Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier: Sg0O+DpmZGblRxiZ1fvXN9PV0tjRxo3ovPy72Fquw7Q=
Subject key identifier: 1A:C1:55:CC:28:2B:FA:2C:B4:CB:83:8A:7B:CA:8D:12:1F:9B:F2:26
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial: 0197827B9B46CC6687FD669E7DC9A640A2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number: 159A
Signing time: Wed 18 Jun 2025 10:00:28 +0000
Manifest this update: Wed 18 Jun 2025 10:00:28 +0000
Manifest next update: Thu 19 Jun 2025 10:00:28 +0000
Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: lwuVz3LPS14kK2SzKdytMw4uGNtXugjAEH+j66S2Egk=)
2: lsGbzxHmmLCraaV9m6GpjO-iIBA.roa (hash: Z6I8DbUnNuqgSWO6SRPbYw4EfdxPDhEpV2EFYvnSy8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:7b:9b:46:cc:66:87:fd:66:9e:7d:c9:a6:40:a2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Validity
Not Before: Jun 18 10:00:28 2025 GMT
Not After : Jun 19 10:00:28 2025 GMT
Subject: CN=1ac155cc282bfa2cb4cb838a7bca8d121f9bf226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:f0:9a:77:14:74:60:db:c8:b6:c9:bb:b5:
b0:12:72:c0:2f:6c:5d:aa:1b:31:7e:ab:18:20:30:
0a:58:72:4f:f1:9b:36:89:d4:08:d2:80:a5:98:63:
83:87:94:23:8f:0e:15:ef:dc:0e:f3:b7:6c:ca:64:
3c:83:87:83:e4:dc:29:30:4f:8f:99:3d:75:10:2a:
75:cf:36:68:e5:9d:4a:e3:bc:c0:d3:c3:ab:77:38:
89:64:ed:79:40:b2:df:54:2f:f1:80:26:04:97:cb:
52:95:1e:87:28:20:38:67:ec:ea:2c:5e:5c:70:f0:
5d:d0:1f:69:47:6f:88:79:2d:d3:81:39:ba:84:02:
c4:db:95:21:b3:81:03:c2:57:8a:79:6d:c4:f4:b3:
90:fb:35:ac:0f:94:3c:2c:d9:6d:47:4b:68:4d:ef:
ed:19:8b:8e:d3:93:0f:04:9e:1c:e6:26:9b:f1:97:
24:45:fb:79:f6:28:59:24:ce:94:ab:cb:c5:78:2a:
36:cc:d2:c1:46:dc:38:26:60:b1:36:52:62:90:6c:
25:c7:ae:15:f7:76:bc:90:fa:23:2b:d9:f3:86:39:
4e:2a:cb:35:89:3f:9e:f6:75:7c:9b:55:29:99:66:
78:55:40:e2:a4:5f:9d:e6:0a:c1:74:84:5f:9a:f2:
05:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C1:55:CC:28:2B:FA:2C:B4:CB:83:8A:7B:CA:8D:12:1F:9B:F2:26
X509v3 Authority Key Identifier:
keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6f:72:b1:d1:f5:bf:c4:38:4e:42:f5:e0:2a:f7:48:86:4a:
43:a7:ef:99:c9:a1:23:45:9a:58:0d:d7:73:e7:7a:08:bd:ce:
ce:b9:50:51:ce:2d:2a:8c:c0:7a:da:f5:ff:a4:e9:47:85:dc:
f1:cd:b7:8c:4a:43:3e:25:d5:2d:56:7e:e7:f3:dc:d9:ce:59:
5a:16:80:fc:88:f5:4e:5c:27:f9:bd:1b:90:cb:d4:8b:ee:97:
f4:b9:85:53:6b:db:9b:bc:f1:d5:d7:16:d5:18:35:11:ea:c4:
76:2e:a5:d2:99:1f:5e:06:ed:d6:14:77:8a:06:28:ab:17:56:
dc:68:36:f9:14:f0:89:89:1b:11:bb:fa:fb:54:9a:46:73:22:
44:37:7b:1a:43:39:33:38:f7:32:f0:78:22:47:ff:cd:75:95:
68:2f:e6:a0:49:c1:68:a5:67:b1:55:96:23:07:8d:c0:d2:a6:
f6:08:96:3a:a0:8e:e7:06:8d:e2:2a:e2:75:62:2e:6b:81:5c:
ab:30:84:32:76:bf:35:fa:9d:f0:98:32:ba:e0:c6:24:f3:6b:
7c:02:ac:54:e2:23:8e:ee:8c:f6:4a:00:5d:15:61:a2:2a:da:
13:54:c7:67:c6:1f:36:ff:43:a6:fe:db:e0:65:94:97:83:64:
9c:29:6f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:24:51 2025 by rpki-client