Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File: 89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier: ScytS3Za7aO6pyLelaZa7vQLqcwR+dAuYTQK1e51uFw=
Subject key identifier: CD:F7:09:A6:B5:E1:FF:5D:13:FF:7C:35:5C:C1:3A:28:EE:68:F4:DB
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer: /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial: 01978131FA6012E0CA1CB5E8C725597EFB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number: 159D
Signing time: Wed 18 Jun 2025 04:00:25 +0000
Manifest this update: Wed 18 Jun 2025 04:00:25 +0000
Manifest next update: Thu 19 Jun 2025 04:00:25 +0000
Files and hashes: 1: 2XS2qKu1oL_DsuI3OSXAyPPmXaM.roa (hash: 1rGV+fsNs0SO2Zvvg0olbcFYooCwn1FYxZF5w23Xb0A=)
2: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: Qub3pL+K/SVD1RfJu1r2V4r7JX0fxnqL/TvtV1EoC+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:31:fa:60:12:e0:ca:1c:b5:e8:c7:25:59:7e:fb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Validity
Not Before: Jun 18 04:00:25 2025 GMT
Not After : Jun 19 04:00:25 2025 GMT
Subject: CN=cdf709a6b5e1ff5d13ff7c355cc13a28ee68f4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:09:4c:26:b1:9a:b8:f8:00:a7:d4:78:8c:bc:
10:d4:74:88:1e:fe:f6:22:9d:ef:5a:f6:1d:fd:0d:
07:41:8a:d6:fc:5e:da:5a:84:ba:d2:70:a9:2c:90:
a6:48:09:ea:ee:46:9b:b6:7d:22:2f:9e:1a:55:b6:
9f:13:19:64:82:5e:16:07:7f:ad:c0:7f:a4:57:bc:
af:28:8d:72:47:56:8a:27:46:06:f3:04:4d:aa:6a:
4a:9c:ae:45:55:47:9e:e5:f9:6b:f9:27:88:7c:46:
53:95:08:83:fa:94:3b:55:8c:e5:58:31:f6:43:99:
6b:3c:7c:ce:df:69:56:9c:57:2b:a6:9b:72:5b:6d:
db:cd:ca:34:53:23:20:6f:a8:da:bc:bc:c9:f0:b4:
6f:35:67:5d:37:4b:7c:ef:35:90:28:68:bf:05:27:
3d:4a:52:fb:c2:d4:1e:f9:12:f9:d0:f3:fc:8c:f3:
f9:7a:b7:22:87:a8:10:5f:ce:03:dd:0b:1e:c5:3e:
5e:f9:3b:47:e0:e6:bb:4d:fc:4b:ba:2c:8f:64:25:
d2:a0:d4:cf:7a:6c:58:7c:03:e1:0b:26:cb:a5:6b:
e3:96:5b:2c:d3:e9:f8:f8:50:46:84:d1:1c:ad:28:
ad:6b:f5:91:b6:a2:d5:dd:1b:13:b0:f6:7f:32:71:
62:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F7:09:A6:B5:E1:FF:5D:13:FF:7C:35:5C:C1:3A:28:EE:68:F4:DB
X509v3 Authority Key Identifier:
keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b1:41:0a:c5:77:3e:87:ef:12:9b:29:a9:2d:71:b7:12:b4:
e3:f8:4e:e3:83:77:1b:47:5e:b1:9b:6b:bf:4b:1c:46:b1:a6:
55:0b:87:b6:4e:0f:11:d0:50:f7:95:c9:fc:67:d7:57:bf:6b:
ce:5f:e7:02:b4:21:cd:9c:16:42:e0:2c:38:15:fa:dd:52:13:
4e:26:1d:97:25:a3:7d:ce:8a:8e:84:91:9d:ff:0e:9d:c7:a1:
3d:07:e3:89:d5:96:4c:4a:7d:cd:7b:d8:46:83:45:fd:d3:4e:
c3:de:95:7e:84:d7:21:8f:40:33:c4:80:9f:2b:52:6d:af:af:
b2:28:84:be:69:d2:54:39:1f:5e:04:0a:70:64:f5:28:a5:4c:
8c:d4:83:2e:a5:20:1a:5b:61:18:9b:b3:fc:32:47:9e:65:20:
bf:7c:20:5a:8d:21:f5:c2:3a:4a:73:ef:a5:dc:61:09:22:49:
fe:2a:1b:92:db:4c:31:32:97:cb:01:ca:b6:95:6b:ee:94:e0:
cc:22:e2:3c:d9:cb:0c:d3:2d:a0:40:e4:60:fd:4a:d2:ff:a4:
64:02:c5:53:c4:fc:26:54:26:8f:56:78:98:15:e7:ee:29:12:
4e:68:4f:ff:30:68:c1:a6:cb:25:12:78:4b:63:e2:b4:6d:9b:
b1:44:f1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:11:49 2025 by rpki-client