Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: imKH9S3u5LsJIpspOwDpmxHcIDM0B/YTcLiOzExlaLc=
Subject key identifier: 26:48:ED:0F:1C:52:41:DD:1B:E0:7C:EE:FE:90:10:4C:D3:68:24:E4
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 01977A1D4D3C10C9CDAE2884643B734CCB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 159A
Signing time: Mon 16 Jun 2025 19:00:29 +0000
Manifest this update: Mon 16 Jun 2025 19:00:29 +0000
Manifest next update: Tue 17 Jun 2025 19:00:29 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: Ngyr3IVgt5ctg9DoNwl68ptdIpjl4S12glQqNZy9KUE=)
2: NXK16WCoOxiuP5Pdh0Kqs98_6Y4.roa (hash: Y5m51ite4A5LbDxUmGbQiHLBy8E1baqu+BrJUl8RNq4=)
3: VhwEbxUgJOza67qJ4K_i1Uqq3ms.roa (hash: aCXGgi5AYKAi5vfsurTRm09inwo+Mr6Oxc+TCBbgaZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:4d:3c:10:c9:cd:ae:28:84:64:3b:73:4c:cb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: Jun 16 19:00:29 2025 GMT
Not After : Jun 17 19:00:29 2025 GMT
Subject: CN=2648ed0f1c5241dd1be07ceefe90104cd36824e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:ee:85:cd:4c:6e:ad:87:97:71:41:41:7f:
c8:79:9a:c7:84:97:2b:3d:b9:a0:f8:af:dc:54:71:
10:a5:73:e0:e6:94:ae:d2:33:cb:74:ea:c7:73:ea:
c2:e0:4c:a0:21:0a:ac:9b:13:d3:e1:3e:4e:b9:ce:
49:71:1f:ea:27:75:da:1f:6e:89:34:fd:51:b2:47:
f8:d0:88:9c:a3:27:ae:92:0a:f9:64:97:9d:d2:fb:
34:de:07:25:cd:93:d4:d5:6a:b6:45:01:1c:c6:63:
75:b0:bb:54:d6:4b:e5:c7:cf:2c:46:19:0d:9b:06:
d4:89:09:2c:75:7e:7f:69:f5:f2:12:54:5f:57:4a:
23:56:d6:0f:60:d2:4e:2c:f0:ae:0d:77:03:86:e5:
67:1b:3b:f7:a8:5b:1e:9c:ed:30:2a:67:a0:cc:e9:
62:ef:4f:7e:4b:a9:3a:6f:d2:ac:1c:ec:76:5c:22:
d2:a4:d2:a0:2b:6d:8b:98:b0:c4:57:73:aa:86:64:
10:07:4b:44:38:74:73:44:cd:a1:fd:ee:4f:e9:cd:
a8:98:b0:a5:a9:91:1b:53:a0:4c:64:53:46:70:7b:
78:32:a6:3b:ac:da:d9:49:85:7b:7c:78:3a:e3:e7:
c8:9a:9c:fa:a8:37:b9:76:d8:b5:da:d2:1e:c4:d3:
2c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:48:ED:0F:1C:52:41:DD:1B:E0:7C:EE:FE:90:10:4C:D3:68:24:E4
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fd:6d:33:04:3a:17:93:b2:61:cf:ab:fe:c3:f6:7b:a9:aa:
fe:43:90:a5:5a:29:b1:d9:09:b9:fb:8d:cb:35:ba:c1:45:56:
f8:ef:20:86:61:7d:df:9e:fc:8e:96:6e:5c:9e:8a:de:36:92:
7b:0e:86:a9:e7:1a:8b:04:76:64:51:bc:b2:7f:d3:6c:47:46:
2b:0b:74:40:11:63:4e:5e:7e:a2:c7:12:ed:54:04:ba:c3:0b:
01:a1:ee:75:49:fd:ac:b5:44:38:e5:8c:a1:77:aa:c2:bf:21:
aa:f3:0c:e4:38:07:8a:9e:df:28:3c:1c:35:ce:60:b5:8b:d7:
36:86:f8:4e:1f:85:7c:02:71:75:f5:83:38:89:ca:21:dd:35:
17:4f:4c:72:78:ff:b9:3b:c6:b8:09:4d:1b:11:5e:42:d3:43:
8e:4b:f4:20:07:97:eb:a2:20:64:72:12:39:86:02:06:a8:0d:
2f:f4:a8:ef:00:6b:8c:1b:57:35:2d:1c:20:c7:43:29:ca:58:
7b:8b:ce:bd:fc:86:7a:c3:37:f6:35:e8:b9:22:54:65:12:97:
78:9a:67:92:2a:51:d6:c1:e4:74:28:92:7e:08:fa:a4:24:7a:
47:78:3c:86:7e:7c:a1:c3:f5:a3:3d:ed:87:0e:31:68:bc:db:
09:e0:54:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:52:55 2025 by rpki-client