Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: LrfTYmGD02zVLfIMzqQGh7r+z1UZ3YvlMiPMwo6GwII=
Subject key identifier: 81:6A:1C:42:DD:9A:D7:2B:D1:C9:CF:FF:61:13:9B:70:0E:92:CC:10
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 0197711B20F3ED142577AC2CF5A0FC2FFD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 159A
Signing time: Sun 15 Jun 2025 01:01:32 +0000
Manifest this update: Sun 15 Jun 2025 01:01:32 +0000
Manifest next update: Mon 16 Jun 2025 01:01:32 +0000
Files and hashes: 1: 8tE73tTyc50FXb5YFWLLM8iDRuI.roa (hash: u90hDSgERXDnRD/Za5EPngqSUsaFRKPCGbCgiZ9sIyo=)
2: jNjUfwqgx7FxjC22ZM2tNJxUovE.roa (hash: CYjABvddLBiX5OMQlguXfrahjaGdNxRrjgGTFThsYz4=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: lEuusHG6w0iPJGwr8AcxJir+7La3h7kXJoPtTS+B5AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:20:f3:ed:14:25:77:ac:2c:f5:a0:fc:2f:fd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Jun 15 01:01:32 2025 GMT
Not After : Jun 16 01:01:32 2025 GMT
Subject: CN=816a1c42dd9ad72bd1c9cfff61139b700e92cc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:2c:ae:db:28:84:f7:91:f1:1c:89:46:8e:
76:fa:e0:63:07:c1:09:f3:ec:c2:3c:5e:17:98:e5:
c4:2e:4c:70:36:7a:61:5d:d5:0c:b6:79:57:fb:6f:
09:40:de:83:71:d6:7b:71:77:21:d8:76:04:8d:45:
6e:8f:5c:a9:df:4f:5a:f1:8c:53:3f:7f:5c:39:1a:
36:7b:b9:77:20:c9:b6:d8:6c:f5:2a:4a:3d:99:4e:
e7:64:bb:0b:bf:26:46:60:99:27:b6:04:17:65:f6:
86:38:06:4d:e1:40:e6:d8:16:d3:af:0f:c9:45:99:
c1:1f:74:d0:00:6c:1d:09:bb:14:96:75:c0:45:2c:
cb:5a:30:4c:ad:a6:e6:cb:40:3b:55:3d:9b:31:ff:
11:69:b8:b0:9f:63:4b:1c:6f:be:81:c7:6f:0d:ab:
1a:e1:93:07:ee:84:36:26:61:e6:9b:6b:0a:76:ce:
4c:b8:38:4f:77:e4:22:ab:c4:3a:60:d4:6b:b5:f1:
22:24:eb:f0:68:3b:99:9c:f9:e5:42:d6:b1:11:33:
ab:0c:b6:c8:ee:1e:d0:71:e0:f3:d5:fe:2f:ca:5c:
a6:c3:c2:a0:48:4c:f7:d8:76:7d:4c:d2:96:62:f3:
37:4c:64:f6:cb:0c:4e:2f:75:f7:83:be:8c:ba:02:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6A:1C:42:DD:9A:D7:2B:D1:C9:CF:FF:61:13:9B:70:0E:92:CC:10
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:79:04:8f:e7:2c:50:b1:92:b6:e4:1c:57:9b:c6:39:24:a5:
5e:3a:ef:e3:58:3e:97:c8:c0:8f:50:9f:27:3c:2b:8a:3c:d4:
4f:41:15:bc:da:25:75:e3:88:87:4a:31:88:cd:0e:dc:4f:fc:
5c:f1:4a:9a:40:e2:ed:6e:8d:ba:f1:09:29:55:19:07:81:3e:
bc:72:36:cf:74:6f:da:c8:c5:41:8c:13:e1:d9:14:53:d3:88:
6c:be:68:6e:05:a4:ef:e3:6b:06:02:bb:47:cd:c1:1f:1f:03:
d4:2c:8f:f4:67:54:59:e4:49:03:ce:1a:03:a8:ed:ad:05:e0:
92:e1:50:f4:4f:da:dc:0e:ff:bc:20:83:bf:18:d7:f3:f3:7f:
81:68:91:71:26:ea:b1:0f:7e:59:ca:72:52:c2:68:a2:66:ab:
92:86:1a:ab:fc:74:f9:e7:ce:c5:41:90:6f:e3:49:5c:8e:5e:
ad:41:d5:b0:36:64:ef:ac:05:25:dc:ff:59:22:64:b0:8a:8b:
41:71:75:5f:9f:64:0f:c3:5e:5e:68:5f:90:4d:67:b7:ca:8a:
44:6f:2e:d3:b1:d7:ef:bb:30:f7:2f:bf:7a:2c:40:09:90:5f:
fc:7a:08:4f:f3:6a:1a:fc:5d:68:2e:42:6e:ea:76:a1:80:58:
8e:eb:b8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:55 2025 by rpki-client