Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier: Q99o7iCBQe+ozCJ880lgR79UU6bhMGKgrifc9lxlofQ=
Subject key identifier: B5:BA:2D:39:52:1F:69:79:A9:CC:22:CE:6C:6B:41:68:E8:AE:C9:FE
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial: 019748C363D739E886E5F878906A8FA4AA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 05:00:53 +0000
Manifest this update: Sat 07 Jun 2025 05:00:53 +0000
Manifest next update: Sun 08 Jun 2025 05:00:53 +0000
Files and hashes: 1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: JbOukJhinp9HxzcSqCg9SdkAIX3mkyoSCQOQbsrLjLI=)
2: xCeuCdpHeZXyZn91vNpEgouKwNY.roa (hash: YgdYQ7c1msQKXeGAh4ZCZBOnjKpRZTljQq9qhsHOdSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:63:d7:39:e8:86:e5:f8:78:90:6a:8f:a4:aa:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Validity
Not Before: Jun 7 05:00:53 2025 GMT
Not After : Jun 8 05:00:53 2025 GMT
Subject: CN=b5ba2d39521f6979a9cc22ce6c6b4168e8aec9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:aa:5f:87:cd:d5:9c:e1:66:0b:fb:c6:b2:
b9:9e:3a:db:3e:bd:df:f1:9e:01:a9:88:1d:41:30:
bc:a9:26:b5:9c:25:65:99:ab:96:32:85:77:48:66:
a6:c1:4d:9f:b6:aa:45:c7:f4:18:8a:bb:9c:aa:ce:
57:5b:9e:10:30:13:3a:00:4e:f6:0a:5a:79:4d:9b:
12:cc:86:de:e2:35:80:11:f4:f0:55:fa:60:4b:f1:
54:41:69:9b:eb:36:33:17:7a:9e:84:63:cb:56:57:
d0:f0:d9:30:c1:37:89:24:ab:19:70:a8:5e:aa:5e:
2c:38:ee:8b:46:f9:60:6c:6a:e2:85:39:5e:b7:0c:
99:77:3f:d8:1c:02:9d:c6:5b:06:84:df:de:c9:5a:
f3:29:84:38:42:e2:b0:2b:80:29:75:0b:43:e9:0d:
b5:c7:00:33:8a:fe:19:0c:f8:89:74:88:1d:ee:03:
c0:f6:db:01:76:e9:2b:c3:cc:55:80:6b:c6:29:25:
a5:96:f9:1a:9a:70:0a:58:66:a3:c8:ad:a4:01:0f:
9d:32:65:c8:d2:ef:06:33:67:f6:32:4c:6b:3f:70:
90:ba:9e:a5:30:be:c4:d3:cb:d6:a9:7c:b9:76:d2:
a0:b8:9f:ec:78:f8:98:34:b1:d9:1e:5c:df:38:34:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BA:2D:39:52:1F:69:79:A9:CC:22:CE:6C:6B:41:68:E8:AE:C9:FE
X509v3 Authority Key Identifier:
keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f7:7a:dd:89:c4:ab:97:79:94:32:16:a3:d8:12:5a:43:20:
ec:68:68:8f:65:a5:0c:08:d3:82:80:94:b0:0c:bd:5a:60:4e:
c5:f7:56:b5:43:10:ee:a3:e2:7d:74:11:81:1a:ee:8a:90:83:
b0:cc:4d:7d:e0:a7:85:2f:39:17:7d:4a:23:97:95:a9:50:a8:
89:44:3b:62:5a:ef:c9:ce:fd:77:a9:0a:62:c3:45:ee:59:e0:
e6:da:c5:d4:f6:5c:be:1c:9c:88:61:02:c3:1a:3a:42:8b:f6:
0f:b5:bb:7c:ac:d0:b5:28:a5:c8:6a:b2:3c:12:47:33:23:eb:
cc:87:f9:1f:4e:db:86:92:bf:ba:6d:d8:db:c5:a8:7e:54:1a:
40:ae:58:ec:0f:91:6b:51:c6:2d:42:95:63:99:0d:8c:5b:60:
98:73:1f:fa:d1:70:36:cd:c2:33:67:06:6f:73:dd:31:95:b6:
66:f1:26:4b:a6:3d:2b:d2:27:af:25:6e:50:5c:b8:75:66:77:
09:16:7c:ae:ef:c0:c6:f6:5d:7e:2a:64:4f:4c:16:da:1c:14:
38:04:f8:dc:a7:08:6c:cc:b8:a6:6a:c8:e7:5d:f0:42:d0:85:
41:2e:e3:45:70:2d:d7:ec:0e:22:21:c6:06:8b:fb:5d:0e:75:
9a:ef:03:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:08 2025 by rpki-client