Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json)
Hash identifier: I3Zh5vUPRLLUZHiv4mvQ+OfbzLjegCYw+CozLC9vmTY=
Subject key identifier: B7:C5:67:5E:10:09:26:15:4C:B7:F1:C5:90:F2:9F:BC:27:E3:65:70
Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Certificate serial: 019753EBBE383AFD33E4F3242B172650D81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
Manifest number: 159C
Signing time: Mon 09 Jun 2025 09:00:47 +0000
Manifest this update: Mon 09 Jun 2025 09:00:47 +0000
Manifest next update: Tue 10 Jun 2025 09:00:47 +0000
Files and hashes: 1: nd7EMYxqZskNG-8RUiwICJeXwqY.roa (hash: mY3khCwzfzEen/6QsaBVskA8rJ9h0QmksXwmEPcvkIM=)
2: oz9BBzN_BuPcGQT11NYYdsxnqjY.roa (hash: nvAXPeVrUMWzLRMYMGEkxTC8HsMJu8Sz1cS7HP/e1xI=)
3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: s8j1ZvW8MHd4qYds/6U5pRGP0Yk4fxKa1y8owjdU3gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:be:38:3a:fd:33:e4:f3:24:2b:17:26:50:d8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054
Validity
Not Before: Jun 9 09:00:47 2025 GMT
Not After : Jun 10 09:00:47 2025 GMT
Subject: CN=b7c5675e100926154cb7f1c590f29fbc27e36570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:9a:74:e4:ff:71:b7:98:1d:54:e3:90:86:
04:3d:ab:a8:40:0f:79:e8:c8:b2:90:1d:59:f8:7c:
52:26:5d:ca:59:9b:e9:42:22:a1:81:60:f2:fe:43:
f9:77:49:96:15:30:f4:66:99:3e:60:88:10:89:45:
4f:0e:57:08:c0:38:b5:15:3e:14:7a:63:a6:43:ab:
0f:a0:a1:ef:d8:9f:05:a4:55:c3:a1:7f:1e:31:bd:
53:b3:33:b5:d3:e8:01:7f:d9:c9:1d:e2:f0:1d:64:
19:9b:a7:a2:15:80:fd:5a:f1:e2:3d:33:ec:b7:d6:
d5:45:32:d1:87:3e:77:f5:dc:11:89:5d:3f:cb:e7:
1f:cf:84:eb:27:05:fa:c2:85:52:5b:72:4b:9f:aa:
ee:8a:6e:12:0d:78:05:f3:09:18:52:2f:7e:f6:a4:
ea:96:23:54:c8:e5:42:23:8f:be:7c:62:0f:ac:c8:
e1:58:f0:e5:a2:bb:0d:27:c7:8b:10:30:24:03:e3:
e2:89:00:96:74:6a:3c:b7:31:44:8a:c7:a7:a5:87:
d7:3a:ef:cf:b0:de:9b:ca:0c:2a:2a:78:d2:89:a1:
ca:fd:26:c9:d4:ff:6d:36:ef:59:6a:f7:20:49:6b:
49:ed:78:1d:f1:39:e2:72:00:51:85:6e:99:b5:60:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C5:67:5E:10:09:26:15:4C:B7:F1:C5:90:F2:9F:BC:27:E3:65:70
X509v3 Authority Key Identifier:
keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8b:cd:ff:d5:d4:19:33:97:5b:62:c8:83:4b:b4:a6:43:7c:
4c:5e:64:d6:bb:a9:1d:99:da:de:76:90:b6:6c:5a:cd:db:9a:
b1:51:a8:49:ce:5b:d1:d9:a2:b1:e2:cb:64:dc:7b:aa:71:b2:
9e:68:0b:97:b8:1c:e7:15:f6:9f:24:f2:97:7e:0c:c7:bb:95:
9e:2b:e8:59:b4:30:5f:c1:45:88:45:f5:8e:c3:61:2a:fe:0b:
74:b9:b5:34:d6:36:7c:d1:ee:fa:02:98:2b:b7:4a:17:3c:a7:
b9:0a:fe:10:2d:a9:cc:c9:80:03:8c:93:fe:c5:4e:85:36:52:
05:28:a6:61:7a:0a:59:cb:71:34:79:14:ad:47:97:31:b5:e2:
b3:9a:0e:e1:7e:96:70:92:9b:ce:de:bc:17:ae:b4:b4:df:fb:
3b:58:7f:4c:e2:97:72:c8:5e:b1:38:3f:72:28:bf:b8:c7:09:
0d:3e:ee:8e:34:9c:e6:01:74:54:77:57:5d:80:57:f9:49:54:
68:e9:06:b5:19:fe:39:3a:c3:fd:50:05:ba:dc:66:72:96:46:
85:d5:6c:d3:37:d5:0a:90:88:2c:3a:52:56:64:6c:ea:40:5b:
23:ed:ed:8f:6c:3e:ba:82:a1:03:7f:ee:97:b6:83:5a:dc:6c:
c1:1a:94:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:16:43 2025 by rpki-client