Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
File: A1NuGmjpRLI0eQi4vf53QNjoqkM.mft (raw, json)
Hash identifier: yKMRStJnrN8TMfCI5N2giAiVy+mA2qNlgM/hM0w8p7A=
Subject key identifier: 5B:65:E0:05:28:0C:5D:03:33:20:69:DD:B6:DF:3A:9F:5C:A0:27:09
Authority key identifier: 03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
Certificate issuer: /CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Certificate serial: 01976D7498456490F9FC16D3118238D12EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 08:00:47 +0000
Manifest this update: Sat 14 Jun 2025 08:00:47 +0000
Manifest next update: Sun 15 Jun 2025 08:00:47 +0000
Files and hashes: 1: 6IdqF_R3Y4Me0xt-XO3WDh6lBT0.roa (hash: nJO5IBDQ2MODS/Zojmv3q8UXuHQA1f7Z7pPIMcFUXg8=)
2: A1NuGmjpRLI0eQi4vf53QNjoqkM.crl (hash: jfRFm+WIKgsQPZdVyg417jVpM8wOA7KDGmzNtLIEn9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:98:45:64:90:f9:fc:16:d3:11:82:38:d1:2e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03536e1a68e944b2347908b8bdfe7740d8e8aa43
Validity
Not Before: Jun 14 08:00:47 2025 GMT
Not After : Jun 15 08:00:47 2025 GMT
Subject: CN=5b65e005280c5d03332069ddb6df3a9f5ca02709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:c7:f1:53:fe:14:6d:82:12:4a:20:37:70:
c9:ad:24:cd:3b:21:00:e2:b9:71:8b:37:30:47:c5:
92:8d:82:d8:a8:d1:37:62:1d:aa:1a:ce:42:0d:84:
26:b3:7d:be:23:90:f7:3c:4f:54:ec:c0:a2:89:bc:
84:cc:87:e8:a0:f6:c6:dd:d0:56:fb:2a:5b:b0:37:
32:25:78:c8:3e:07:5a:83:c0:68:1d:8e:57:59:ea:
84:34:f3:6d:d1:b2:18:76:93:e8:83:88:d5:d5:2e:
9d:8e:e0:aa:bd:1b:bc:52:3a:96:7a:07:16:d5:9e:
f5:4c:06:0c:0f:98:0f:de:b7:bf:f3:39:98:73:a4:
69:93:73:7f:a8:75:f9:35:0b:69:3c:c6:7a:e9:19:
9b:c1:cf:f3:d8:16:55:7d:51:1d:0f:17:6c:91:5e:
b8:65:ce:b1:98:b7:2b:c0:2d:08:27:b7:ff:e4:63:
a0:69:c5:17:e0:72:ac:c7:0b:58:d9:db:5b:a2:32:
6b:2d:3b:cc:2f:bd:af:66:1a:09:26:80:ff:ed:85:
90:8b:c0:a9:08:fe:01:15:a2:c2:4c:70:45:f8:83:
2f:31:fe:6b:b7:78:fe:cb:00:3c:bc:08:6d:4f:dd:
c6:f2:88:0b:38:70:1e:95:d5:2a:86:78:3b:58:48:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:65:E0:05:28:0C:5D:03:33:20:69:DD:B6:DF:3A:9F:5C:A0:27:09
X509v3 Authority Key Identifier:
keyid:03:53:6E:1A:68:E9:44:B2:34:79:08:B8:BD:FE:77:40:D8:E8:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1NuGmjpRLI0eQi4vf53QNjoqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/254ea2-974f-44b1-b239-5a377c8791f5/1/A1NuGmjpRLI0eQi4vf53QNjoqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:37:42:7d:5c:34:78:22:55:7f:cf:00:fe:ad:1d:c2:c5:cd:
6f:c6:5d:0d:8b:58:07:8e:b2:fa:65:80:bd:10:0a:8b:ad:72:
3f:ea:38:ed:74:ee:3e:77:a7:60:45:7d:a3:17:19:a6:db:2f:
dd:4d:5e:76:22:29:75:8e:97:6e:10:26:a2:83:39:2f:3c:c7:
6b:19:83:11:b5:3d:f2:31:37:a6:c0:4c:ed:1f:75:46:43:10:
8e:48:1b:25:88:f1:88:5a:65:96:1d:83:80:02:50:c5:6d:c0:
ba:c9:d6:42:98:4a:7c:4c:7d:86:4c:9c:d9:d7:8c:00:50:c9:
1d:12:91:6b:c6:45:1f:c9:43:c6:5d:05:bf:97:85:6b:a0:38:
a8:63:94:8e:35:cb:4c:0f:55:2f:a4:a0:7c:02:44:34:5e:dd:
84:a5:a8:98:2e:cc:18:10:c7:94:de:bd:79:e8:cd:76:79:81:
24:43:8f:af:1f:11:bf:10:27:1a:ee:f9:d1:bf:29:d9:72:74:
f8:10:28:65:af:ec:cd:fb:59:42:ae:97:9d:e1:66:48:f7:19:
f3:bb:40:61:65:86:a6:04:2b:b9:c0:53:e2:b9:bc:1b:66:59:
a1:5a:ee:72:a2:bb:09:08:bf:95:bb:4d:b9:64:61:96:81:08:
b7:6f:3f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:57:39 2025 by rpki-client