Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: R5sW5KUxSDKlE84EPod9E6Avjc76AmFYE5X/8xnixX4=
Subject key identifier: 7E:4C:8B:4D:3A:D4:37:6A:88:AB:2C:6B:B8:73:02:44:B0:55:45:A1
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 0197681797CCA3C7C4161CD31138BAB699EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 07:01:06 +0000
Manifest this update: Fri 13 Jun 2025 07:01:06 +0000
Manifest next update: Sat 14 Jun 2025 07:01:06 +0000
Files and hashes: 1: WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa (hash: q0DpW8XtR4IxHRwLJz0IGFkpb8cJ4HYo8d4HsEmNl8o=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: OilBIuRg0s/qGyq0SSW3sP7pZFxgZ2I/p+6sJ+IOKGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:17:97:cc:a3:c7:c4:16:1c:d3:11:38:ba:b6:99:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Jun 13 07:01:06 2025 GMT
Not After : Jun 14 07:01:06 2025 GMT
Subject: CN=7e4c8b4d3ad4376a88ab2c6bb8730244b05545a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:89:a6:5b:ad:ac:34:1b:41:98:80:ce:cf:
f9:58:e7:16:c9:66:26:bd:e6:f1:6e:e3:0f:2c:8b:
84:c7:a5:57:76:75:0c:cb:e7:47:70:39:67:19:c7:
f2:eb:9c:b1:f6:e4:a7:4d:8d:57:d8:16:ad:12:f6:
33:0e:bd:61:e4:9b:34:df:c6:22:5f:24:60:be:7a:
30:4b:c7:1e:e5:72:6b:27:5a:e0:a6:76:46:3c:c2:
c0:41:3f:ca:2c:56:9e:6d:25:4c:3b:55:a6:24:12:
2a:25:78:2d:6f:ad:7b:d5:c5:da:4c:75:8b:88:ed:
9f:ac:0d:69:0a:1e:1b:b4:f3:1d:35:f0:b3:ef:6a:
4d:d4:46:f8:b8:da:aa:56:de:d2:81:f0:01:cb:c9:
01:99:01:28:78:a2:81:32:01:90:6c:4c:de:1f:08:
04:86:5f:a8:c0:45:f6:03:32:21:74:03:d3:c9:b2:
08:33:68:c3:49:e4:c1:19:24:98:da:d8:2a:e0:81:
33:38:4d:7c:24:69:b3:de:47:b7:ae:5f:d8:9a:9e:
32:9c:c0:98:65:ee:93:65:99:87:60:fa:47:d6:7c:
f7:6e:9a:db:cc:c8:74:d6:32:1e:d2:a3:4e:b2:bd:
76:99:dd:3a:cf:06:a6:da:18:be:51:b0:8b:c0:ff:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4C:8B:4D:3A:D4:37:6A:88:AB:2C:6B:B8:73:02:44:B0:55:45:A1
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ad:7c:73:29:ca:69:c5:86:d8:19:6f:30:4f:0a:ea:c3:3a:
db:ad:c2:5a:b7:f4:ab:12:e1:13:cd:5c:a0:1b:0c:b7:26:d7:
e7:0f:60:30:20:37:3e:dd:9c:d5:65:be:00:bb:17:81:3f:36:
ab:93:cc:55:a0:09:19:84:54:66:4c:80:a0:88:78:fd:48:f2:
08:b8:aa:59:91:be:0b:f9:cf:7e:6c:b7:3f:6f:bf:fe:bc:8d:
b5:a0:5f:cb:14:f4:ae:46:25:c4:8d:51:b3:79:cc:54:50:80:
e5:5c:34:d9:d9:06:f8:0a:a0:f4:d7:59:0c:51:05:66:0e:ea:
e6:67:ec:f3:1a:fe:ea:0c:dc:5b:24:c1:29:00:4b:08:50:54:
6e:ac:c7:85:c9:0a:d1:fd:56:06:91:c4:48:91:ea:45:25:ca:
f7:9e:55:80:d3:cd:fc:72:b8:28:6a:29:e1:f6:d2:f0:4b:93:
46:5d:fa:e9:5a:a5:e7:aa:38:f1:71:df:6c:38:53:90:27:76:
ac:e8:f1:27:ee:e9:1d:2d:82:7a:8c:8a:ab:52:6a:db:17:82:
24:ab:0d:a9:5a:85:5f:be:c3:99:48:8d:d3:f0:c2:d5:b4:fd:
10:53:6c:e6:ae:c0:00:b2:2f:12:62:e5:19:4a:b1:72:0c:9d:
ec:c4:c9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:36:10 2025 by rpki-client