Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
File: iDa9j605PlExoCNykxWzVgFOZjc.mft (raw, json)
Hash identifier: 8IT/kVzLNIVXXjxIafUQclqh4w8EQ/M1+RW4lA4m6E0=
Subject key identifier: 49:19:F4:FF:11:59:A6:A9:ED:ED:DC:CC:B1:37:CB:C0:87:CC:AA:62
Authority key identifier: 88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
Certificate issuer: /CN=8836bd8fad393e5131a023729315b356014e6637
Certificate serial: 01976C61DC89AF36418E3EEA55A6C3A45CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 03:00:42 +0000
Manifest this update: Sat 14 Jun 2025 03:00:42 +0000
Manifest next update: Sun 15 Jun 2025 03:00:42 +0000
Files and hashes: 1: UKX34TFCd0figIbF32wm6M0tdxE.roa (hash: BFLvjvBRECITaOdgL/U7OU6npGQVInzdalw4vhrK37A=)
2: iDa9j605PlExoCNykxWzVgFOZjc.crl (hash: d9XA53oKd6SEOBsklIeGWoJJQhI1Fo3a9smSj/EIbuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:dc:89:af:36:41:8e:3e:ea:55:a6:c3:a4:5c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8836bd8fad393e5131a023729315b356014e6637
Validity
Not Before: Jun 14 03:00:42 2025 GMT
Not After : Jun 15 03:00:42 2025 GMT
Subject: CN=4919f4ff1159a6a9ededdcccb137cbc087ccaa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:47:e8:66:3b:6f:8e:21:0c:da:be:2b:ed:
c8:8f:71:52:60:99:20:c0:c9:48:8f:a7:f1:77:01:
25:f5:99:df:e7:2d:21:d8:f9:92:ab:be:f3:b9:a0:
f9:6d:9a:de:18:26:b3:6a:77:f9:81:0f:e9:af:e3:
ab:a9:8a:8d:1c:d4:9b:b1:b9:9b:7b:51:38:ec:8f:
94:17:90:95:90:c7:89:ee:b8:ca:77:d2:23:f0:c4:
ef:d7:08:f2:87:d2:53:6e:f9:e2:2b:ce:c8:1c:fe:
db:86:eb:fe:98:7e:e7:1b:5e:c8:f0:5d:74:fa:c0:
f9:58:f6:bb:23:a8:3b:ef:07:d4:04:a3:3c:ac:4e:
e2:d0:e4:b1:6d:87:d0:b2:7e:46:5d:93:91:9e:44:
7f:57:6e:cd:fa:81:87:a0:c3:b7:58:86:0e:2c:c9:
82:54:af:20:0a:1c:fc:e0:d2:cc:68:3a:e3:ba:5f:
f2:e4:27:35:a8:f5:7d:e1:74:91:21:48:1e:9a:cf:
1b:25:76:3e:b3:be:3d:ed:8d:df:89:70:e9:7f:66:
0b:49:41:4e:5c:ba:ec:e4:7d:d9:0f:51:a7:e4:ff:
a8:9a:0d:06:67:39:08:4d:0a:78:5a:99:0a:f2:fe:
ee:45:ff:cf:a4:2b:fd:12:3b:57:ea:9c:37:c0:09:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:19:F4:FF:11:59:A6:A9:ED:ED:DC:CC:B1:37:CB:C0:87:CC:AA:62
X509v3 Authority Key Identifier:
keyid:88:36:BD:8F:AD:39:3E:51:31:A0:23:72:93:15:B3:56:01:4E:66:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDa9j605PlExoCNykxWzVgFOZjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/129a5b-b7f6-49d0-95c2-12f9cb0a2118/1/iDa9j605PlExoCNykxWzVgFOZjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:5b:5f:9c:11:8e:cf:05:fa:74:fc:51:73:ae:79:c3:15:4e:
93:aa:af:9d:e1:02:91:24:ef:4d:6b:d0:9b:1e:14:9b:97:2b:
84:d2:8a:d7:e4:8f:fb:cd:68:79:01:60:09:83:b7:ea:31:64:
d6:73:4a:81:69:51:0c:bf:e9:e3:5c:4e:b3:e2:04:69:0f:72:
a6:c0:af:e6:da:74:83:19:ee:b5:ea:32:bd:27:9c:e5:b7:e7:
d8:92:b7:1d:fd:4e:99:01:e3:61:30:4b:19:7d:f9:67:bc:e2:
b8:a1:e3:ef:1f:85:fe:97:e4:ba:05:5c:88:4e:7f:f7:f0:dd:
3f:9a:56:db:56:20:82:97:02:31:20:6c:30:9c:a6:34:a5:94:
86:17:c7:1b:20:a2:e1:cd:66:99:f5:84:04:2f:88:de:c7:30:
73:80:49:be:cc:ec:5b:fb:40:45:14:5d:cd:6c:e1:f1:e2:94:
e9:6e:0a:8b:3b:a9:b3:69:6d:f9:2f:f4:e5:c5:37:11:83:4a:
61:9a:4e:af:ec:c1:83:3b:b3:cb:aa:79:a2:c7:69:c3:f8:ad:
d5:92:c9:ba:68:cd:3b:73:ee:59:79:74:32:3c:cf:4a:39:6d:
c2:a0:f7:b7:70:2e:06:18:9d:de:80:3d:87:d7:b7:fb:98:7b:
32:b2:b0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:46 2025 by rpki-client