Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
File: riYajfUykscw4q4d_PxP4_92sdA.mft (raw, json)
Hash identifier: ES/Q7Hp6g77VWL7mFjaHdLcGu+TEW+ovuNmlvMIbhWg=
Subject key identifier: BE:64:B5:36:D9:E3:B9:C6:F9:33:EF:F4:9E:05:02:4F:BE:A5:18:8F
Authority key identifier: AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
Certificate issuer: /CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Certificate serial: 019779786CDD482D624F7EE5CB02FD587878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
Manifest number: 159C
Signing time: Mon 16 Jun 2025 16:00:24 +0000
Manifest this update: Mon 16 Jun 2025 16:00:24 +0000
Manifest next update: Tue 17 Jun 2025 16:00:24 +0000
Files and hashes: 1: riYajfUykscw4q4d_PxP4_92sdA.crl (hash: M6JTMJnHbp5Tin9IbA8akxoMpDvhK2SiK5H4kJF29Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:6c:dd:48:2d:62:4f:7e:e5:cb:02:fd:58:78:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae261a8df53292c730e2ae1dfcfc4fe3ff76b1d0
Validity
Not Before: Jun 16 16:00:24 2025 GMT
Not After : Jun 17 16:00:24 2025 GMT
Subject: CN=be64b536d9e3b9c6f933eff49e05024fbea5188f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:6b:c0:04:d8:3a:db:b8:54:6b:d0:00:11:
a2:9c:1d:cc:c7:c3:6a:e4:a2:8f:d6:6f:65:52:52:
dd:90:7e:7b:10:f8:36:a6:5e:28:61:4c:03:ed:71:
9f:2f:6e:70:75:43:ff:5a:2c:a3:5d:06:b8:2a:e7:
87:a7:a8:e5:1c:6d:97:29:63:cd:42:50:a8:15:3a:
d5:9e:b2:bb:17:45:b0:37:3c:79:9d:6a:26:66:7f:
33:7e:41:64:3e:11:28:4a:1c:53:e6:92:0b:d0:28:
97:f8:7f:78:8e:e8:29:4b:e0:67:69:08:14:d5:20:
b3:cf:c3:78:af:b7:60:03:40:26:68:37:2c:c8:56:
c0:36:6a:63:31:3c:8f:25:22:e9:c2:48:ca:12:29:
69:a9:cc:2c:01:15:3b:b3:0e:0f:08:f9:11:24:16:
3d:76:5c:02:f8:63:6d:cf:61:76:66:9d:76:62:a1:
fa:ac:30:66:95:5c:63:79:ec:71:6e:62:6d:3b:3c:
26:af:d4:5f:ff:48:bd:a6:29:9e:1c:f6:c2:91:03:
ec:b0:55:cc:a7:63:95:8b:c7:27:0a:b8:59:b0:e3:
f3:c7:92:97:3f:26:23:e9:af:c3:d4:a3:1f:8b:f6:
67:03:fe:12:10:54:ad:0d:59:33:20:5b:37:66:2c:
b1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:64:B5:36:D9:E3:B9:C6:F9:33:EF:F4:9E:05:02:4F:BE:A5:18:8F
X509v3 Authority Key Identifier:
keyid:AE:26:1A:8D:F5:32:92:C7:30:E2:AE:1D:FC:FC:4F:E3:FF:76:B1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riYajfUykscw4q4d_PxP4_92sdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/1a849e-861c-4c4d-bcf4-5695d89d7b36/1/riYajfUykscw4q4d_PxP4_92sdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7e:b2:9f:93:ce:ae:1e:31:62:1c:c9:73:c5:85:48:22:cb:
88:91:ee:2b:06:71:55:5c:81:a6:f6:a9:09:ba:c3:6f:bb:2f:
ab:a8:8c:72:dd:2e:81:e5:e8:bf:63:7a:72:f8:a4:99:1d:d5:
32:22:bd:62:e2:99:2b:a3:78:54:3d:88:79:cf:9a:e7:d6:cb:
a0:a0:80:1f:8e:59:70:fd:35:d2:a6:88:10:bf:b4:de:8e:95:
47:d1:55:c6:e4:a0:de:13:f3:4d:c3:68:18:32:9e:3f:e7:d2:
fb:6a:5b:d0:04:76:3e:71:7a:af:f8:15:cb:50:c8:f0:31:ae:
06:7e:57:4e:cd:71:99:50:aa:60:53:d5:a1:15:ac:71:54:c5:
f2:9b:2e:67:84:da:ef:0a:92:3e:56:20:90:e7:b0:5e:2f:1c:
4b:9c:a7:41:c4:64:1d:4c:d6:b5:58:8e:fe:18:dc:4e:68:25:
a3:0f:34:53:59:b6:d6:af:72:f7:af:ec:51:50:9a:50:89:b0:
1b:4c:86:63:29:28:52:ad:c1:11:90:9e:9b:eb:68:ea:95:eb:
da:92:d3:c6:8b:9f:52:bd:50:0f:a9:97:4f:52:1a:8d:0f:5e:
11:bc:c7:fe:b4:de:8a:61:d5:42:85:57:d7:ac:5f:4b:bb:f3:
a3:52:55:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:26:05 2025 by rpki-client