Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
File: RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json)
Hash identifier: gJieBgywETb3SskDc5Vh4Wu6Yismc05qUJ7LWdb8MFg=
Subject key identifier: 9B:11:59:58:CD:E7:0E:50:91:58:D5:C5:48:23:C8:22:19:B6:8C:9C
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Certificate issuer: /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial: 01976EF536786930EDA9D0510F26CCCBD69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
Manifest number: 156A
Signing time: Sat 14 Jun 2025 15:00:53 +0000
Manifest this update: Sat 14 Jun 2025 15:00:53 +0000
Manifest next update: Sun 15 Jun 2025 15:00:53 +0000
Files and hashes: 1: E48fxMRuF9_usgkv-wBA_GtkkY8.roa (hash: TJ/B+8gZ2LSJEkkPcBk2s1l74WkEA3d0hjUzJQAQi8w=)
2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: 92hNM8Nez3YbMSn9FB/K/uEq2pvnq7wfUWvdLzzWsqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:36:78:69:30:ed:a9:d0:51:0f:26:cc:cb:d6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Validity
Not Before: Jun 14 15:00:53 2025 GMT
Not After : Jun 15 15:00:53 2025 GMT
Subject: CN=9b115958cde70e509158d5c54823c82219b68c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:75:8c:ae:95:c5:73:d3:f1:98:e3:4d:8a:
d9:cb:4b:1c:63:0b:75:2d:48:84:f3:7c:c8:a9:25:
31:40:70:4f:b8:ca:0f:4f:7c:11:5b:d9:39:e3:49:
06:84:fa:88:0d:49:ff:e5:b7:6a:58:31:72:17:b2:
35:4c:61:5f:67:71:4c:40:39:8f:f5:f6:ad:22:f8:
0e:84:ab:46:ca:90:21:f3:54:61:15:c0:9d:9d:46:
c4:db:2d:2b:f4:88:cd:f9:3f:90:ce:f0:d3:be:3c:
6c:0f:a3:42:9b:4d:1f:09:be:11:f3:24:d6:c7:8b:
c0:56:32:e5:f0:5a:bd:31:1a:65:dc:45:91:47:e9:
a5:d4:3f:00:c8:ba:7d:89:23:5b:5f:81:24:ad:00:
10:02:db:d1:3c:a8:f0:a4:69:c4:2d:67:9d:91:00:
10:8e:49:d7:45:07:7c:69:59:43:32:86:00:69:54:
e2:cd:ed:53:c5:91:68:56:d8:54:53:ae:b4:05:be:
7f:da:5a:84:75:4f:8e:b5:f3:3a:12:86:1f:5e:14:
97:f5:46:b9:64:a0:cf:21:04:25:3c:60:28:77:ac:
c3:1e:c9:1d:dc:7f:9c:3e:ca:9a:da:db:4d:49:44:
d5:86:d3:34:57:34:30:59:0e:99:af:23:20:6a:11:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:11:59:58:CD:E7:0E:50:91:58:D5:C5:48:23:C8:22:19:B6:8C:9C
X509v3 Authority Key Identifier:
keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c9:bd:64:1f:45:2c:a4:e6:be:c3:fd:1e:6a:00:26:75:d4:
d8:ab:78:a0:d0:a0:4c:f3:7f:80:56:6b:ed:17:8b:e5:88:ab:
e5:61:32:dd:6a:b9:52:b3:cc:c0:9a:12:a3:c6:8e:d4:26:aa:
78:c4:fa:45:af:c4:3a:71:cf:67:80:64:dd:1f:1b:ed:4f:cc:
74:69:96:a9:d8:70:37:c8:85:3f:dd:71:20:b2:c8:cb:e6:4b:
c3:39:bd:4e:2b:11:61:d1:7e:58:fa:c0:9d:f3:0d:3b:e4:44:
ed:d5:b2:80:9b:f2:e7:f8:13:0f:09:fd:ec:93:27:9c:2f:19:
f0:23:18:45:75:42:41:e7:12:8c:78:9b:e1:e8:db:71:72:b2:
47:10:dc:73:2d:42:1e:34:bd:e9:59:29:43:a2:0d:95:23:f8:
7d:ec:96:89:31:5c:23:1a:6e:47:a4:cb:45:6f:4a:32:c6:d2:
77:55:8a:e1:20:3d:85:ab:6a:50:47:ca:92:2a:0d:0f:53:95:
22:b4:15:bc:8e:1a:7b:b2:cb:30:11:a9:bd:8d:9c:27:f3:9c:
df:c4:f6:e4:d8:0b:c2:cd:0b:0a:03:44:0f:1e:18:3a:71:ae:
c0:8b:25:5b:e2:1a:bc:ec:21:cf:93:46:b4:31:d5:ae:6b:f6:
ca:86:f7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:03:04 2025 by rpki-client