Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: 1fTvc2tYgAahbRZ2lO+wqv2XKx8EUZN8O/NLsLcgpkU=
Subject key identifier: FC:28:8E:D5:31:EB:A6:BF:F8:8E:55:72:91:25:B2:60:EF:EE:50:C6
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 0197597F8FFE1A19F81EB4CE668F40170E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 158A
Signing time: Tue 10 Jun 2025 11:00:21 +0000
Manifest this update: Tue 10 Jun 2025 11:00:21 +0000
Manifest next update: Wed 11 Jun 2025 11:00:21 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: R95++NPMnYN3wwsSp6kiIgL88JoXAryWew52L0n9X9M=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:7f:8f:fe:1a:19:f8:1e:b4:ce:66:8f:40:17:0e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Jun 10 11:00:21 2025 GMT
Not After : Jun 11 11:00:21 2025 GMT
Subject: CN=fc288ed531eba6bff88e55729125b260efee50c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:d3:e5:0b:29:cb:60:0a:36:ac:9f:94:5b:
fc:cb:95:b2:b0:88:98:ca:68:d4:ed:7c:0a:d3:44:
e5:88:ac:0a:9e:e4:ae:8a:de:b6:ad:89:49:d3:8e:
e6:79:5b:d3:1c:7e:e3:3d:5e:3e:e2:d1:2c:fd:fb:
b2:2e:95:87:cf:bc:56:d6:3e:42:80:b2:a7:d9:32:
4c:48:8e:99:d4:a5:f4:68:4e:f1:02:3d:e6:9e:26:
89:d4:16:36:b9:e6:01:f9:53:d6:a3:9d:e9:d4:08:
c6:04:a0:ed:dd:94:f2:5d:46:0f:51:6d:a2:1c:e7:
39:c7:27:b7:e0:03:70:25:d0:c4:7b:0a:44:5c:06:
7a:8f:d3:97:b0:c7:a9:cc:17:b7:8b:6b:e3:be:b1:
70:44:c8:99:4a:eb:71:c1:8a:87:45:7a:49:34:6e:
2d:1d:04:c4:e1:e0:20:7a:e8:b5:7c:b4:4e:73:89:
ac:ba:d5:97:c4:83:33:d3:f1:7c:8e:7a:7a:cf:9c:
11:a5:ea:1c:38:95:72:23:5b:58:62:81:31:b6:fe:
70:41:10:56:b8:58:10:68:17:b6:c5:1e:e3:c5:70:
22:44:40:55:a7:6b:a4:5e:9c:52:58:23:88:34:b7:
ba:1c:0c:7a:b6:9e:65:3b:9a:b4:58:b9:0c:a0:33:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:28:8E:D5:31:EB:A6:BF:F8:8E:55:72:91:25:B2:60:EF:EE:50:C6
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a0:83:64:6d:ed:f3:e8:5b:55:9f:87:44:2b:55:59:16:09:
54:30:11:5a:a2:68:1a:d0:9d:38:f7:0f:20:06:74:8e:f7:6b:
76:3c:eb:08:ec:75:5f:09:1b:1c:26:e0:47:25:db:08:82:76:
cd:07:52:ba:26:66:f2:d0:f8:dd:2b:af:95:c4:08:2b:80:0f:
35:33:ca:45:2a:1b:c2:84:23:eb:4b:95:b0:bc:bb:ac:59:32:
f5:b1:82:13:41:bb:51:a1:c3:46:86:67:09:65:c5:5c:fa:3e:
12:7a:81:88:af:7a:19:1c:5b:76:13:44:2c:cb:7b:3e:ee:87:
88:87:3d:8c:4e:02:6d:0e:19:da:06:3d:8c:1a:e4:66:de:49:
91:61:73:44:81:3c:3b:03:54:e4:50:20:1e:06:fb:59:16:bb:
e0:b1:21:ae:42:5a:56:6e:6b:74:6f:fc:4d:09:39:0b:b1:88:
5c:81:64:09:96:82:f4:dd:09:c8:5a:a1:9b:f0:6f:0e:5f:79:
f6:1f:c9:9d:80:db:3c:5d:dd:e4:88:33:4d:99:1d:78:76:5c:
6f:aa:0b:8d:b4:4a:e9:6d:0a:e5:e9:92:60:b2:6e:9c:1b:7b:
bb:71:c3:8a:1a:c2:5c:e0:52:42:15:b3:6c:77:7c:1f:5d:ef:
5e:a3:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:23:31 2025 by rpki-client