Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: FjYf2n8/Pr/sDH5+iaaaZC2EwqYJ+VscoAdl9gFva3g=
Subject key identifier: F0:8E:05:E4:2B:AE:C2:5B:22:AD:EB:3E:A7:7B:ED:E8:40:8F:6B:FA
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 01976BF44AE6128F05CA4EA6B306A9991B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 01:01:01 +0000
Manifest this update: Sat 14 Jun 2025 01:01:01 +0000
Manifest next update: Sun 15 Jun 2025 01:01:01 +0000
Files and hashes: 1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=)
2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: Mrp9OIVurEkuclzEij41OPtCfe5Z+qvqVeT3L2oW9m0=)
3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:4a:e6:12:8f:05:ca:4e:a6:b3:06:a9:99:1b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Jun 14 01:01:01 2025 GMT
Not After : Jun 15 01:01:01 2025 GMT
Subject: CN=f08e05e42baec25b22adeb3ea77bede8408f6bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0d:e5:1e:d8:b9:77:d3:88:36:41:4c:28:bf:
ba:14:ba:20:e5:08:17:c9:07:d8:78:80:09:95:b4:
3e:c7:7a:f9:14:4f:45:1a:7a:7d:05:9d:f6:de:d8:
30:62:88:aa:c8:6f:be:07:f9:2e:b2:3b:e0:c8:ef:
c0:6a:68:40:15:a4:43:06:3c:6c:16:9a:4a:cf:ee:
fc:c1:75:9a:ea:fe:21:ae:ef:2d:f2:7a:ea:2a:3a:
8f:b3:82:02:7a:48:cf:b3:18:cd:c8:16:7b:4b:ef:
df:f4:5f:77:7c:3b:11:2f:f7:f9:87:ec:6e:44:1b:
7f:52:3c:3f:5a:6b:1e:b9:c6:fc:97:83:4f:1a:d5:
88:9a:c2:eb:73:02:9e:57:e8:63:29:11:ed:c6:b0:
69:66:37:28:3a:d5:ea:b8:b3:0b:35:8d:66:5f:78:
8a:80:68:2c:b2:c0:04:55:8d:75:cd:d7:1b:76:16:
a9:eb:69:ed:82:36:00:f0:72:4c:9a:c2:6e:6f:b3:
a4:4e:eb:e8:00:b1:0b:1f:0a:27:56:0b:0c:e6:f4:
fb:b4:3f:f8:2f:b1:14:9a:1b:d1:92:2c:cd:c0:31:
38:90:0d:fd:de:a0:6f:40:ff:79:2f:b8:6c:63:43:
c5:f4:a7:3f:47:be:60:e5:93:3e:b6:82:e4:80:06:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8E:05:E4:2B:AE:C2:5B:22:AD:EB:3E:A7:7B:ED:E8:40:8F:6B:FA
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:53:dd:1d:42:94:66:a7:bf:f9:8e:32:3c:eb:ea:0d:af:e0:
0d:9e:68:58:7e:5f:a5:b7:d2:55:81:9b:4e:31:f5:6c:b5:56:
11:fb:c9:6c:4e:55:e7:71:90:8f:2e:9a:2a:6a:e4:17:59:e2:
d8:d1:40:14:35:7e:a3:d3:47:dc:d6:aa:d2:d3:e8:89:50:98:
54:e2:d1:59:51:37:8c:2f:42:0e:5d:91:67:6f:16:7a:94:f0:
2f:d2:1b:dc:ad:68:b3:01:66:37:81:4a:17:0b:93:8e:39:41:
49:96:2a:97:57:a6:50:f6:30:77:e2:b6:b3:e5:2d:7e:57:5d:
f4:b4:39:6e:9c:4a:79:f9:12:4f:19:96:f1:89:ab:be:89:03:
27:e7:fa:57:91:8f:41:55:da:d7:fe:71:b8:6f:88:0b:29:f2:
54:34:20:7b:cd:cf:20:8e:47:2f:60:e4:4a:a9:b1:80:40:20:
df:37:2c:85:fe:25:99:80:0e:03:a5:5f:b4:85:ff:97:37:28:
98:51:7b:ec:ce:c1:16:05:56:36:6c:44:d0:ee:65:7a:d2:fd:
cc:c8:33:d1:ed:08:63:19:00:a9:f9:1a:2a:a7:35:1e:4d:63:
7c:b3:9e:12:8e:d1:d5:50:13:19:fe:4b:7e:53:dd:ec:72:b0:
38:fb:51:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:16:19 2025 by rpki-client