Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: kdczzbVgPWG/2kjxQyq64Fh4FIphDv2B0YdAeg4XE8Y=
Subject key identifier: FE:42:22:C3:12:8C:80:EB:8D:52:A5:22:30:0B:F4:02:B9:3D:5D:7F
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 019774897FD6FD9A0146D88A3D4FD6854A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1599
Signing time: Sun 15 Jun 2025 17:00:57 +0000
Manifest this update: Sun 15 Jun 2025 17:00:57 +0000
Manifest next update: Mon 16 Jun 2025 17:00:57 +0000
Files and hashes: 1: 5yD7BMGOx_QxkEbApVWEDtAyJTc.roa (hash: 7HUgyfi698gsVlFHfeKtkaA7m5SlO3zRzjiuZrYZF5I=)
2: RqGemHASq4a3yEktWB8WjU_L-0c.roa (hash: vaorPMqPLbSGClI0kn7HOZCELp91/Z7k6rtXVGnH8yc=)
3: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: owYtxzeFh+mmAJ3/lZ84bze7MhOTv4tzbCc0OOrTfKE=)
4: ryABSBgMLByw-XFfZ_8SVzjoEH4.roa (hash: Qmf/YZ6xzpzD9CwzHR2N62ZnpRrAxDW7s9aRsiehW1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 17:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:89:7f:d6:fd:9a:01:46:d8:8a:3d:4f:d6:85:4a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Jun 15 17:00:57 2025 GMT
Not After : Jun 16 17:00:57 2025 GMT
Subject: CN=fe4222c3128c80eb8d52a522300bf402b93d5d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:6c:36:79:d9:65:e7:c3:da:4e:bf:d3:50:
34:60:85:d6:00:2f:2f:07:77:d0:09:82:69:91:28:
d3:a6:24:36:31:ae:7c:de:aa:3d:60:fe:19:5d:ae:
c2:c0:6d:d6:85:bf:6b:f0:67:70:3c:c6:f6:0e:65:
d1:4f:3f:e9:62:25:a1:77:e3:4d:0b:2b:27:92:0d:
c6:b0:ec:ca:76:56:a1:be:a0:7c:93:b8:f7:e5:0b:
7d:eb:8f:3b:68:cc:c8:36:0c:04:65:36:90:76:85:
7c:d5:80:ed:ae:4d:41:81:b3:29:73:b6:61:84:69:
79:ec:9d:22:3d:7c:80:b0:85:ba:b7:00:24:47:b2:
36:72:2a:81:2e:23:c6:01:55:8c:9e:2f:88:75:30:
73:35:ae:60:87:98:40:95:42:1b:9f:20:01:fb:fa:
b8:5a:1a:63:60:8e:6c:39:dc:51:db:6f:3d:53:49:
92:97:84:aa:a8:f8:f2:ea:82:70:bc:f4:18:37:4e:
58:d8:e0:84:e2:b7:fc:ff:b1:0a:76:55:fe:80:bb:
39:91:87:af:b3:f6:92:13:70:ea:32:c8:e2:a2:76:
a0:8f:dc:55:56:13:71:89:57:77:54:fa:27:94:aa:
9c:47:32:9d:d5:54:d6:b7:f6:0f:7f:7a:9e:76:a4:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:42:22:C3:12:8C:80:EB:8D:52:A5:22:30:0B:F4:02:B9:3D:5D:7F
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:be:24:6e:e9:90:d6:7c:17:60:88:37:e7:77:39:c2:be:76:
e2:c1:60:ac:68:c5:be:fb:8b:fa:1c:fb:a8:9c:2e:de:ef:93:
37:4f:e9:b7:94:29:22:8d:a9:60:70:70:ae:33:f9:6a:74:8e:
62:2c:5f:28:41:64:d7:ca:b5:71:e1:06:7b:93:25:70:a1:a7:
02:62:0d:76:05:f3:c0:54:ad:84:29:2a:3a:e2:ab:6f:d3:31:
bd:9a:af:06:26:31:ea:46:07:b8:96:e4:87:b3:d6:d4:db:c3:
fb:e3:9f:97:44:0e:ea:84:3d:71:37:9b:02:ea:13:57:4c:5d:
40:f1:80:56:d3:04:92:c8:d1:0f:6d:c8:e9:1c:1b:62:88:fc:
c2:11:7a:f1:90:50:85:a3:e0:e6:ee:a1:f9:2b:0f:22:85:c5:
47:45:7c:64:01:14:b0:c0:ca:19:8d:2f:0f:53:e5:d3:4d:fc:
ba:f2:f4:03:cd:8b:89:07:b4:4b:06:88:1f:59:00:40:50:2b:
dc:d9:0d:dc:30:01:35:81:39:dc:6a:8e:3e:29:44:8d:c9:91:
df:5a:ec:9d:94:42:0f:8e:7d:07:d2:27:c0:1d:83:d5:20:5f:
7c:64:e0:0b:3c:77:81:2f:f4:d4:f4:e8:26:95:7c:cf:fa:bf:
85:5e:dc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:23:45 2025 by rpki-client