Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
File: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft (raw, json)
Hash identifier: g1doiOLB/YPJo6R6oGbeUtqxG3K8E5DhY0hEQsHADs8=
Subject key identifier: 52:64:4F:CE:44:D3:DA:BE:30:14:C8:14:E4:A3:EB:4A:2B:E1:CC:16
Authority key identifier: FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
Certificate issuer: /CN=fde72d43f4c82b1146737b116197231830bf65d6
Certificate serial: 01976F2C94CAE128BCD9D504BF14DDDE7F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 16:01:21 +0000
Manifest this update: Sat 14 Jun 2025 16:01:21 +0000
Manifest next update: Sun 15 Jun 2025 16:01:21 +0000
Files and hashes: 1: NEbsKu77gYfpibY3_TC8dQH80XA.roa (hash: aeVQJbng3C7RHWncwne+AehQ3FDANQdssqp/Bjc9vag=)
2: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl (hash: cQ+HVE0DWdZSxlKn0whFLyOuNBLLeR+5T9UTTkfb3xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:94:ca:e1:28:bc:d9:d5:04:bf:14:dd:de:7f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde72d43f4c82b1146737b116197231830bf65d6
Validity
Not Before: Jun 14 16:01:21 2025 GMT
Not After : Jun 15 16:01:21 2025 GMT
Subject: CN=52644fce44d3dabe3014c814e4a3eb4a2be1cc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:3c:20:a6:61:5d:16:bd:b5:4d:d5:5b:34:
79:19:d5:b8:28:85:67:5d:4a:fe:22:99:9b:05:7b:
be:38:d6:50:f2:2a:28:8d:5a:53:ad:f2:bc:02:76:
82:ec:57:79:98:fc:04:ba:6c:52:85:1d:68:e8:aa:
64:e1:5e:3c:b7:2d:6d:32:83:fb:85:52:d2:ed:6a:
48:0e:86:78:2e:6d:9c:f7:89:f1:6a:78:34:66:ad:
5d:32:6b:23:23:f1:d6:69:2c:03:1f:e3:9e:5f:7b:
79:2a:5e:d9:20:d5:8e:82:14:74:a7:34:9e:0a:ea:
ea:5b:43:75:1f:57:69:11:e4:2e:59:be:89:25:c9:
27:dc:6b:64:f4:3d:78:4e:81:be:c7:7e:68:10:0f:
cf:dd:75:36:83:ea:b8:a2:41:0d:07:e4:30:f9:7b:
00:a8:c2:3c:f8:9e:9d:85:b4:f2:39:76:9c:7a:88:
91:ea:ec:f8:3b:c8:06:16:31:f0:71:f2:d9:0b:2d:
e5:de:2c:5e:cb:91:27:c9:be:f5:c7:72:08:6d:be:
ba:f0:42:ff:d4:93:3d:38:5f:54:85:c0:18:c3:f2:
e4:00:f3:0d:7c:72:31:1b:78:97:c1:35:22:9d:1a:
47:4e:84:31:1f:09:e1:68:1a:49:c4:7c:ca:27:5c:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:64:4F:CE:44:D3:DA:BE:30:14:C8:14:E4:A3:EB:4A:2B:E1:CC:16
X509v3 Authority Key Identifier:
keyid:FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:73:99:cb:bd:81:4d:e2:0d:0a:d7:e9:b9:47:9d:2e:8a:37:
47:b0:3b:5c:9b:ef:a2:13:57:c3:c1:d0:db:ed:94:08:01:9b:
76:15:fe:d8:f4:a9:67:90:56:4a:0f:6c:c6:05:e7:4d:9e:11:
8e:3a:d8:70:b0:16:ef:a9:ee:1c:cb:7b:0b:b6:15:bd:13:0d:
c9:31:29:e6:66:c0:ad:39:2d:5f:80:0b:b1:87:43:9b:a3:96:
1f:28:7a:83:71:16:57:0c:d9:64:31:ed:34:47:eb:d7:0f:91:
50:d9:9e:6f:5d:9d:d2:84:b4:5e:b1:a8:ac:c6:63:87:29:c7:
9d:76:23:58:ae:38:4d:64:ce:89:9c:45:f8:17:fb:ee:3a:ec:
35:b8:ed:2d:cd:14:0d:35:d5:a6:71:ae:a8:a8:92:32:d1:d7:
6d:d1:8a:9b:f9:f1:8c:cc:4d:b4:c3:a0:3c:45:54:87:60:e9:
0d:1a:1f:67:0a:1c:9b:f8:0a:2e:bd:6a:8e:14:1a:69:9b:e9:
26:2e:26:d9:a4:cb:cd:7f:d8:fc:49:09:66:89:9d:bb:e7:10:
d5:7e:7d:32:ef:8a:8d:c2:61:8c:17:52:b9:46:b5:ac:e2:fc:
91:ce:15:e2:ae:0a:31:70:37:bc:59:92:9e:0c:f4:55:c6:21:
e9:23:d9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:10:54 2025 by rpki-client