Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier: 0iYbLgyttCB9dBaIrSvCwndldc7QKIOLdqwiFnjCvDA=
Subject key identifier: F3:28:41:6F:4E:20:FC:29:57:7C:2C:AF:05:E9:40:95:57:9E:6C:B2
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 01974F333B0F168FEE396A11BE2AC19B7670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number: 158D
Signing time: Sun 08 Jun 2025 11:00:46 +0000
Manifest this update: Sun 08 Jun 2025 11:00:46 +0000
Manifest next update: Mon 09 Jun 2025 11:00:46 +0000
Files and hashes: 1: Z9hqFRirUe4P1_J6cnVrlFkJUwM.roa (hash: 1rB513D+oaDkVMZd5WQl+V38WfLdjvRgbt7ShIhiM3k=)
2: eldr0Gd72QMDJnfB5g3XkvXB5MA.roa (hash: TtEGiXJhnS9J3b71Jc1YsSME+mGa0e8iTuBkAI+Nugs=)
3: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: d4KHOu8YPah/N8a3fikeGTmOHP2WuH3UaIWMaYuOTOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:3b:0f:16:8f:ee:39:6a:11:be:2a:c1:9b:76:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Jun 8 11:00:46 2025 GMT
Not After : Jun 9 11:00:46 2025 GMT
Subject: CN=f328416f4e20fc29577c2caf05e94095579e6cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:68:d3:bb:cb:bc:06:5f:e7:09:81:2d:dc:
35:76:28:fc:ae:fa:63:76:03:51:36:84:af:c2:85:
a7:37:7a:d2:d4:75:84:33:24:a0:bc:48:79:22:16:
40:a9:2b:c7:30:db:12:23:00:35:0a:c3:e8:06:67:
f4:e1:4b:c7:5a:99:38:2a:31:49:ff:74:83:4c:ed:
2c:71:22:f7:6c:34:99:99:89:ab:b3:31:b2:f8:b0:
df:0e:c7:d8:45:ec:96:88:8d:15:f9:c6:54:13:4e:
7c:1b:2d:43:b6:2a:14:6f:2e:e5:20:d4:c9:bf:cb:
6f:6f:08:0b:86:f9:cc:87:67:b5:d6:97:f4:b7:10:
0d:2a:cb:53:19:64:fe:db:2e:be:bd:ab:21:7e:5a:
c9:3b:0f:dc:6f:a3:5a:9b:4a:fa:ea:9c:df:10:b2:
7d:98:2e:bd:d5:06:f0:0e:52:83:c6:ab:a2:73:16:
13:42:52:07:e2:9b:8c:cc:0d:5a:c8:1d:92:12:27:
1b:f8:9a:62:24:eb:69:8a:07:80:20:9e:32:9b:2e:
d9:22:d8:25:bc:4f:be:4d:dc:56:ce:c6:27:9b:a1:
58:34:3f:31:ce:06:7c:81:e3:8c:b3:78:2f:6a:bb:
b5:37:16:ee:92:86:f1:03:2e:bf:40:0d:55:0a:30:
ab:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:28:41:6F:4E:20:FC:29:57:7C:2C:AF:05:E9:40:95:57:9E:6C:B2
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:75:fd:44:5c:b6:cf:c4:e3:ae:ff:ce:a2:7e:c3:75:8a:42:
ba:f4:47:38:41:8b:82:e5:1e:2f:da:f2:31:be:f8:09:91:55:
c9:57:00:49:64:99:ff:75:ac:77:a3:14:38:3b:c1:44:bd:e6:
e4:26:64:54:48:80:6f:13:f5:b0:d2:97:9c:5f:c9:81:14:24:
7b:cc:c0:d9:f9:06:d5:71:05:8c:1c:9a:b9:f1:f3:02:04:9c:
02:d4:9d:62:e8:f4:63:38:cb:95:1c:d8:fb:21:ff:df:97:ef:
ab:fc:7d:7b:ec:56:cd:0d:2e:61:59:aa:fa:dd:40:e1:32:96:
b8:a2:50:8a:0b:66:d3:ad:36:25:1a:6e:82:d9:d0:68:ea:73:
7b:42:f1:a5:44:29:22:87:f1:9d:72:18:52:78:d4:dc:4c:1a:
be:eb:8b:6d:3b:93:3d:7c:38:f9:75:83:6c:f9:1d:9f:75:26:
45:f6:20:b3:dd:59:c3:c4:b1:80:78:b8:5e:a7:f0:3d:08:60:
9e:54:89:37:78:f7:1c:31:82:70:ba:50:47:22:e8:4b:05:13:
88:2a:a3:a1:e5:eb:b2:70:19:88:82:3a:9d:2b:7f:8f:b8:89:
94:b2:ee:6c:54:0d:de:fd:b8:bd:ca:b4:bb:8f:cb:e2:97:85:
99:4e:d5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:47:51 2025 by rpki-client