
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
File: 52IQ44sWkJp-6P47jQZkfwZlKSs.mft (raw, json)
Hash identifier: l2OP+ADcIXL8Vv7yiMHD/EoKeEYCSXIdA0ynnoxjQMY=
Subject key identifier: 15:B2:19:DD:AD:C8:18:CF:E1:14:C7:9C:3E:D7:F7:33:50:DF:77:74
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 01974FA10123A2E6016366D6CD91B9621498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
Manifest number: 087A
Signing time: Sun 08 Jun 2025 13:00:40 +0000
Manifest this update: Sun 08 Jun 2025 13:00:40 +0000
Manifest next update: Mon 09 Jun 2025 13:00:40 +0000
Files and hashes: 1: 0O73PaTyLOlo4DtC-zfVh-so0po.roa (hash: 8d52pgK7PtxKWsBsAJptabjpB2sUfgsDROP6Cr/a/W0=)
2: 3cLja0Qn7ryI3brAvn_huolef7k.roa (hash: uL09pyaPRqlSpX4587/io6caQs2mRPwnhcXeei1t0Y8=)
3: 52IQ44sWkJp-6P47jQZkfwZlKSs.crl (hash: qkHS5YaV94YHdStYX4G8ECvlO2tEIX0yvlge03OA/Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a1:01:23:a2:e6:01:63:66:d6:cd:91:b9:62:14:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Jun 8 13:00:40 2025 GMT
Not After : Jun 9 13:00:40 2025 GMT
Subject: CN=15b219ddadc818cfe114c79c3ed7f73350df7774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:37:63:6e:8c:0c:a6:5a:45:24:58:83:f4:
99:9c:f8:9b:e2:62:fe:f6:7f:3e:25:a3:88:7b:18:
84:58:52:f0:16:12:35:8d:b6:b4:ec:85:16:51:3e:
20:12:f4:36:ad:e9:f1:ec:ff:3a:f2:0d:be:af:a6:
c9:aa:cd:30:fc:90:ab:2e:2f:59:64:16:80:21:37:
45:9e:57:c4:78:f6:81:d3:2d:31:b1:f1:b4:22:c3:
c1:9d:26:e0:43:54:04:91:5d:f4:e8:af:aa:3f:a6:
cc:bb:ae:02:0c:f8:0e:87:12:27:a5:70:15:0f:6a:
b4:58:62:41:f2:b9:e3:14:a8:ee:21:00:3e:c0:b5:
23:33:7c:a9:39:eb:5e:19:69:f8:8d:83:6d:c7:42:
02:25:9b:59:76:d7:e1:e8:74:fe:66:31:48:f1:d8:
77:db:f1:be:90:b0:ec:5b:39:3b:68:ab:4e:8a:8d:
87:e3:6f:73:79:90:53:56:bf:0e:92:61:43:e6:16:
42:f0:1d:94:ff:c4:7e:32:3e:1e:b9:e8:a9:c1:67:
99:38:92:77:d2:ba:06:a2:d9:e7:5f:75:f9:4e:1c:
7b:e2:bb:a4:b9:bd:eb:96:47:fc:40:e4:35:e7:c5:
a9:13:07:59:f5:ab:bb:a5:fc:cc:2f:c5:8d:74:1e:
c2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B2:19:DD:AD:C8:18:CF:E1:14:C7:9C:3E:D7:F7:33:50:DF:77:74
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ca:f9:68:75:28:6a:dc:eb:85:be:a4:a7:cd:dd:5a:f0:e4:
77:8d:f9:cb:8b:90:02:df:fb:f9:8f:76:c6:14:3c:b6:5a:f4:
5b:16:65:22:3d:20:8b:0d:f9:2f:00:c6:5e:70:44:7e:27:82:
64:a7:86:51:76:81:25:bc:33:7b:94:da:27:a6:8c:d1:e8:b8:
06:c0:c0:d3:b3:d1:be:69:34:4b:8d:02:06:8f:61:27:45:be:
3f:0a:88:dd:1e:f3:57:82:85:27:c4:df:03:d8:2c:1b:60:90:
14:29:57:27:74:6f:5f:f4:6d:22:f5:ef:af:1a:db:0d:3e:55:
26:b9:9a:24:8f:c5:90:30:8c:08:db:24:a7:1f:d5:04:f9:21:
bf:11:4a:c1:a1:f4:45:43:6f:d9:31:11:45:64:6b:c4:c1:5f:
79:8b:12:48:18:ec:e2:71:85:7c:c8:29:21:23:20:d6:32:34:
5a:a0:1d:69:2e:34:8f:47:fd:71:42:46:de:d1:fb:ed:82:9f:
b2:75:99:a6:bd:2f:ed:76:cd:1b:10:b2:af:0f:2e:cd:5b:ef:
ed:bc:cf:81:fb:3c:ad:06:2b:40:91:91:e0:b5:8f:ce:13:a1:
a7:9d:f8:b3:aa:ae:39:39:cc:27:40:b9:9e:ec:ed:32:f5:cd:
e7:80:13:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:40:53 2025 by rpki-client