Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File: geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier: htlqq8tK4YA3eSzxx53bQ422w1dK7/d9oIuv1Umlkjc=
Subject key identifier: 12:43:1D:A3:C5:86:F4:D7:BE:73:E9:BA:62:BE:05:5B:85:7E:5F:90
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial: 019752D8E6CAD54CE4B28C8E973928062652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 04:00:35 +0000
Manifest this update: Mon 09 Jun 2025 04:00:35 +0000
Manifest next update: Tue 10 Jun 2025 04:00:35 +0000
Files and hashes: 1: dBbI1Z81Mloa7W2OzhoKXchOrRQ.roa (hash: cFMz5yq3xJCpOCH1TXFzmCMMTxw6N/8cLdoB9ZDvza0=)
2: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: 8dZzZDlMlMo3U1UZKjJxo6Fh+w6QcmLsFhQSBeDzxxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:e6:ca:d5:4c:e4:b2:8c:8e:97:39:28:06:26:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Validity
Not Before: Jun 9 04:00:35 2025 GMT
Not After : Jun 10 04:00:35 2025 GMT
Subject: CN=12431da3c586f4d7be73e9ba62be055b857e5f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d9:6b:11:3f:c0:18:90:75:4f:67:4d:2f:47:
9a:95:a2:04:a0:99:1d:95:0a:81:37:d8:84:0f:d8:
b4:72:c1:3b:90:e2:e3:f9:71:48:1e:49:d7:cd:fa:
d5:3a:b9:a2:03:dd:01:64:18:6d:49:47:32:51:21:
76:2a:0e:2b:3f:24:50:30:96:fc:8f:27:24:2f:22:
36:02:c9:ca:d9:2a:bd:c7:18:d9:7f:3e:b4:8b:e9:
31:ad:46:f4:a6:3d:ee:ba:09:52:c4:57:5a:c7:2f:
5f:90:b4:22:51:98:9e:0a:1b:eb:c8:0e:d1:c3:fb:
05:95:49:54:5c:d3:e7:d3:49:0d:c2:14:4f:68:ea:
a4:82:1b:bb:e8:79:e0:15:42:75:91:ca:73:cc:37:
34:c9:2e:4d:e9:c5:af:ee:3f:98:05:26:16:11:58:
df:24:99:db:12:76:42:a3:bf:0a:80:49:77:54:e2:
c8:10:e2:76:30:a6:e3:8a:63:aa:04:c9:73:23:81:
87:95:47:10:85:87:6c:9e:b1:78:61:7c:11:b3:e5:
30:b6:d6:c0:8f:54:c7:d5:d2:47:c0:96:1c:eb:87:
6d:39:15:cd:01:60:19:a4:3a:c3:0b:2f:f5:dd:5a:
68:8a:45:b2:7b:22:20:03:88:28:c6:c3:9c:d2:1f:
a0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:43:1D:A3:C5:86:F4:D7:BE:73:E9:BA:62:BE:05:5B:85:7E:5F:90
X509v3 Authority Key Identifier:
keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:44:8e:7d:a7:03:37:1f:a5:82:4c:25:5b:ce:0c:18:30:db:
43:f1:f7:3a:5c:4c:b2:91:0e:82:c0:ae:46:2c:77:01:06:a9:
02:21:db:69:6c:40:1d:ec:d9:5a:01:b3:52:a7:b7:47:d8:25:
84:f5:ce:bf:4b:80:f3:ad:aa:40:f1:30:bf:c3:3f:dd:50:f7:
ec:b2:85:19:b5:53:de:8e:55:6f:3f:82:1a:36:50:3a:25:52:
90:70:72:10:90:41:25:49:db:fc:8f:42:42:10:62:90:e5:dc:
1d:20:08:a1:90:7d:5e:b8:37:5a:59:25:9b:83:89:9e:67:da:
16:61:90:2c:f2:8d:93:2c:71:d4:bb:05:6b:ea:85:e8:e4:f6:
6b:04:44:60:ce:a7:13:4a:be:8d:bb:5c:6f:85:c5:aa:e6:ff:
88:bb:97:76:c7:60:b2:b3:38:f7:9e:58:31:94:b6:c7:35:80:
5a:eb:64:7c:3a:95:06:9b:f2:77:8d:17:4b:85:89:79:0e:a4:
0c:37:29:2e:85:c2:0f:4d:1c:95:fc:da:ec:ee:ce:91:86:d5:
75:de:d4:3e:9c:95:73:44:71:0a:b3:66:f9:17:0e:74:78:7e:
bf:f6:1b:82:6d:de:4b:cd:53:73:df:3d:a5:77:52:4b:6c:5c:
07:de:3b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 09:38:39 2025 by rpki-client