Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier: qm7wVygHzxaD6AEtdt75bjtqpiGjnbLQtV7hJdFMe3c=
Subject key identifier: AA:59:D6:F1:F6:B4:C6:6B:A4:E4:41:2C:A1:52:45:BB:D3:BA:B5:C2
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 01977AC2318813444080B84CD3AE3615B965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number: 159C
Signing time: Mon 16 Jun 2025 22:00:36 +0000
Manifest this update: Mon 16 Jun 2025 22:00:36 +0000
Manifest next update: Tue 17 Jun 2025 22:00:36 +0000
Files and hashes: 1: 0kNkc387z7I2x4Yteehk0180PTE.roa (hash: Zuu2mJeRDdNqByIOk7bup5wFBYcY2Qe7ktpeoS994ec=)
2: 9N3RXGB1Oy8UN0Y7dyN-L02RNQg.roa (hash: LpNakPd/aYXI1JhkoX1IQRJscRwTM6lULLDhw2GOIT0=)
3: Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa (hash: q+jHwWcary8atsFBUa3Y/27z3nJW8U1gs5fNpNDELkU=)
4: PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa (hash: V3+P79bG0jSa7b+MpAG52JNhfjYjObP7ww4sVt5PAYs=)
5: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: 9qryIUZg8/bY2GwtYQLHRhIqknq1Wwkv9XolIBLSZU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:31:88:13:44:40:80:b8:4c:d3:ae:36:15:b9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Jun 16 22:00:36 2025 GMT
Not After : Jun 17 22:00:36 2025 GMT
Subject: CN=aa59d6f1f6b4c66ba4e4412ca15245bbd3bab5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:e8:a3:66:91:bd:f9:49:fe:37:60:0d:56:
d2:5d:49:83:ba:fa:0e:58:00:44:4e:03:eb:1b:68:
da:cd:82:d6:47:e3:e0:01:98:ba:a2:80:dd:91:9a:
1c:c5:e3:17:59:2c:1d:df:f5:0c:f4:e5:cd:c6:89:
c1:56:33:82:d5:52:18:6a:e4:db:37:db:7c:6f:ef:
63:06:52:55:5a:e4:f0:34:8b:0e:db:6b:e9:aa:f6:
9a:ed:fb:1b:48:d9:a8:75:7e:a8:83:17:6d:00:ec:
56:e9:29:df:27:37:50:56:9c:8a:29:ca:f3:50:75:
df:e9:6a:37:26:0f:c2:ea:9e:e5:8e:c0:cf:53:49:
7e:1e:46:f8:74:75:d3:4b:25:8a:34:1f:70:ca:3f:
5f:49:e7:12:96:cb:d2:84:32:b8:1d:82:61:d4:9b:
c3:16:85:ed:fd:a0:8d:d7:39:dd:17:8c:d2:60:60:
ee:b1:6d:15:1f:27:28:fe:b2:69:8c:7c:d3:65:97:
3d:8b:84:f2:ce:4d:7e:00:20:91:24:99:b9:21:d7:
78:56:67:94:fe:d5:8e:42:36:60:a3:e3:8c:c0:75:
78:00:08:04:62:06:e8:52:2f:58:d8:d0:b3:44:44:
78:c4:3d:9f:eb:4f:88:76:c9:67:5a:ff:70:de:f9:
72:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:59:D6:F1:F6:B4:C6:6B:A4:E4:41:2C:A1:52:45:BB:D3:BA:B5:C2
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3a:be:f1:f7:fb:94:3f:b3:04:41:be:6d:1a:9b:e8:37:4f:
3b:96:27:b3:56:7b:4f:4a:f2:d7:c9:8a:24:37:93:5d:07:8f:
1f:26:ea:49:1f:e5:3e:8b:85:8e:a8:0e:8d:f8:29:27:15:ec:
10:9c:5f:0d:a4:97:16:93:e5:f8:92:2a:92:ab:62:4b:0e:3b:
71:bb:0e:07:35:27:d5:21:17:cd:d9:ee:7a:4b:f2:26:13:0f:
b7:9e:a1:5b:f1:3d:fc:43:91:86:cf:9f:5b:95:13:9a:a6:0e:
27:61:70:24:ea:24:04:b1:86:c0:5b:c3:be:51:37:60:dc:5e:
e6:17:78:55:c5:cb:14:e3:ad:54:0d:3c:87:31:1d:67:31:5b:
00:76:9d:b2:cc:34:70:32:24:36:64:d1:9d:1e:4a:5e:ef:60:
9f:ec:9e:54:c9:ed:14:82:a4:ae:3e:73:96:7b:d7:e0:32:85:
ea:27:6f:37:ea:d0:d6:fc:0a:86:f8:9a:78:54:25:d5:f7:7b:
74:85:3a:74:ed:b8:c1:6d:07:2d:0f:83:91:e3:52:21:9a:64:
d6:0e:cc:0a:d3:76:b7:7d:67:ba:fc:86:0e:de:f2:10:2c:63:
39:18:47:0b:83:8f:7c:aa:af:aa:27:c4:b2:87:d5:86:0d:e7:
83:71:07:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:18:12 2025 by rpki-client