Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
File: x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json)
Hash identifier: mG5eH9NCCPSJIFc/27jvBZh/zo2z61inKIpVUNldcQs=
Subject key identifier: 4B:47:F6:80:66:94:35:EC:11:69:59:F7:45:A9:E0:CA:54:E9:F8:E5
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Certificate issuer: /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial: 0197B82118CF6C9F296BE9B36B56255F256F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
Manifest number: 157F
Signing time: Sat 28 Jun 2025 20:01:06 +0000
Manifest this update: Sat 28 Jun 2025 20:01:06 +0000
Manifest next update: Sun 29 Jun 2025 20:01:06 +0000
Files and hashes: 1: 6BkAjCciZdkVim2iQSRHdt1sfiU.roa (hash: ht4W9yWg20hMczJ5oRJNnUfqsbvH+S+TLA3MoaL5IE8=)
2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: PN5oNFAH6/flSQL4veT6fIWzch+sHLh0GAY7ut4N2yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:18:cf:6c:9f:29:6b:e9:b3:6b:56:25:5f:25:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Validity
Not Before: Jun 28 20:01:06 2025 GMT
Not After : Jun 29 20:01:06 2025 GMT
Subject: CN=4b47f680669435ec116959f745a9e0ca54e9f8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:d4:16:c2:72:70:fc:61:de:aa:d8:af:06:
3d:47:2c:63:97:db:60:ae:e5:d0:8f:86:d4:9e:59:
bf:70:15:0b:bc:23:84:aa:c6:7e:75:74:d1:72:43:
47:15:43:fd:e4:f8:e9:dc:96:a8:cd:41:e4:e9:da:
03:a7:d6:e1:f9:fe:31:00:1f:38:2c:bd:f0:17:f7:
d1:40:91:eb:f1:fb:d7:15:98:5e:ab:7c:da:3d:5e:
3c:96:bb:da:ed:8b:7e:38:8f:93:3e:9d:96:da:59:
33:b0:42:6a:9e:72:92:fc:dc:6f:b6:67:aa:ab:73:
4a:81:9f:3b:a4:79:0f:18:1b:3c:42:9e:32:42:fc:
5a:5f:8d:3a:72:fb:fe:f2:39:e5:ae:90:53:5c:3b:
7b:51:52:10:4f:42:3c:54:a7:64:41:6f:b3:8f:5c:
72:7b:62:01:e5:39:f0:ba:ee:32:25:88:a4:41:e7:
36:60:bf:8c:01:e5:8c:af:d7:82:b1:bd:62:c2:f7:
25:e1:72:34:5c:b4:60:40:38:ec:1c:40:77:9e:d2:
8d:4b:9d:32:03:0c:2c:15:8e:10:2a:02:fa:33:fa:
8e:45:9e:7e:6b:7c:fd:d8:9e:9f:9c:e4:a9:81:e4:
08:93:48:5e:19:d4:d4:77:97:6a:47:fb:72:9f:a9:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:47:F6:80:66:94:35:EC:11:69:59:F7:45:A9:E0:CA:54:E9:F8:E5
X509v3 Authority Key Identifier:
keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0b:d4:7d:52:62:03:20:b6:b6:c1:db:2c:43:62:59:66:80:
a5:d8:e6:df:7b:55:35:27:30:7f:a9:97:37:2a:b7:96:c4:ca:
7c:02:e8:89:d4:f7:2b:3d:bf:cb:f9:33:bc:69:9f:de:80:2f:
40:a0:26:47:38:22:40:04:89:a0:94:14:c6:c8:f3:19:62:7b:
1e:63:f3:d9:3f:5a:5f:a5:0e:ed:28:32:b5:39:71:af:0f:ae:
12:30:96:00:6e:d5:c5:fa:bc:40:ee:aa:3c:0c:64:31:7c:fe:
e4:cd:46:aa:a3:b5:29:02:25:a8:fe:0c:85:8b:96:80:99:bf:
0f:5c:2e:1e:40:f6:35:1c:9d:98:98:d5:af:44:cf:e6:c2:32:
15:9a:78:93:f7:27:6d:36:f6:a7:7b:9a:0d:0d:bf:59:b9:e7:
23:fa:a9:f2:1c:3c:8b:ca:9e:87:0e:7d:41:09:15:29:c8:c6:
7e:5d:a5:b4:45:c8:65:ba:42:a0:76:fe:f6:63:35:92:4e:e3:
6f:31:b3:3b:51:26:d8:14:6a:49:6b:c3:35:9f:4a:24:96:66:
c9:31:2c:a9:8d:ad:76:cc:33:0d:8c:4c:52:86:3c:7c:59:a3:
0b:59:bc:38:62:9a:c5:84:db:74:fd:a7:de:d8:94:69:1d:97:
8c:70:2d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:29:43 2025 by rpki-client