Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
File: esMB9rptscwntFS8szI5rh1kGrs.mft (raw, json)
Hash identifier: +TwYcdq7cxDQ3RS+O4wtMBA6GXctBhRlLQJuJxkbIKI=
Subject key identifier: FE:D3:F5:78:D8:AF:DA:AC:5B:51:22:7E:FB:CE:53:A1:DF:7D:CD:4A
Authority key identifier: 7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB
Certificate issuer: /CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
Certificate serial: 0197481E50F4CE4791C80EE3E68FA95DD783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
Manifest number: 0155
Signing time: Sat 07 Jun 2025 02:00:35 +0000
Manifest this update: Sat 07 Jun 2025 02:00:35 +0000
Manifest next update: Sun 08 Jun 2025 02:00:35 +0000
Files and hashes: 1: esMB9rptscwntFS8szI5rh1kGrs.crl (hash: 8unGphP0+VSmDK2nM9Oj50c6/OiDTEI7+gLYdxRE27g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:50:f4:ce:47:91:c8:0e:e3:e6:8f:a9:5d:d7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
Validity
Not Before: Jun 7 02:00:35 2025 GMT
Not After : Jun 8 02:00:35 2025 GMT
Subject: CN=fed3f578d8afdaac5b51227efbce53a1df7dcd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:a0:3b:72:88:27:c8:6e:8c:f8:78:0d:0b:
d1:fb:20:b1:99:e1:16:02:ea:f1:b9:3c:35:1c:fc:
ee:cc:a1:fb:30:4c:63:85:9f:9a:ff:7d:1c:54:fe:
3f:fa:6f:d2:e4:a6:09:7a:a2:86:99:87:74:29:52:
e5:20:97:94:6b:c3:4d:19:f2:07:71:60:5f:8d:4f:
6d:da:fa:69:f2:39:dc:d4:73:98:3e:55:40:10:a9:
c2:61:cd:ae:4b:8b:f1:5d:b6:96:f5:b7:ac:9f:0c:
d0:d5:5a:f6:e7:a1:3e:0e:09:dd:7d:d8:b7:db:68:
ec:7b:8d:56:f0:0a:85:32:aa:b9:d1:f0:8e:a3:6c:
4b:0c:e4:c9:9e:c5:72:27:47:cf:c4:8f:e9:c0:01:
1e:7c:92:2a:1f:4e:b1:e9:03:58:11:6b:1a:91:64:
a9:4b:f7:1b:56:55:d9:38:f9:bc:bb:b1:9e:00:76:
77:c0:8f:43:9a:bd:8b:59:27:55:24:65:60:b2:b8:
3c:64:00:42:22:6d:2a:7f:ae:10:a7:12:9e:dc:71:
f9:11:9b:cb:b0:03:30:ff:71:c2:1c:ce:47:88:ac:
6e:95:98:09:13:84:97:94:0c:e8:d4:32:a1:ce:b8:
66:53:f3:bb:64:18:e8:fa:9d:ba:7b:59:18:dc:b1:
da:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D3:F5:78:D8:AF:DA:AC:5B:51:22:7E:FB:CE:53:A1:DF:7D:CD:4A
X509v3 Authority Key Identifier:
keyid:7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:db:f9:e0:cf:c9:e5:aa:b9:10:8b:dd:bf:03:0f:10:ff:5b:
15:0d:c9:2d:52:dc:18:fa:1b:ab:74:14:76:80:7a:34:80:8f:
da:c8:e9:0e:9b:36:df:69:b5:0e:d5:eb:58:29:cb:3f:26:23:
df:70:d3:3f:4c:1e:f4:66:17:25:42:49:26:4f:e9:8b:9e:a4:
db:2e:63:77:6a:69:75:1e:ba:25:23:0b:23:a5:ba:94:89:a6:
8f:1f:e9:09:ff:c0:f0:f4:a7:98:c9:01:3e:ba:71:51:37:1d:
55:56:5c:23:6d:e0:85:76:3c:ca:76:0f:1f:10:75:4c:29:dd:
9f:b3:5e:8e:0f:10:4c:2e:30:e9:9e:86:4f:fa:2b:5b:7c:1b:
7e:78:e4:0a:b5:98:be:eb:98:4c:9e:4d:5d:e8:21:d0:2a:3b:
3f:47:12:01:dc:c6:c7:92:0a:99:41:7b:77:1d:3b:cb:3b:5d:
6f:1f:27:07:d0:b8:ab:b2:bc:88:ae:69:96:c6:34:80:50:61:
ef:bb:2a:a0:af:22:2b:11:9e:fa:c4:10:8c:b2:51:d8:e7:1b:
0f:6d:d8:13:1f:b9:97:61:3e:88:75:8e:69:2d:0f:07:89:76:
19:8f:f5:12:8e:0f:c5:44:39:b3:50:6b:76:b8:1e:08:96:d0:
37:57:aa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:12:01 2025 by rpki-client