Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
File: 9EjuY_GdDB8ixvYc5Kgezqu455A.mft (raw, json)
Hash identifier: 5N4Tg+a+PvkTwlmPvlv6yCM58iZH1jD31PgeWO8JmNc=
Subject key identifier: AC:A5:6F:84:79:67:5A:19:31:CD:D7:B1:93:5C:87:7F:B0:42:2B:3A
Authority key identifier: F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
Certificate issuer: /CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Certificate serial: 019760950C20E053765157F131FE132854E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
Manifest number: 158A
Signing time: Wed 11 Jun 2025 20:01:09 +0000
Manifest this update: Wed 11 Jun 2025 20:01:09 +0000
Manifest next update: Thu 12 Jun 2025 20:01:09 +0000
Files and hashes: 1: 9EjuY_GdDB8ixvYc5Kgezqu455A.crl (hash: SFJi1s3gtdW2409Aim+UYdj9NRIUwk/Pl/nzA1xP5kg=)
2: B9CXmyFJNB3NRKLw7pcYD1T3USA.roa (hash: o1kjShDcQ5C/vUtm9CAhci51t+PYFYlIsERtctgtwmA=)
3: R22iI1mywVUVnDgDeyudtXDFOv8.roa (hash: EJnfxzuCupdtpPIwG2LRwVFupOoF9Zl3laDZ5Fu0Lzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:95:0c:20:e0:53:76:51:57:f1:31:fe:13:28:54:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f448ee63f19d0c1f22c6f61ce4a81eceabb8e790
Validity
Not Before: Jun 11 20:01:09 2025 GMT
Not After : Jun 12 20:01:09 2025 GMT
Subject: CN=aca56f8479675a1931cdd7b1935c877fb0422b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:ea:5e:9c:9d:ed:5a:92:50:d5:84:bf:2a:
5c:c0:35:49:9b:4e:65:26:a0:cd:ed:4b:56:00:68:
73:ec:8c:e2:3b:6c:75:ae:b5:a1:e4:2b:83:55:3d:
43:88:31:54:d2:88:1c:69:f6:f2:9b:1e:b7:ef:76:
8f:c9:7d:ea:30:55:13:ec:91:ce:59:82:a7:b0:74:
c8:21:48:d6:f7:c0:4c:dc:94:45:52:6b:66:99:21:
e3:73:18:dd:ff:37:c3:fa:df:79:b3:19:3b:0b:cd:
93:78:a9:65:fa:89:a2:ec:d3:21:99:20:a7:39:77:
d8:10:d3:0f:07:af:87:e9:64:1c:9f:42:51:c6:c9:
25:99:50:9f:c9:80:b9:29:4b:84:ec:91:1c:c3:80:
67:a9:66:89:6d:5d:09:94:37:49:94:fa:ab:c8:87:
3e:83:5d:f0:1c:87:32:c4:de:fb:89:8a:8e:e7:90:
c0:56:bb:66:e7:34:38:db:15:72:3c:14:1c:ae:24:
d6:52:4e:41:28:cc:aa:d8:70:08:b1:22:68:1a:4b:
b5:33:05:74:ef:61:d5:aa:81:9a:d6:58:f6:48:95:
b9:7e:c9:77:ec:10:10:97:3b:0a:db:f6:16:d7:6a:
88:a8:73:e7:50:d6:e0:c4:8c:da:fc:e1:bd:7c:48:
e3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A5:6F:84:79:67:5A:19:31:CD:D7:B1:93:5C:87:7F:B0:42:2B:3A
X509v3 Authority Key Identifier:
keyid:F4:48:EE:63:F1:9D:0C:1F:22:C6:F6:1C:E4:A8:1E:CE:AB:B8:E7:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EjuY_GdDB8ixvYc5Kgezqu455A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6401e8-82dd-4811-8011-719401bbca2e/1/9EjuY_GdDB8ixvYc5Kgezqu455A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d7:48:9d:09:6d:c8:ce:48:bd:d7:28:ea:e3:99:3f:31:68:
9d:85:b8:14:ea:18:7d:53:8a:82:c4:e4:1d:12:99:79:25:db:
6f:a5:cf:3f:9d:08:a1:b0:3e:46:f0:22:8d:56:f0:05:73:22:
a6:60:b6:f8:8a:22:9f:35:f0:de:fd:bf:d5:12:7b:25:4a:e4:
2e:b4:e7:95:30:d7:03:ff:c8:73:b5:20:cd:6b:d5:e1:a0:5b:
8f:1c:90:2d:d1:6d:1c:90:4f:47:19:1d:28:0b:ab:08:0a:0f:
c1:1d:e2:bc:f5:cb:08:f3:95:e1:d8:03:d6:3b:73:9e:f1:5e:
78:31:c9:eb:d6:32:d7:14:51:38:58:b3:90:67:9f:fe:f6:fe:
94:dd:07:08:01:e0:22:69:81:37:a6:df:31:4b:4b:da:24:c5:
d1:4f:2d:0b:6d:89:9e:b3:bf:74:06:0b:d0:06:b7:3d:93:fa:
22:c4:ec:57:4f:e7:84:4d:45:1a:5f:4d:52:03:70:cf:ca:06:
48:b2:0a:a9:fa:37:1a:51:4b:b8:da:ab:35:cc:23:6e:38:1c:
9d:ec:d6:b6:2b:e1:45:88:13:a8:27:3b:85:0e:5b:72:a6:d2:
38:24:08:90:ee:80:e4:a2:7d:e6:2e:a1:53:86:5f:a9:38:d2:
a8:bb:aa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:53:17 2025 by rpki-client