Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: MuVfzpuvByBMNQxZAWyX0SbYZHczHBe9U4etdCeT8BY=
Subject key identifier: 6E:4F:3C:C9:C8:69:87:C0:69:84:D1:15:50:C4:5E:DE:0A:CA:6A:AC
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 0197507CEB7962B5CD6C55D12B5B3C819AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 17:00:53 +0000
Manifest this update: Sun 08 Jun 2025 17:00:53 +0000
Manifest next update: Mon 09 Jun 2025 17:00:53 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: lkTb6gvEF6RtLeuivkE91KptCEDqLV/7kYzdooh4vKU=)
2: G2qBYse5oGAPa5xfzo8tHGuDcqo.roa (hash: mPibjHFH8adYSb6G95eGzgbjvN5yGYvqGie41fvkWHY=)
3: YI8wZlD-HEfeT6xqGwFmZ1QdD6k.roa (hash: w7eB/hHlmGKQgAjYLk+eJl1NQTaGD79bb/QVrN64Cf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:eb:79:62:b5:cd:6c:55:d1:2b:5b:3c:81:9a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Jun 8 17:00:53 2025 GMT
Not After : Jun 9 17:00:53 2025 GMT
Subject: CN=6e4f3cc9c86987c06984d11550c45ede0aca6aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:26:84:25:4c:cb:62:5f:4a:10:fa:d1:de:
24:93:cd:56:4e:ef:fa:29:1d:5d:0b:11:c5:af:18:
f6:4e:05:34:12:93:65:86:75:1a:3b:32:a0:08:fa:
20:f7:f2:30:3a:a8:96:15:31:43:5b:8a:cc:cf:7d:
bc:1c:7a:9e:0f:78:68:49:f8:bd:9f:1e:51:5c:d0:
c5:88:41:be:ab:c4:0f:8c:6a:52:22:6e:67:99:bc:
7a:c7:62:0b:1a:67:8d:a6:b2:b2:fc:dd:1c:4d:95:
86:a8:a1:b6:48:f7:4a:c9:e0:85:a4:21:37:d9:09:
d7:44:c5:d3:af:3e:7e:bf:01:6a:47:d3:2e:36:b2:
c3:58:d6:a0:76:c3:e7:9c:a8:05:63:84:5f:03:16:
eb:a2:52:5f:e3:4f:da:74:f6:52:32:2a:6b:45:11:
f0:4f:22:01:ad:62:81:a0:0a:12:a2:8c:bb:1a:38:
ac:21:dd:69:c0:d1:9c:c4:8b:e4:d3:59:9c:ed:96:
4c:dc:03:8a:52:4d:53:ea:2c:81:11:02:d5:97:db:
c8:59:22:7b:c7:b5:ae:29:df:b4:74:27:b5:41:a3:
f0:c7:6e:dd:cf:4d:3f:f1:8b:ef:e7:c8:2c:ef:af:
de:0d:06:c1:e6:16:eb:71:0d:cc:34:aa:fd:e1:19:
38:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4F:3C:C9:C8:69:87:C0:69:84:D1:15:50:C4:5E:DE:0A:CA:6A:AC
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:70:12:1a:e8:a1:aa:b6:2a:4e:4c:02:80:03:8f:ed:e8:4d:
12:c2:18:40:11:e9:30:17:38:73:33:c5:47:df:09:e1:9c:5d:
af:28:60:dd:ec:0f:58:4b:ac:f5:e9:4f:17:d9:7a:06:00:98:
3d:0d:c6:00:a5:38:3f:2c:c3:7a:a7:1a:f4:5f:04:1a:b1:b1:
f9:b7:7f:f8:a0:ee:17:ca:67:76:af:44:dd:c1:d9:a7:c2:f5:
09:df:26:19:e4:30:77:66:c7:c3:ab:25:aa:b1:a2:c3:cc:71:
b6:36:b3:5e:0a:95:db:2b:d0:67:c4:d9:57:4b:c4:38:de:e1:
08:3b:c8:3c:1a:4b:04:58:2f:26:73:58:4e:fb:e4:71:b7:59:
40:80:2f:cb:d6:22:c9:cd:5a:21:2e:92:88:3c:47:73:d2:c9:
54:69:8a:c6:f3:4a:b1:a7:67:91:83:d7:85:d8:17:97:e0:af:
8b:4f:6c:35:2e:60:66:43:b8:f8:28:6e:da:7d:3c:b2:a2:38:
81:84:5d:23:c3:b3:12:39:29:e1:15:ff:a6:57:91:b5:8a:e6:
d2:db:1d:2f:7b:46:6b:75:ca:52:0a:4a:14:9d:a5:2d:42:d6:
9b:31:1b:95:7c:14:d6:8e:ca:0a:9e:81:f1:d4:55:65:fa:3a:
de:25:63:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:05:25 2025 by rpki-client