Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File: A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier: WX6SNr9/ZKXgQrliOK4Di93UFYrmsyIbg6ZhcK10u2Q=
Subject key identifier: 08:0E:55:3B:F9:FD:07:66:55:0B:5C:49:50:01:E7:24:11:EF:E5:4E
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer: /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial: 019768BC57E76FFF7BB4B5629B4E662313BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 10:01:03 +0000
Manifest this update: Fri 13 Jun 2025 10:01:03 +0000
Manifest next update: Sat 14 Jun 2025 10:01:03 +0000
Files and hashes: 1: 3TsgJTCqJzOcEWU1D_eLkn9vlVQ.roa (hash: FocquAr/i2n2K968hOeO0r6QOp/B6G9WWrm69jbwUbg=)
2: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: GxQpHLsyEJSdVCRLYyXdpM7rMvAHeywJWYNB7LCfCe4=)
3: XfddXSazKRwlAti_xB3GX9aF4dA.roa (hash: 6Q++0e98qDqGZws++WyKl8Tb8aXZP/cVoTXv/5uSSrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:57:e7:6f:ff:7b:b4:b5:62:9b:4e:66:23:13:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Validity
Not Before: Jun 13 10:01:03 2025 GMT
Not After : Jun 14 10:01:03 2025 GMT
Subject: CN=080e553bf9fd0766550b5c495001e72411efe54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:a6:58:c9:28:aa:e9:5d:65:61:79:1b:39:
18:59:c7:05:e8:01:08:bb:e8:25:3d:17:e0:4d:7a:
26:4f:9a:77:fc:fc:86:1a:1c:01:29:6c:3b:f4:6a:
aa:4b:3e:0f:0b:2b:53:a9:3b:a9:ec:7b:33:62:67:
0c:cc:de:c1:01:a3:7a:cc:4e:c9:d6:7f:fe:d2:7c:
e6:19:b8:71:89:42:4a:27:33:a7:be:b6:72:d1:c6:
28:9b:8f:6c:0c:61:88:c9:71:93:7a:c0:33:48:83:
75:22:5e:08:30:ee:a0:0a:3e:f3:2d:e5:a1:b4:6d:
1f:20:1b:91:4e:3d:bb:e7:e0:63:26:22:17:0b:40:
c1:ba:14:eb:57:27:a8:8d:be:62:66:fa:52:35:ac:
ef:0e:ec:12:f8:60:43:1f:fe:1c:25:00:61:58:08:
c2:32:52:ca:e7:f5:98:d2:dd:b5:97:03:1f:06:9a:
3e:27:aa:54:2c:4e:09:2b:c8:1a:d9:5d:f7:03:0c:
44:9e:11:35:09:b9:1f:3e:3f:14:ab:b1:d2:90:c0:
91:33:fb:6e:12:5e:38:3c:cf:cb:20:7d:6c:23:9a:
f0:de:92:84:8f:f7:94:ba:af:b2:91:41:bf:fb:e4:
19:96:32:5d:8a:21:aa:19:d8:09:d1:07:4c:8e:b9:
1d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0E:55:3B:F9:FD:07:66:55:0B:5C:49:50:01:E7:24:11:EF:E5:4E
X509v3 Authority Key Identifier:
keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:2f:c1:e4:bc:d4:57:c5:16:7d:0d:27:80:20:dd:27:72:cc:
84:e5:44:18:4c:3a:6a:27:44:ba:e0:14:83:97:db:71:1a:b1:
1e:6b:85:33:68:a6:b8:47:a9:af:81:61:e7:ed:b1:58:fe:42:
18:d1:bf:9c:d4:d4:e8:14:49:41:57:88:55:ef:a2:08:c2:d9:
72:fa:ad:8e:10:49:44:79:f2:e0:b5:e3:5b:2c:da:bd:69:ac:
36:eb:de:8d:c6:43:2f:7c:15:71:bc:c5:e7:f3:53:3a:8c:37:
0d:f0:f2:fe:29:57:ce:e2:a7:02:a4:5b:7e:e1:50:a9:0b:87:
c1:6a:a3:56:eb:97:4a:af:ba:ff:1f:46:59:bb:90:5f:d0:2a:
8f:38:b2:cd:d8:50:ac:7f:f9:0a:8a:d9:3a:35:d6:55:b6:9b:
5f:29:5b:b2:ec:ee:bd:56:1f:d1:75:aa:6e:b2:4a:22:e5:de:
97:b6:53:3f:ea:ba:91:76:a1:c9:02:ec:4b:52:00:84:1e:70:
fc:55:5d:80:9f:bc:b6:6c:bc:90:ba:2f:11:a9:9c:c3:b8:aa:
89:6b:20:41:1c:cd:d3:58:08:e0:35:5f:cb:cc:27:04:db:78:
31:a6:c6:5d:d0:ce:47:b7:61:3a:7d:20:13:69:52:cb:98:70:
f5:39:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:44 2025 by rpki-client