Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: q78tJbzhSLq1yrQkA5oxL8BTz1HkCK5TgqXdE3QAnjU=
Subject key identifier: 9D:22:55:17:DB:9B:CD:A0:49:08:B3:FF:C3:C0:96:58:EB:4E:B6:B0
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 01976F6324348CD421ED4B56472017F20261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 17:00:57 +0000
Manifest this update: Sat 14 Jun 2025 17:00:57 +0000
Manifest next update: Sun 15 Jun 2025 17:00:57 +0000
Files and hashes: 1: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (hash: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=)
2: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (hash: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: Q6JWnbxSPiQ2/KWNVylG/6dkse5RfZ+HsuSzslFb+mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:24:34:8c:d4:21:ed:4b:56:47:20:17:f2:02:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Jun 14 17:00:57 2025 GMT
Not After : Jun 15 17:00:57 2025 GMT
Subject: CN=9d225517db9bcda04908b3ffc3c09658eb4eb6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:f2:3e:ff:c0:7e:55:bb:81:99:c1:25:b0:
a7:23:b4:ff:6d:b9:13:3c:ad:18:ef:2a:88:0e:a7:
09:e5:c9:9d:ee:23:68:85:2f:b2:81:be:02:90:52:
74:5f:49:80:6f:29:d7:9c:9a:38:30:f3:2d:6e:9a:
f5:2e:96:9d:5f:97:1a:07:55:fb:85:5b:7e:4b:b6:
17:9b:45:fe:32:b1:e1:6a:67:52:55:c4:fd:92:12:
fd:c2:ac:6c:7d:d3:bb:f0:84:c7:97:f9:b0:b4:1d:
64:02:9e:a7:91:c8:d6:33:61:ef:66:d0:87:0b:46:
d4:3b:70:54:01:4b:c9:77:03:13:63:84:d3:99:8f:
d8:e5:60:70:c1:39:5f:20:33:d6:45:b8:e6:99:88:
2b:7b:2a:3b:5b:28:a8:af:07:8d:59:52:c8:75:a1:
1c:d7:f4:de:0f:68:d7:94:d9:02:83:69:b6:af:ca:
b3:d7:70:0e:f7:eb:c7:bd:d8:1e:1a:61:f5:91:ee:
10:1e:76:76:46:1f:af:98:b2:52:5f:f8:5f:99:2d:
3e:95:14:59:b2:ea:e3:7b:a5:02:97:e3:b9:1c:86:
1a:c8:d4:3e:bd:f4:01:89:b3:5b:36:6e:94:b2:91:
43:c0:23:77:96:64:10:40:26:03:1f:e9:14:a9:e0:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:22:55:17:DB:9B:CD:A0:49:08:B3:FF:C3:C0:96:58:EB:4E:B6:B0
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ad:14:a2:bb:8a:ca:ea:f1:12:bf:a9:3e:09:8f:5c:9f:b6:
1c:9e:e9:ed:fb:0a:0a:b9:1f:66:0e:6c:d8:7a:f5:dc:28:6c:
98:f8:48:8e:9e:5c:13:48:62:1f:15:7c:f6:2f:34:79:2d:61:
b0:f6:50:64:2c:af:ad:be:88:3e:5b:7e:d5:d5:94:a4:24:ef:
27:97:44:f0:2c:8f:b0:71:9c:e8:11:12:e6:9f:a3:06:5e:fd:
4f:6a:6c:23:3d:08:44:8d:be:48:ad:99:64:00:a6:5e:12:b3:
c3:96:43:2c:a3:d7:ee:47:99:ab:cb:60:36:76:c0:36:74:6a:
c0:bd:28:b5:42:50:e0:11:b6:de:b9:56:50:22:78:6e:0f:de:
ab:c5:ee:8a:2f:ca:32:47:f1:15:e0:35:6f:24:eb:77:c1:6b:
2d:27:bd:09:d8:03:e7:71:39:21:0a:e0:b3:a3:0f:4d:60:8f:
02:bf:de:78:ef:63:8e:26:30:f5:9d:a6:a0:72:c9:d4:8e:fc:
ae:a6:c9:40:7d:1d:d6:10:3e:56:a0:e1:75:9c:75:77:fb:04:
f2:c3:db:d4:39:fb:aa:1f:7f:e1:7e:ec:58:02:2b:2b:ee:59:
ab:1b:cd:b1:40:7b:45:79:8b:fe:d1:5e:43:16:c0:58:65:b7:
d5:47:9c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:19:56 2025 by rpki-client