Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
File: CsFWWl9sTlTKLxnTZHWbag7WGEA.mft (raw, json)
Hash identifier: 6OpYy509DnBTO6/6PsM8qSt/6II8YtbfhZ7wCkl3LGQ=
Subject key identifier: A7:78:C1:D4:AB:35:65:BE:7A:F6:BC:71:42:0B:FC:44:58:61:E3:3E
Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
Certificate issuer: /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Certificate serial: 01976DAB4EC3600B7456582309FF28AD3380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 09:00:32 +0000
Manifest this update: Sat 14 Jun 2025 09:00:32 +0000
Manifest next update: Sun 15 Jun 2025 09:00:32 +0000
Files and hashes: 1: CsFWWl9sTlTKLxnTZHWbag7WGEA.crl (hash: YjyRTme1Ci9W/KuezsV6b1/SK4zUQIcXhiC4x01c/9c=)
2: QP38gNz3xco5qv5nlkhRVeJhNcc.roa (hash: iHHCmYPxx8nMI8Pl/VJqH9lchdWekUpYcRiMjWpeVhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:4e:c3:60:0b:74:56:58:23:09:ff:28:ad:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840
Validity
Not Before: Jun 14 09:00:32 2025 GMT
Not After : Jun 15 09:00:32 2025 GMT
Subject: CN=a778c1d4ab3565be7af6bc71420bfc445861e33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:51:42:3e:3c:18:10:af:4b:8b:6c:d0:4f:f6:
c3:ac:5e:7d:dc:fe:24:26:e2:74:4c:b3:87:5a:0e:
05:71:77:98:9a:90:11:5a:35:c4:92:90:79:b1:5c:
e1:ad:aa:05:e9:4c:f1:53:c5:5d:f0:d9:e1:66:b8:
e3:00:3b:06:1a:3d:46:7d:0d:27:98:37:e5:21:14:
6e:9b:26:9a:36:87:ad:7f:d3:b9:01:79:cf:78:76:
5b:41:4b:09:0a:fc:2b:9b:b7:f1:b4:c1:9d:4f:9c:
76:8b:35:25:ef:93:4f:52:b7:93:2e:c9:0b:0e:95:
72:9e:5c:38:80:9e:9d:51:84:55:e7:1e:ee:51:35:
16:e2:15:d9:1a:88:bb:b9:a7:3d:f8:a2:57:c6:c5:
da:11:c0:5a:93:7e:13:a3:3c:b0:2d:17:d8:8b:ed:
e5:2c:c2:2d:9e:60:72:fa:68:75:c0:26:65:ff:f2:
73:78:09:68:72:2b:90:34:8b:89:f3:8d:2b:fd:0c:
50:1f:9f:4f:a1:f3:1d:bf:c9:f7:6b:8c:5e:3b:c9:
3b:cd:f7:ff:b3:ef:71:6a:31:59:2e:f1:fe:eb:f4:
ff:18:ff:32:d2:84:69:ab:5e:54:43:d8:49:2c:c7:
8c:c3:28:83:86:1d:67:43:4c:de:f1:9f:9e:da:b1:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:78:C1:D4:AB:35:65:BE:7A:F6:BC:71:42:0B:FC:44:58:61:E3:3E
X509v3 Authority Key Identifier:
keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:21:46:c9:36:b1:b0:4c:99:5f:be:af:6e:e9:ea:56:50:d9:
20:af:85:d2:7e:b9:49:47:54:0a:da:3e:69:d9:ab:02:00:19:
2c:2f:f2:d0:d5:1c:9e:b7:4f:5e:56:34:d0:c6:a5:9d:e7:99:
b2:45:f0:84:fe:66:21:75:e1:15:49:30:10:45:c5:dc:2f:2a:
3b:ee:3a:f4:9f:bd:aa:8b:7e:0f:b6:e6:e2:c3:95:75:b5:05:
c2:b7:d6:b1:1b:08:1f:be:ea:0a:06:c0:6a:bd:cd:dd:5d:73:
f3:9e:93:5a:bd:98:e9:eb:12:2c:d1:de:5e:33:19:4a:af:6b:
56:72:cd:2d:7d:1d:6c:85:bf:bc:2e:83:b0:1a:cb:1f:19:17:
0b:e4:c1:42:d5:f8:69:bb:bf:97:fa:cb:3b:27:ea:31:88:f3:
4a:6d:9c:c9:cd:33:d8:b6:38:d5:de:f6:7f:45:8b:2e:89:70:
37:bc:b3:f4:70:01:af:52:d1:49:df:6b:d4:09:a5:5c:5f:54:
4e:44:86:69:ff:79:29:e2:c3:a5:80:08:b7:5c:ad:26:95:0e:
65:3a:d0:18:d3:3f:b9:a9:70:a4:17:d9:88:d4:e8:62:6f:c7:
92:52:2a:e0:a4:94:18:2d:0f:c3:de:81:87:43:51:f9:41:55:
3d:7c:91:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:20:56 2025 by rpki-client