Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: OIFWrEKYCpo8AkOFs2kTFmquOK1k775biZ0RpdYjnXU=
Subject key identifier: 9F:27:E9:FF:86:C5:8D:41:3A:97:74:88:B3:85:1B:C1:BE:42:6F:AB
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 01974AE846F3C2F95A808ACBFD411811B6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:00:25 +0000
Manifest this update: Sat 07 Jun 2025 15:00:25 +0000
Manifest next update: Sun 08 Jun 2025 15:00:25 +0000
Files and hashes: 1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=)
2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: WfCqNDPQ0idceQX1BG54AqbgVGvXaciHQn8yWwTdBV0=)
3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:46:f3:c2:f9:5a:80:8a:cb:fd:41:18:11:b6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: Jun 7 15:00:25 2025 GMT
Not After : Jun 8 15:00:25 2025 GMT
Subject: CN=9f27e9ff86c58d413a977488b3851bc1be426fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:82:88:eb:ad:57:c7:9a:38:3e:93:2f:6c:
65:d4:3f:d8:41:29:67:86:eb:7b:0b:5e:c3:d8:76:
39:d5:08:92:12:e1:ac:13:45:7c:12:f0:29:7e:a1:
35:46:00:33:f6:6e:c5:60:bc:b1:a3:0a:50:20:cc:
a5:46:b7:93:00:eb:02:28:de:eb:e6:21:82:1f:75:
4e:e5:8a:f3:a3:6d:b5:1b:ac:d3:11:b0:04:ae:f9:
9a:84:52:2f:54:f8:e4:af:e7:ef:23:5d:d7:3d:59:
08:00:da:49:5b:7a:61:29:a8:bb:3e:93:f1:de:3c:
91:48:6f:e0:70:38:74:99:12:59:02:76:de:41:e0:
e5:60:0b:6b:e8:bd:e3:19:90:46:7e:c2:1c:a6:66:
fd:87:42:f9:f5:8f:b4:80:ab:95:36:3f:43:94:af:
51:45:58:c2:f0:a0:3c:28:69:5d:e7:83:fe:7f:a4:
51:ab:7f:54:14:a7:32:36:9a:ac:8a:4d:d4:77:a0:
ac:4a:68:d6:8b:0f:bf:29:8f:85:c5:83:a9:f7:b8:
d8:81:66:ac:c5:df:47:22:b5:93:20:bf:0f:04:4b:
27:b5:98:5f:28:5a:8f:74:34:26:08:d6:79:49:5a:
db:93:1a:ae:1d:43:07:5c:f7:f2:c6:83:d7:bb:57:
0e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:27:E9:FF:86:C5:8D:41:3A:97:74:88:B3:85:1B:C1:BE:42:6F:AB
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ff:31:a2:d7:a9:6c:30:8e:6c:82:29:7b:9e:4a:09:a3:38:
b6:bb:f5:49:4a:24:1b:4b:b6:ff:ee:f5:86:17:35:27:1e:f3:
b3:8b:dc:77:73:74:75:26:7c:db:01:2d:12:f9:84:7e:a6:ef:
9d:45:57:61:eb:f8:37:a9:55:56:1c:e8:63:39:4b:15:57:eb:
fb:7c:42:16:c9:ef:3e:42:7f:b0:1d:87:8b:2d:d4:7f:fe:61:
0f:b1:71:0d:bd:c9:9f:48:5d:a7:ca:0a:89:12:52:ad:e2:84:
80:2c:0e:47:35:1f:91:3b:8f:70:fb:7b:99:ba:66:c8:bb:c6:
73:49:14:47:d1:3d:5c:a8:42:ad:6c:69:e0:7e:d5:cb:fc:6a:
ca:7d:14:71:8f:61:06:05:b0:9b:f1:3b:88:ed:90:c2:a8:6c:
0e:fc:dd:34:a5:14:ca:7a:a3:86:ec:60:4e:67:94:16:a7:70:
91:24:91:ea:df:64:ef:af:41:3a:c1:6d:5f:74:a6:9f:2f:b7:
ef:19:b7:fb:ed:6e:cc:b5:b6:72:ef:5e:bc:4a:5b:b0:49:ac:
e4:c1:3d:72:a8:75:0e:8c:5f:9c:94:45:a0:ee:50:68:8b:56:
3c:8f:66:de:7a:87:59:64:57:4c:c0:85:1d:d0:49:94:c6:02:
55:6c:4d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:37:54 2025 by rpki-client