Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
File: inQVrmNNYTFZy9LOdKwmGn1axNQ.mft (raw, json)
Hash identifier: moqN+3ujrMJQsoI2tZrSWKMDojQqlaRGpbY1Lon6Kio=
Subject key identifier: DF:27:C2:29:33:84:55:3F:3F:E3:F5:06:C5:F7:1F:04:38:49:D7:B8
Authority key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
Certificate issuer: /CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Certificate serial: 019764039024557579D64F57CB07CB873BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
Manifest number: 158C
Signing time: Thu 12 Jun 2025 12:00:44 +0000
Manifest this update: Thu 12 Jun 2025 12:00:44 +0000
Manifest next update: Fri 13 Jun 2025 12:00:44 +0000
Files and hashes: 1: inQVrmNNYTFZy9LOdKwmGn1axNQ.crl (hash: oSy54h0KuAYrxdoGQUHOhpP+SaWkn5jBXmaYRJhPCsw=)
2: oIUHNd2flzQuApFJl7WS3G_Ds7Q.roa (hash: r9vW54cG8T4ZtS4qpMsUDsSVtPyOl8cyq1L4laCQ/ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:90:24:55:75:79:d6:4f:57:cb:07:cb:87:3b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Validity
Not Before: Jun 12 12:00:44 2025 GMT
Not After : Jun 13 12:00:44 2025 GMT
Subject: CN=df27c2293384553f3fe3f506c5f71f043849d7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:5a:b9:e8:15:e3:83:20:50:c3:40:93:66:
79:3e:64:3d:57:18:94:0c:36:11:82:33:c5:8b:de:
26:ba:36:48:a4:98:2f:ef:64:5e:4b:d1:59:af:ed:
55:8e:47:25:c8:e8:f1:b4:f5:29:cf:61:af:e1:09:
ed:ba:e3:a9:0a:fc:38:9c:77:f3:55:10:a6:cb:3f:
f7:e3:21:75:87:17:85:99:5d:b7:04:c9:90:e6:34:
c9:03:75:64:3b:03:4a:09:de:c8:55:65:f4:f4:a0:
14:6a:83:0b:e4:b7:b2:28:b2:0e:1e:ba:13:7a:6b:
08:7d:ec:d6:05:75:3b:1a:83:ae:0f:f2:93:42:98:
53:f4:ed:92:74:5b:df:41:33:54:1d:4c:d6:db:79:
9e:e2:da:5b:3c:25:5d:31:82:99:3a:b8:39:0d:5d:
10:4d:5e:f8:16:11:ca:be:4b:44:b7:72:f4:1b:f2:
72:cf:48:2f:22:45:7c:af:b2:85:c1:7e:e2:5e:df:
f4:b8:39:50:db:af:eb:49:f0:bc:53:c2:c7:f1:da:
8c:59:5c:22:2f:7b:95:0b:72:dc:98:da:ef:8d:c8:
ca:a9:56:9a:75:e4:c3:d6:bf:47:03:7b:38:e2:d1:
93:64:76:03:bb:05:8f:4e:8f:83:03:59:15:d7:27:
07:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:27:C2:29:33:84:55:3F:3F:E3:F5:06:C5:F7:1F:04:38:49:D7:B8
X509v3 Authority Key Identifier:
keyid:8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c1:28:1e:87:27:92:27:de:45:42:be:15:d2:ef:56:14:e0:
e8:a9:99:c0:2a:3f:3e:9a:49:19:73:96:6e:18:2f:9a:3c:4b:
e2:fd:9c:82:7e:40:b3:bb:9d:d7:e1:57:7f:6d:0a:a2:4e:7a:
46:09:c0:fe:7c:8d:05:d4:71:ba:ac:29:c2:bd:fb:07:fd:bc:
ee:7b:69:f3:d4:46:ba:05:50:ae:53:aa:f6:31:ea:dc:13:87:
62:5d:fe:2d:d7:a6:50:20:95:1c:19:f9:d7:5c:4f:73:38:68:
9c:d1:82:32:1f:0f:2b:6e:a3:a1:3a:24:b1:2e:65:36:23:ab:
24:ff:65:70:7a:82:45:6d:71:2d:6b:f0:af:ed:85:d4:7c:ff:
9a:34:2e:d3:22:72:88:15:d4:f3:7d:27:f5:0c:74:03:f5:5c:
f9:24:02:ad:fc:3a:8c:98:31:f3:5b:c5:9b:09:94:1d:df:ab:
9b:0a:5d:35:5e:ff:72:81:ce:8b:39:36:26:e3:7b:52:44:cd:
ce:bf:06:dd:75:89:99:ba:63:28:64:81:20:6c:ab:3e:09:33:
30:ff:e3:62:0b:b0:a4:8f:b1:36:dd:5f:43:c1:78:bc:aa:bb:
a3:13:c9:9a:3e:e1:b2:87:23:ae:f4:25:22:88:e3:c8:ba:3a:
0d:4d:13:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:44:52 2025 by rpki-client