Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: I+yKLHbWv637kSFMY6Es05PC1jIuhv3if3Ui4L+gJbg=
Subject key identifier: D0:E7:18:06:50:62:8C:7A:1F:90:84:98:20:94:F5:1A:A9:DA:B7:CA
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 019763280C811C8F145EF72F605ACE285748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 158F
Signing time: Thu 12 Jun 2025 08:00:58 +0000
Manifest this update: Thu 12 Jun 2025 08:00:58 +0000
Manifest next update: Fri 13 Jun 2025 08:00:58 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: sV5Vg0UevKDynofBOpGdmwAAKzZ1pZ12Im5OhPSO4WE=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:28:0c:81:1c:8f:14:5e:f7:2f:60:5a:ce:28:57:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Jun 12 08:00:58 2025 GMT
Not After : Jun 13 08:00:58 2025 GMT
Subject: CN=d0e7180650628c7a1f9084982094f51aa9dab7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:6a:d4:5c:51:71:1a:de:4d:e5:bd:c7:37:
cc:1e:fb:ab:60:22:5f:a4:c9:cd:c6:98:ad:a2:01:
33:a4:35:94:b7:39:12:d0:fb:3a:11:9d:48:a2:d8:
06:75:0d:7b:a4:cf:d5:56:13:63:1c:6e:04:42:ee:
ca:41:b5:ef:7f:39:6f:a2:9f:d0:10:6a:9d:09:c3:
3d:e3:37:a2:67:2c:7a:c0:29:be:f8:f4:7c:cf:70:
97:8d:a6:b7:0a:48:b6:98:9a:67:5f:42:ac:49:b7:
1d:09:b0:40:37:6b:45:06:f6:cf:fb:a2:5e:c5:b3:
95:0c:7e:85:a9:6a:1f:38:d6:ef:da:0a:7b:7a:71:
3e:dc:bf:53:c4:1a:7f:00:cc:29:21:2f:f6:62:8c:
70:c1:0e:dd:e0:4d:5d:7c:6d:94:cb:b2:f6:b2:e3:
17:5a:75:38:0a:35:3d:59:45:be:70:2d:95:22:a2:
c1:87:35:45:94:21:85:0d:52:08:94:a3:e5:9d:a8:
a2:6f:b5:bd:bb:66:7d:3b:dd:7f:11:89:42:66:a1:
bb:9d:76:87:90:64:4e:5a:f0:65:42:73:90:a7:63:
8f:20:26:09:12:e0:b8:2d:b2:42:66:31:49:ac:7d:
0d:32:22:16:51:3e:65:f2:29:1a:af:4e:bb:a8:a7:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E7:18:06:50:62:8C:7A:1F:90:84:98:20:94:F5:1A:A9:DA:B7:CA
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:36:ba:08:fd:04:d0:83:df:26:78:e5:13:77:0a:60:d1:a1:
ad:b6:4f:fe:47:98:04:97:21:21:40:14:41:35:cd:00:8a:bd:
70:42:24:06:30:62:34:17:ad:b5:ed:f0:ad:3c:f9:a5:27:fc:
cc:97:a1:db:9a:c3:94:d9:91:da:f5:0e:f1:05:b9:a2:55:5d:
7e:44:48:8e:b3:65:7a:70:4d:02:70:ab:b2:88:25:de:68:ce:
36:82:79:5f:2e:4c:a2:88:76:c7:af:9f:de:15:e3:28:f4:c6:
a0:a7:27:97:33:3b:96:bc:b6:32:4b:d2:74:fa:53:cd:bc:e0:
35:fa:90:e1:d5:a2:3f:f6:c4:af:47:e0:12:3f:71:a1:e2:2c:
37:65:e6:b9:27:a3:b4:3b:aa:ad:54:af:14:6b:bf:9e:da:84:
55:a3:b6:e9:ee:fd:2a:24:ef:6f:e5:7a:80:fe:16:b0:0b:85:
1f:b8:03:72:34:99:fe:b1:f7:a9:f8:44:6a:27:df:0a:cf:f5:
7a:6a:15:f0:64:10:37:28:92:20:67:18:a8:aa:3b:db:71:8a:
d2:03:35:d4:e8:52:5a:27:cd:47:ac:31:77:16:a4:2d:fb:19:
e7:d7:dc:68:fa:4e:05:38:df:72:5c:8a:19:0e:f9:b9:3c:c6:
b6:10:d3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:42:03 2025 by rpki-client