Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
File: 93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft (raw, json)
Hash identifier: N28Oze3lYmUVPa3dRP69feiDtq6bVWhQtNomEoO5Kpw=
Subject key identifier: 6B:D1:12:2C:A5:75:88:1E:F9:59:73:16:22:3A:1B:46:30:BB:3A:F2
Authority key identifier: F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
Certificate issuer: /CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Certificate serial: 01974931A0FD678B446A838DBE573FAC8294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 07:01:18 +0000
Manifest this update: Sat 07 Jun 2025 07:01:18 +0000
Manifest next update: Sun 08 Jun 2025 07:01:18 +0000
Files and hashes: 1: 93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl (hash: Icqoko9qGVOtB6PByVWl3Ai2kDo0/Yb94IbnXADdQEM=)
2: J5xD8x8Eiwgy4zGdsrXk1K8DYiA.roa (hash: 7newoFO3EDGu7SMDbRmvP5ZCWRW7z0PexC6y00oZBYU=)
3: pzjmaLlAYg1GtB1-BPGxf_97w2k.roa (hash: TucPjnv7DB9fKhYA4FsUC+p2EKxC7XMfjGbXhyo7OXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:a0:fd:67:8b:44:6a:83:8d:be:57:3f:ac:82:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77390fc61608c01785d1a80685ae9e56a5b2583
Validity
Not Before: Jun 7 07:01:18 2025 GMT
Not After : Jun 8 07:01:18 2025 GMT
Subject: CN=6bd1122ca575881ef9597316223a1b4630bb3af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:a4:0a:8e:c4:b8:5d:5c:50:55:b0:8c:a5:
e0:54:f1:e2:bc:c9:c7:c8:34:a1:ff:cc:2b:e5:34:
38:28:65:d7:c2:51:36:78:9a:2b:da:c3:7d:ac:0a:
70:85:61:51:f7:17:82:3f:3b:69:c6:37:88:df:7a:
a7:19:c7:52:77:be:0f:01:dd:f7:cf:d8:c6:0c:84:
a2:16:5b:a7:9d:31:db:d0:38:c6:6e:be:07:4e:31:
ed:5f:3b:b5:82:1a:44:29:b0:92:30:40:1b:c5:f7:
d7:fc:08:77:57:b5:9e:0c:5d:60:75:64:fb:52:71:
ca:4d:b5:ce:fa:b2:2c:19:88:4e:94:eb:5d:e5:0f:
bd:66:70:4d:99:c3:b6:58:21:ce:6a:60:6a:40:9b:
bd:34:aa:ec:12:d2:91:53:63:88:99:94:01:6c:2f:
da:e7:bb:1d:6a:6d:20:e3:c1:3d:1e:20:50:1d:ec:
2b:fa:d8:33:6f:94:5f:ab:92:30:f1:03:0b:78:15:
27:90:5c:21:38:63:b5:4f:6d:90:b4:a0:05:a4:7d:
69:1a:50:35:99:6f:f0:7d:b2:6b:f4:1b:91:02:f8:
a8:53:55:08:5b:43:ef:f2:38:19:23:b8:fb:33:37:
70:af:a0:f1:4b:c2:88:5f:37:52:03:d0:80:ab:cd:
24:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D1:12:2C:A5:75:88:1E:F9:59:73:16:22:3A:1B:46:30:BB:3A:F2
X509v3 Authority Key Identifier:
keyid:F7:73:90:FC:61:60:8C:01:78:5D:1A:80:68:5A:E9:E5:6A:5B:25:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93OQ_GFgjAF4XRqAaFrp5WpbJYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/6568c6-7dd8-441a-802f-63abf6198f58/1/93OQ_GFgjAF4XRqAaFrp5WpbJYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a6:90:a3:82:b7:2f:0d:ad:0f:f0:ce:1d:22:40:e5:c2:fe:
62:48:69:ec:87:e0:d2:2c:de:49:1a:12:35:4d:eb:18:06:68:
eb:90:ce:36:01:7a:2d:f4:c8:39:18:a4:27:ed:e8:50:b7:35:
a3:f6:39:7a:09:0b:41:75:09:d7:5f:8e:97:17:e6:01:ea:f3:
fa:d8:f4:a5:93:35:4c:01:48:57:45:dc:d1:98:92:1c:66:ca:
dd:f0:21:2c:13:18:4d:a0:e6:5c:11:89:ce:5b:5a:e8:2f:8f:
d9:f8:d0:e5:b9:ff:e3:90:14:4d:10:89:aa:ca:34:2b:66:2a:
9b:0f:4c:2d:05:8b:d9:64:9b:3b:36:a1:24:2c:f4:2d:d0:e0:
a9:cd:3e:b2:b2:0d:27:db:85:9a:44:1d:f5:e0:f5:5f:ba:2c:
80:12:95:41:bf:01:ce:36:60:f4:2f:8f:08:6f:53:9a:a6:36:
f9:cd:ff:86:ee:5f:21:ab:37:28:d3:17:11:6d:28:ff:f4:f6:
34:1a:0d:9f:6e:67:ff:00:bd:81:2a:83:10:ab:1e:0e:15:7c:
95:b6:98:ad:45:e4:76:60:45:f2:de:8b:b7:df:b2:6d:a0:bd:
f0:9a:ba:3d:e5:bc:9e:f4:06:43:2e:c0:42:27:0c:d0:30:ee:
52:d7:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:15:36 2025 by rpki-client