Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
File: 25uTnXvKE7bYzPTY54Z284B6Ds4.mft (raw, json)
Hash identifier: TRVKLLj2mWns5KBGJfNL7znxH+YhdOjgehK8CPeK/yg=
Subject key identifier: 15:9C:41:5E:1C:13:A9:BD:5D:D1:8B:E8:12:98:2E:7F:5A:80:93:67
Authority key identifier: DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
Certificate issuer: /CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Certificate serial: 01974E203F61A9E290C6E92CA7EB2B24F855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 06:00:25 +0000
Manifest this update: Sun 08 Jun 2025 06:00:25 +0000
Manifest next update: Mon 09 Jun 2025 06:00:25 +0000
Files and hashes: 1: 25uTnXvKE7bYzPTY54Z284B6Ds4.crl (hash: l8XLnV7VW6qT/Qp34VG+nXhah51wRuDhlRZfESPRGiI=)
2: XyXxjboBYyjYHHt440I3PeH_55A.roa (hash: JYhIRVkG4ujzYJD+uDVNYpcWTOse85vKsQC+DDjCC3c=)
3: noXpNkRfHqMEolb1UNkEr_hyFQc.roa (hash: ASAmiNjz6KvkdOlyEHukAH9TQpDjv4UIq4+yrxzbgY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:3f:61:a9:e2:90:c6:e9:2c:a7:eb:2b:24:f8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9b939d7bca13b6d8ccf4d8e78676f3807a0ece
Validity
Not Before: Jun 8 06:00:25 2025 GMT
Not After : Jun 9 06:00:25 2025 GMT
Subject: CN=159c415e1c13a9bd5dd18be812982e7f5a809367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:b4:9a:a6:e8:45:e5:38:db:54:20:d7:53:
51:fe:a5:1a:c3:60:f2:b4:2d:a1:2c:77:8c:81:1f:
28:ac:50:d4:38:b5:83:90:fa:62:21:5d:39:87:c3:
c0:0d:84:b8:7b:2c:da:e9:c0:ff:a3:05:fb:26:4c:
d4:37:16:58:6d:a8:92:ce:24:c3:ea:7c:61:99:0e:
b1:86:0c:c4:84:5f:88:67:6f:e2:f8:e5:de:6d:53:
91:e5:96:19:61:9c:f7:92:db:36:df:e9:31:1d:eb:
3f:97:ba:59:3a:ef:ea:97:49:ec:4d:8b:9b:57:6d:
db:b2:a1:6a:e2:a0:17:14:22:03:dd:68:28:7a:27:
2b:46:a1:50:63:74:d0:1e:76:19:0f:bc:a6:21:07:
77:23:45:bb:cd:63:c1:6e:de:0f:90:99:c1:04:d9:
d7:bd:98:a4:f3:83:9a:07:b3:4a:a6:1c:49:56:dd:
5c:5e:30:cf:5f:f2:92:09:02:cb:f7:2e:8d:a4:d5:
57:6b:6a:80:9b:97:95:61:90:2d:a7:5c:63:fd:c1:
af:91:ff:ce:48:51:a0:2b:32:49:83:6b:b8:f3:5a:
9a:30:ef:7b:24:14:f5:b2:ef:88:ff:cd:a9:6f:03:
94:77:ab:a5:44:ef:ad:8b:08:f5:eb:e9:d0:d4:b5:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9C:41:5E:1C:13:A9:BD:5D:D1:8B:E8:12:98:2E:7F:5A:80:93:67
X509v3 Authority Key Identifier:
keyid:DB:9B:93:9D:7B:CA:13:B6:D8:CC:F4:D8:E7:86:76:F3:80:7A:0E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25uTnXvKE7bYzPTY54Z284B6Ds4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/938330-ccd8-4e7a-821c-a69c5bc7ed57/1/25uTnXvKE7bYzPTY54Z284B6Ds4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:6e:65:04:f0:32:f6:a3:f6:57:a1:47:a1:53:0a:cc:67:88:
59:bc:a8:c9:5c:1c:ae:d3:d5:2f:a7:74:ca:4a:37:31:43:4d:
ee:40:0b:81:d4:26:3e:00:ff:79:d1:83:48:eb:20:3e:75:91:
00:a3:e9:ff:7f:4c:3a:1e:8b:60:59:ce:b3:0e:09:2c:cc:f1:
48:d2:c3:46:17:01:45:5e:68:55:d6:85:84:a5:10:a1:bb:c5:
d9:17:e6:9c:38:f0:94:58:dd:9c:3f:3e:08:b0:aa:b0:70:3b:
60:4d:05:57:8a:32:2b:1e:35:0e:98:36:94:54:17:a3:b8:52:
9b:db:de:77:77:c2:4e:3d:42:0a:10:cc:fb:b6:7b:09:77:67:
fb:78:73:c5:ac:b8:a5:32:6c:49:c0:0f:4d:d4:3f:02:ae:f1:
e3:60:c6:db:65:89:0e:e4:9b:a0:7a:8b:fa:06:e5:f1:38:a4:
ed:d4:5f:a8:cf:41:8d:c6:1e:1f:ee:ad:f3:1c:1f:21:bc:88:
ce:86:ef:1d:6a:03:fd:29:f1:70:f3:0e:45:22:9f:eb:fd:12:
a9:dd:e3:3d:04:d3:c8:67:9a:43:02:a8:e9:c6:cc:33:25:a3:
e7:ae:72:a5:58:da:68:0c:2e:a8:9a:2b:f7:ef:de:35:ef:46:
47:49:55:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:45:37 2025 by rpki-client