Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
File: 84t8pB9ACCKQyorv3sS9KX067Aw.mft (raw, json)
Hash identifier: eupCzyHV5vGdQCF8LFDAgbhf2xMBZLL0Fa/vQ4Y04Xg=
Subject key identifier: F9:3E:7F:67:E2:19:17:A5:66:77:45:53:92:BE:79:AF:3A:0B:09:D3
Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
Certificate issuer: /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Certificate serial: 01974C9FAC4F898B3B1C62C8DDCBDDADB6B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 23:00:22 +0000
Manifest this update: Sat 07 Jun 2025 23:00:22 +0000
Manifest next update: Sun 08 Jun 2025 23:00:22 +0000
Files and hashes: 1: 84t8pB9ACCKQyorv3sS9KX067Aw.crl (hash: rp0oIXbvbKQuGQMaosdkTf1j0ybCj6uQAvroDMg7eGY=)
2: RTINrk5K9twShi2ws8-7GReQguo.roa (hash: AdVChkjeYt7VqV92ZVz1KihOag+zBOsNiMEkZJtbBCI=)
3: XjFi2Cntd0oPDO451MBhOtZCDnM.roa (hash: 7dr7flPYIycOqvdbpZ43N5qce8PY6ub0N0ZeKnZ45bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:ac:4f:89:8b:3b:1c:62:c8:dd:cb:dd:ad:b6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Validity
Not Before: Jun 7 23:00:22 2025 GMT
Not After : Jun 8 23:00:22 2025 GMT
Subject: CN=f93e7f67e21917a56677455392be79af3a0b09d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:5a:90:a8:4c:63:59:16:e1:a2:d4:7b:28:
b9:7d:06:1c:65:d1:b7:1c:ed:13:58:8a:dc:6f:38:
22:5a:47:c4:a3:01:d5:fb:e4:e2:c8:07:15:a6:a2:
1b:f9:00:6d:02:f1:29:f7:90:9d:3c:c3:b8:11:30:
69:89:7c:a3:72:59:b2:76:09:09:43:92:80:79:0b:
39:ce:c2:db:e5:31:ef:fc:64:7e:b2:84:2f:fc:fc:
6a:55:e5:c0:dd:50:7e:74:60:4d:f3:fd:9f:40:91:
10:a0:1c:a0:73:b6:b8:6c:e6:50:b5:b7:b6:5b:0a:
c5:d3:59:93:f0:e0:e0:85:8e:60:19:39:48:f5:82:
9e:09:59:8f:24:66:79:24:1e:95:94:31:d3:a8:fc:
80:10:fd:a8:b0:fc:b3:1b:f4:e8:5e:47:af:ff:dd:
78:0b:57:7b:ba:e2:d4:2b:2d:59:23:4d:5a:b2:18:
6e:95:21:20:b7:06:02:14:21:36:ee:81:dd:4d:07:
06:f3:eb:71:a5:03:6d:03:87:6d:f9:0d:ff:58:b3:
89:d0:fc:65:5d:76:d1:7f:77:44:b1:eb:be:5a:a7:
39:42:d5:a4:9e:bc:4e:15:b2:7f:4b:41:ac:4c:66:
e4:37:23:d0:d6:ee:40:f6:82:3c:60:f6:19:fe:9e:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3E:7F:67:E2:19:17:A5:66:77:45:53:92:BE:79:AF:3A:0B:09:D3
X509v3 Authority Key Identifier:
keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:33:b8:7b:88:80:76:26:41:14:fe:06:9a:2d:3f:46:b5:b9:
87:a1:b5:d2:78:44:96:2f:16:71:49:1d:01:04:aa:38:2c:a9:
8a:1c:9e:d1:4d:6b:be:d8:37:bf:2f:7e:13:71:09:00:b8:1a:
6b:cf:0e:30:83:e6:a7:08:f5:77:fd:63:b4:0d:11:a7:d1:9d:
ea:16:78:ab:ce:8f:04:c3:06:54:1d:33:a8:73:24:59:06:76:
a9:a4:62:6f:10:20:1c:47:af:e5:5f:b4:5e:0d:1e:ad:22:f5:
c3:80:66:4f:3f:24:da:4f:1e:10:ec:ee:b3:ec:6a:0c:a9:98:
4d:97:c6:36:c5:48:64:d7:d0:97:df:85:66:ed:6f:ec:e9:ad:
86:0e:7b:ae:a7:90:02:de:da:14:bb:f0:f0:07:51:3e:cf:f4:
33:01:95:cd:f7:4d:6e:52:0e:2b:8a:4d:fe:70:22:ff:ff:5c:
3c:df:f3:77:58:17:0d:c5:44:63:4e:aa:28:c5:6a:f5:65:21:
47:2d:18:94:96:f9:fc:f5:b8:6b:3e:90:7b:d1:ed:ed:24:53:
36:ff:99:da:e2:35:17:5a:31:82:e5:65:3c:f4:31:f5:0a:85:
ea:cf:03:fd:6d:b9:27:84:62:9e:0f:60:77:a5:03:a9:1b:f2:
4a:b0:ad:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:10:16 2025 by rpki-client