Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
File: rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft (raw, json)
Hash identifier: CDkYw+4ituuKhR7ZM5dGyF9F2MPXOVe1dv6Ej78RpN4=
Subject key identifier: 51:D3:D6:41:90:F1:10:F9:F8:E3:DA:69:15:F8:86:82:35:0E:EC:68
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 019748FAAA0A856931671D95F4049AFFF113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 06:01:16 +0000
Manifest this update: Sat 07 Jun 2025 06:01:16 +0000
Manifest next update: Sun 08 Jun 2025 06:01:16 +0000
Files and hashes: 1: 82G84G32y1mgU0Q3YtZB3rFx4UE.roa (hash: lPGmw8XEMipvSgR8GKq/jdBXSYYQonaEL52/1uh2Mmo=)
2: Deo2xTMuFm8QocUJ-a4RvviXgQw.roa (hash: nYDs1ZDulSnhALP5AjppGJbC8hnqemDJikGGe6pDTwQ=)
3: rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl (hash: ZVfbBtCaW0SaEQG23dco9h4NuXLJMuh0AOxAxJIC6RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:aa:0a:85:69:31:67:1d:95:f4:04:9a:ff:f1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: Jun 7 06:01:16 2025 GMT
Not After : Jun 8 06:01:16 2025 GMT
Subject: CN=51d3d64190f110f9f8e3da6915f88682350eec68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:60:19:36:0b:24:6f:f1:60:ba:77:b5:d4:
08:60:41:af:6f:eb:f8:19:38:b8:c7:9a:a8:aa:ed:
9a:c9:9a:91:a1:6b:2a:99:90:b8:46:fa:dd:55:7f:
ce:24:64:c9:66:5b:f2:aa:e5:be:3f:7a:ba:e9:4b:
31:64:15:95:b9:58:d5:30:58:8e:ce:4e:31:5e:d5:
50:40:95:64:ef:d3:d6:8d:0d:2b:a0:f6:50:53:80:
8d:35:01:df:44:27:2d:6b:ac:cc:40:44:12:4d:99:
6e:81:c3:f2:21:7d:41:11:a8:8a:a5:b7:c6:68:6e:
55:6f:81:b3:11:2b:95:93:df:49:05:c1:c1:4a:f8:
69:c0:61:c3:fd:06:c5:17:40:e8:26:51:c6:20:a4:
13:cc:1e:ac:0c:4f:ca:67:de:c7:65:88:75:e4:41:
55:de:a7:ed:1a:b3:69:10:ad:3a:02:c6:37:fe:c6:
7d:95:b9:0e:c6:8d:be:6b:3b:42:ac:84:fc:b0:db:
1d:c5:b6:05:61:cd:d3:52:59:41:d6:e6:43:f5:79:
42:62:03:ea:01:41:c7:ab:a2:82:b7:a6:e3:68:64:
4a:46:ec:8c:f7:9d:95:5d:99:89:a0:4f:bc:03:e7:
6c:53:62:21:23:37:2c:95:d4:ce:61:0c:58:a6:66:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D3:D6:41:90:F1:10:F9:F8:E3:DA:69:15:F8:86:82:35:0E:EC:68
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9f:e6:6d:ff:f9:0e:1f:92:7f:85:70:8b:05:5c:b5:79:80:
3b:4f:ea:43:3b:c3:df:14:33:06:78:af:7d:84:03:a1:e2:c3:
3c:ab:87:93:e7:ce:84:b9:8a:ea:72:63:b5:65:dd:7b:23:2a:
17:1e:07:3d:26:86:a4:d6:b8:1d:37:47:3f:6a:b8:b9:07:c2:
9c:d7:ba:94:2c:1b:d4:f0:40:27:69:2e:a0:2a:5b:52:8d:4a:
c3:c5:75:08:4e:b9:06:72:8a:49:e4:fb:f2:ce:02:23:e7:b1:
19:2e:0a:41:2f:1b:4e:58:f7:05:de:8b:72:72:70:21:db:d8:
10:a5:e8:a6:2d:24:58:31:64:4e:df:d1:6f:aa:45:d9:93:a8:
33:39:87:ab:6c:a6:f5:aa:91:60:ca:85:5a:93:c5:cc:f3:4e:
9a:8a:ee:a1:3d:26:15:de:3b:5e:ba:5d:0d:92:fc:3b:dd:19:
9b:ad:a7:45:a1:8e:c3:1c:6f:4e:df:95:fa:60:a3:a7:5f:01:
94:2d:3d:06:02:39:64:79:f3:91:e2:3e:fd:05:79:4e:6d:3c:
c1:4b:51:1b:22:98:b7:9a:1c:8f:7f:58:81:6e:c6:04:da:c8:
f1:5e:25:6c:71:97:45:95:8d:73:16:ca:14:d1:ad:f9:c6:7e:
cb:53:24:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:39 2025 by rpki-client