Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: uU/pB7u84vW4EH7DcxAubMWJyyu/vxx2RQqQhQv3pbI=
Subject key identifier: 76:E6:E5:B8:24:0F:EF:E0:39:F4:EF:FE:23:33:49:92:FB:0B:C8:DD
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 01974BC491FA9065295A829B82C14953600A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 19:01:02 +0000
Manifest this update: Sat 07 Jun 2025 19:01:02 +0000
Manifest next update: Sun 08 Jun 2025 19:01:02 +0000
Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: bnfSWKPezXmDePD41yXYRNMy/CbqMoic5zSFRuMI7O8=)
2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=)
3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:91:fa:90:65:29:5a:82:9b:82:c1:49:53:60:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Jun 7 19:01:02 2025 GMT
Not After : Jun 8 19:01:02 2025 GMT
Subject: CN=76e6e5b8240fefe039f4effe23334992fb0bc8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:c3:4a:84:26:10:30:7d:44:5d:3a:6b:52:
46:37:7d:e7:71:79:68:1c:9e:18:41:9f:ac:2d:5d:
3c:12:83:ae:45:4c:ac:99:71:0f:2a:d2:35:fb:be:
8d:05:7c:02:5d:dc:63:3a:36:14:03:f7:4a:75:97:
be:00:a3:6e:8e:61:7a:fb:f1:67:00:4e:2c:aa:d5:
e2:ab:9a:85:a4:77:11:ec:0a:1f:91:d3:e5:da:00:
47:c5:2e:73:35:85:d6:2d:d4:cf:27:e8:a5:4f:67:
16:ff:8f:ed:82:bd:f7:3f:50:1c:53:bc:ea:a7:df:
bd:87:80:ee:56:1c:84:1c:de:fa:32:27:ea:84:3d:
69:cc:33:43:19:0a:fa:12:d1:95:07:a4:dc:87:c1:
d0:53:e5:08:30:15:af:dd:d2:10:4b:20:71:56:7b:
dc:a4:f6:26:0c:0f:93:14:5b:61:8e:98:6d:e9:c1:
bd:1c:0e:c0:4f:2a:74:f7:99:5c:a0:fb:1a:36:28:
b5:2e:67:10:a7:83:28:af:2f:4c:f7:21:fd:c3:5a:
7e:87:5c:37:86:a0:56:28:98:3d:e0:95:a8:29:19:
bc:35:bf:be:49:d7:a2:8d:3b:98:9d:44:3d:5f:8e:
ac:e4:e4:00:2b:9f:30:1d:d0:40:fc:38:c6:d0:7d:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E6:E5:B8:24:0F:EF:E0:39:F4:EF:FE:23:33:49:92:FB:0B:C8:DD
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:43:8d:74:24:6a:f2:df:0f:84:22:17:ac:e9:2e:69:02:e7:
25:34:65:3e:e3:38:26:4f:f6:ba:79:3a:7f:63:e4:4d:57:52:
bb:76:c9:bc:52:33:b9:da:83:ff:de:d1:51:58:f3:98:93:d6:
c4:d5:4a:8f:2c:dc:93:ac:e8:a7:5c:13:3c:76:d6:bd:51:03:
94:01:f0:a5:e2:d2:b9:ea:9e:f9:76:65:4b:7b:b4:3f:eb:32:
4c:5d:17:a8:4b:54:7c:87:c8:9b:9a:b1:d4:c5:7a:85:f5:83:
28:34:ec:cc:54:f4:a3:ed:61:8e:6f:8a:50:7c:b8:dd:44:5b:
b2:b5:4b:d5:19:50:b3:bc:72:4a:ef:94:f4:d3:e6:91:3b:08:
00:de:e4:16:bc:cc:d9:42:75:ba:31:71:e5:f6:25:21:4e:dd:
b0:9e:c7:bb:18:2f:2e:82:92:49:3b:a4:46:ce:85:95:ab:a4:
45:44:ad:11:8d:60:77:92:74:e1:0e:80:4c:63:68:4a:22:66:
fc:71:9c:79:30:ec:08:f3:4e:eb:a3:18:d6:7e:e7:cb:55:e8:
82:18:f1:af:9a:4c:0b:a0:62:5e:64:53:b8:b5:ab:d2:c6:54:
d2:30:a8:13:80:f8:a0:fd:5a:b5:4a:6b:a6:c1:c1:c0:3f:fe:
03:35:f1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:39:47 2025 by rpki-client