Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File: RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier: PirzpkasC/Vyhb9f2SOl3+SlUUBnfK8qUmSoW7fU+LY=
Subject key identifier: 3D:8A:B6:2A:78:5F:46:8A:AF:67:D9:87:87:7D:4D:9B:8A:65:8F:14
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer: /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial: 01976C2B59389C7166815D8AAA3C9AA2D06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 02:01:09 +0000
Manifest this update: Sat 14 Jun 2025 02:01:09 +0000
Manifest next update: Sun 15 Jun 2025 02:01:09 +0000
Files and hashes: 1: JKZSaEq-32SHY-bAWiWwoCf7Nj0.roa (hash: yG2sh1v4s77ObqidFtWCzFl8F2FhijHzBj04Ij6JtCg=)
2: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: BosSscvKVGp/1oqk0R8LS/g4LlHvOFzUHSPL3cCXG/U=)
3: j-Ifej8p6sYfHH1KeQ_QH-keweY.roa (hash: iVB6o7qwOuA1Lj9sG4cTIYUNVhckFRweng10RlAwHI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:59:38:9c:71:66:81:5d:8a:aa:3c:9a:a2:d0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Validity
Not Before: Jun 14 02:01:09 2025 GMT
Not After : Jun 15 02:01:09 2025 GMT
Subject: CN=3d8ab62a785f468aaf67d987877d4d9b8a658f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9d:c8:8a:a3:82:4c:0c:2a:5a:a0:db:d1:ca:
94:9a:d1:60:fa:b7:7f:5b:55:d4:7c:84:d0:e0:a8:
d5:8a:e6:21:0b:b4:bc:1f:20:47:b6:1f:80:5b:86:
c3:d8:3b:af:92:bc:0f:e7:33:b7:55:bb:45:52:42:
c2:d1:70:37:84:2a:d3:d1:a0:b4:5e:b0:fc:c5:63:
15:4f:d5:02:6c:be:49:ea:c4:a9:be:88:75:db:77:
fe:1d:a3:34:b8:67:63:d7:ed:8b:18:9f:5f:e4:79:
92:d8:c5:f2:5e:28:77:cb:9d:69:34:64:23:dd:74:
6f:e7:c0:13:10:5f:72:ee:a4:bd:ad:2f:af:a3:4f:
6f:7b:5a:f2:27:f5:d7:9f:31:98:64:6e:65:2a:b5:
85:91:42:d8:8b:9a:d3:d0:46:0e:26:f6:d4:bb:a6:
16:ca:0f:32:cc:7d:aa:cd:9f:10:37:ff:07:1d:80:
23:f2:61:cd:0f:b3:c8:22:96:ec:b1:5a:cd:aa:d4:
47:3f:e2:a7:fe:21:7e:ab:d3:39:3a:33:50:50:ed:
9e:85:a8:eb:7f:f5:57:46:7b:4c:8d:82:76:39:b0:
1f:76:5e:cf:7b:b1:70:3d:84:2d:53:52:c2:59:4a:
5f:57:83:7c:a0:43:72:de:3d:a8:65:29:2e:c4:66:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8A:B6:2A:78:5F:46:8A:AF:67:D9:87:87:7D:4D:9B:8A:65:8F:14
X509v3 Authority Key Identifier:
keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:60:e1:fb:af:af:30:54:64:e5:5a:d0:8c:8d:0b:37:9e:82:
e0:2a:22:2d:e3:b9:20:d3:c0:29:66:b4:76:b3:52:cf:04:83:
04:72:85:fa:d2:6c:88:4a:1b:41:ca:ce:4c:90:f3:7f:ba:ed:
59:10:81:70:7e:4d:4d:55:8a:39:93:a7:fd:b2:0a:a3:2c:13:
14:08:0f:d9:37:57:b3:6a:5c:d7:21:53:2e:6a:24:bd:b5:32:
ca:7c:5f:01:96:0c:b8:6a:58:fa:a3:2a:9f:ed:5d:70:0e:14:
8c:7b:9b:d1:00:6e:cf:50:21:d7:ff:0b:cd:fb:be:6c:aa:8d:
bc:74:2e:6a:23:ba:64:46:1c:1f:00:d4:4b:39:56:c4:5f:8b:
52:6c:20:87:93:98:ad:10:cb:b7:c5:24:7d:1d:4a:db:c4:5e:
12:a4:1b:aa:4e:9d:37:84:26:e5:2b:6c:6b:35:cb:b7:05:e3:
11:c1:d5:ec:1e:be:01:9c:84:5e:0e:d9:f1:61:66:f4:8d:33:
64:6c:40:b5:51:aa:60:a1:d2:2f:6e:d8:11:5e:d3:66:a5:c5:
33:73:be:8c:7c:db:5b:52:84:ce:2d:d1:76:f4:e3:67:00:f6:
8d:83:e4:8a:8d:d8:37:52:f4:48:01:4b:b5:98:62:af:e1:22:
26:98:33:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:50 2025 by rpki-client