Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
File: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft (raw, json)
Hash identifier: UpBg0ADBvnZk21X69DhA6ZT034q0nwSIo3Q1s2FwjDA=
Subject key identifier: CB:3B:AB:C4:A6:CD:8F:62:34:AA:C1:06:64:D4:EE:14:26:2B:49:5F
Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
Certificate issuer: /CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Certificate serial: 01976471A296E9DC528479964B9157099853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
Manifest number: 158D
Signing time: Thu 12 Jun 2025 14:00:58 +0000
Manifest this update: Thu 12 Jun 2025 14:00:58 +0000
Manifest next update: Fri 13 Jun 2025 14:00:58 +0000
Files and hashes: 1: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl (hash: lnWWr0pQBryujWiSSmSOzMVB4Il63grCllVCdEu143s=)
2: GBHgZs5smXIHM4FYLqRTdebAY54.roa (hash: 8eoGRtWR94CvV+AUeQO0MQrawByEe9oxj8H6brsnZqU=)
3: ZaZt-EklqiwdQvzDUFQiPldPl5k.roa (hash: oR9yB6wHGUKGTVwJ48OCFcMFmxevjZzgWdtvhuAPlXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:a2:96:e9:dc:52:84:79:96:4b:91:57:09:98:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Validity
Not Before: Jun 12 14:00:58 2025 GMT
Not After : Jun 13 14:00:58 2025 GMT
Subject: CN=cb3babc4a6cd8f6234aac10664d4ee14262b495f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:d6:d7:8c:9c:b1:ed:1c:f5:0c:29:2a:f6:
46:94:52:c4:62:42:21:d9:89:87:42:16:8e:33:f9:
00:8c:f3:a2:a2:50:ad:cf:ff:1d:77:70:1f:d6:d4:
90:d6:de:91:fc:5c:b4:70:be:ae:b6:86:29:fa:2f:
6f:d5:a4:6e:0c:ff:29:e8:d3:26:58:6b:a6:bd:f7:
49:2b:e9:90:fa:e2:5a:96:07:4c:17:82:04:c1:bc:
16:c7:57:9e:36:7e:47:c8:a7:5b:fb:fc:49:d1:49:
5c:04:99:6c:a9:32:34:18:d8:cf:d6:b1:f7:85:16:
ff:19:49:a2:a7:e9:8f:26:38:f8:f1:6b:aa:70:21:
0f:95:83:90:04:02:4b:1e:a6:a1:3c:e6:d2:6c:f9:
43:13:50:94:ef:9b:5d:c2:a2:f7:45:59:5d:a9:ff:
62:dd:b8:5e:48:9d:97:20:4a:b1:8f:24:fe:59:38:
29:5d:3c:35:ed:47:de:c7:eb:76:17:c4:61:3b:21:
cd:34:72:84:0b:7c:33:15:a9:eb:52:76:af:8c:ad:
6b:e5:03:ef:bf:fb:95:f8:65:c7:e5:af:bf:d8:b9:
1c:68:c8:16:e1:6d:eb:cf:e4:aa:3f:b3:5c:76:b5:
35:00:b6:20:2a:68:2d:38:cc:9b:96:87:8f:9e:0b:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3B:AB:C4:A6:CD:8F:62:34:AA:C1:06:64:D4:EE:14:26:2B:49:5F
X509v3 Authority Key Identifier:
keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:84:0e:c9:cd:aa:be:4d:b3:13:9b:06:37:b2:fc:33:ba:f1:
94:07:89:77:5c:e5:f5:f9:b7:a9:f1:9a:d9:8a:43:d5:73:ba:
ab:ac:ba:1f:30:34:75:5e:d2:65:2b:37:df:ea:0f:d3:cb:f0:
8b:9b:98:22:1b:fc:12:e7:22:58:29:ec:39:b9:e4:6e:7e:74:
e4:30:c5:d7:55:88:19:4c:32:e4:ee:c7:81:ad:fb:19:58:0e:
93:8b:28:00:45:fe:63:5f:05:15:80:33:83:85:ab:66:4b:23:
98:68:f4:4e:b9:7b:54:7b:6d:1b:ee:12:4f:ad:a5:69:85:05:
56:9f:96:97:0f:d2:42:04:eb:55:82:ba:42:47:1b:c6:47:47:
82:0a:82:02:27:3c:a3:39:12:39:4f:47:7b:42:19:03:31:95:
12:11:1b:e9:1c:79:72:e9:e3:10:74:cf:c7:d7:52:a4:47:c2:
28:3f:c7:fb:24:0b:c6:72:a4:a6:4b:1e:7d:68:0d:35:b6:38:
50:35:1f:b0:0e:4b:bb:ba:d3:60:12:6a:72:1c:1f:5c:b6:7a:
a3:ed:c9:26:04:27:e8:3a:48:7f:2d:76:9c:7a:7c:47:10:a6:
80:76:51:41:c5:7c:72:2f:de:b3:fd:bc:ce:e2:82:4b:c0:cf:
a7:e9:28:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:50:16 2025 by rpki-client