3e:3e:7e:14:c6:8d:41:ca:
48:e1:e4:2c:cd:dd:51:bf:af:b9:97:e1:47:eb:b5:4b:b9:50:
9e:76:67:d2:37:64:29:06:5d:26:c9:53:7d:c8:ad:78:84:3e:
fe:96:63:57:38:df:f3:3e:22:ed:9f:82:c7:ad:f7:8c:c5:84:
2a:22:a9:0b:4f:ab:f1:7f:c9:f1:d1:b2:16:06:fe:52:3c:15:
2a:04:b4:0b:ac:e7:72:c9:7c:23:9b:7e:8b:09:02:7a:5f:45:
e9:a6:66:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:38 2025 by rpki-client