Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: 8hEGAuSPkynknTeGP/bugdTA4/GG63hxrVD4WIIfhnA=
Subject key identifier: 97:51:4A:7B:3C:14:DB:DB:D4:CC:DC:AD:1F:B0:FC:8D:DE:9E:C6:5A
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 01974CD746526490205C8E6E61AEF73B2A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 0DEF
Signing time: Sun 08 Jun 2025 00:01:05 +0000
Manifest this update: Sun 08 Jun 2025 00:01:05 +0000
Manifest next update: Mon 09 Jun 2025 00:01:05 +0000
Files and hashes: 1: UFy4W10oicxgmbeQ9Qsjx3EgCQo.roa (hash: duZf8h2S3aFjJNNyhBun9TsZgrWqDeY96HLWVCbzObE=)
2: V78L3J5oIjHVBChvXIOgu9Ohs78.roa (hash: CdwTBRVREg2srUT+l5SA7LltUlSHpLsaVjkjqAH9C7o=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: exMG9S1LXRT2HbhNt2hNu83FEgiZI9+wIBg6BKu2pMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 00:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:46:52:64:90:20:5c:8e:6e:61:ae:f7:3b:2a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Jun 8 00:01:05 2025 GMT
Not After : Jun 9 00:01:05 2025 GMT
Subject: CN=97514a7b3c14dbdbd4ccdcad1fb0fc8dde9ec65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:85:76:58:7f:9a:de:13:a4:cc:f3:f8:dd:0a:
e8:d9:28:53:ce:e7:5c:2d:c5:c1:e8:bd:7a:cf:39:
c4:12:d8:15:40:92:bd:0c:30:82:0c:f1:79:e6:19:
77:bb:fd:53:31:67:28:a1:63:7f:91:1b:3b:3c:6e:
3b:2a:fd:7d:b7:79:0c:67:46:56:f0:56:cb:6b:6e:
c2:e6:de:f7:fa:46:4c:4d:7d:57:d1:14:62:77:2d:
88:39:e0:08:08:4d:c3:d3:d7:89:0c:50:3f:58:1b:
e2:bf:70:be:27:32:36:b7:16:08:8e:da:14:89:75:
74:5e:56:63:e2:87:74:b7:cf:45:dc:ac:e3:81:0e:
ed:33:f5:d8:8b:09:65:12:43:23:d7:b8:8c:86:7c:
ff:1e:68:41:a0:29:a3:91:10:e2:4b:26:fb:bf:be:
86:c3:71:01:b8:9a:42:ed:61:89:c0:9e:26:91:27:
05:9c:72:f0:09:a1:57:58:25:c8:e0:b7:72:05:60:
a6:15:5e:08:55:00:d5:8e:ef:6e:ee:3f:8b:eb:a1:
80:d3:5f:e6:67:f1:ff:c8:43:12:de:15:19:29:2b:
cb:5b:b3:64:52:8d:82:66:ca:4e:50:7f:bc:b1:70:
8f:55:ff:a1:8f:64:d5:b5:11:85:fc:00:f1:b4:58:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:51:4A:7B:3C:14:DB:DB:D4:CC:DC:AD:1F:B0:FC:8D:DE:9E:C6:5A
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:63:79:d7:d8:bc:f3:45:dd:d2:4d:43:0c:2b:83:fd:9a:b7:
6f:ef:90:f5:5e:72:e9:4d:6c:75:53:86:a9:fc:ce:dd:35:86:
17:07:5a:81:74:ca:40:55:d9:00:8d:85:a3:40:c1:cc:1c:4e:
28:ec:b8:2b:27:d2:49:1b:df:5c:2d:38:c7:57:52:72:da:52:
96:0a:39:91:b4:d4:68:18:d8:48:f3:7b:b3:54:0b:44:fa:dc:
30:39:66:ec:d5:11:af:c1:5e:a3:b5:05:0e:9c:76:d3:0d:c1:
b1:9a:9f:af:46:d3:32:7b:68:bf:1a:3c:a9:fd:05:66:cc:ff:
5c:f5:cc:28:59:41:77:e2:f8:4a:4a:10:d1:90:97:67:73:7f:
5c:8a:14:cf:d9:b7:6e:06:f1:eb:d9:ae:6d:9e:18:78:79:70:
96:27:7c:47:e7:35:61:d2:8b:b8:17:f7:3e:30:3a:7d:56:01:
ff:5a:fd:0f:4e:52:b1:9f:03:b0:d0:ed:9c:cc:b5:2d:59:05:
06:6d:e0:a2:2d:58:14:81:c1:01:0d:64:46:cd:da:a2:b3:d0:
b0:28:ee:ad:52:9a:3d:86:bc:92:a3:27:9f:91:f7:4b:3e:b8:
d1:cd:3c:a5:29:10:de:3c:02:38:d4:89:db:64:c9:f4:8e:6a:
84:cd:97:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:54:15 2025 by rpki-client