Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: WxtTEwa4xEns53mX57yPiWL3tkWdL08cxABivp6SqF0=
Subject key identifier: 9D:21:D8:24:9B:76:99:FB:27:D0:16:FC:BF:DB:81:30:C3:8C:28:5B
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 0197499F2A4DFCCE71AACD8205E1117CCEC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 09:00:57 +0000
Manifest this update: Sat 07 Jun 2025 09:00:57 +0000
Manifest next update: Sun 08 Jun 2025 09:00:57 +0000
Files and hashes: 1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=)
2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: lW5NfLi48UXzsiSG7hclg3XT3M8Eo9syOXMA/Q3jokg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:2a:4d:fc:ce:71:aa:cd:82:05:e1:11:7c:ce:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Jun 7 09:00:57 2025 GMT
Not After : Jun 8 09:00:57 2025 GMT
Subject: CN=9d21d8249b7699fb27d016fcbfdb8130c38c285b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:66:3b:01:0e:19:9d:64:2b:a8:3f:d4:06:
65:bf:52:95:0b:bb:17:6a:2e:73:80:d0:40:5b:55:
91:c6:99:c6:bf:09:16:54:92:d8:f0:6d:0f:8e:21:
ba:8d:bb:c9:13:b8:3c:05:cf:41:e1:7a:27:f7:13:
2e:e8:bb:61:1c:39:0e:32:ee:d6:a9:24:3e:cb:c0:
dd:3a:cc:42:e3:94:39:81:e1:60:60:ae:cf:5b:e3:
8e:49:68:2c:ca:24:79:78:2d:18:03:60:31:0c:57:
11:c0:09:47:ff:4e:80:79:60:43:f2:22:a2:8f:82:
29:e2:e8:7f:e1:b8:29:90:ac:f2:3f:d3:0e:9f:77:
6c:03:01:69:10:3a:9b:ac:d9:49:f5:cd:f0:89:01:
71:85:59:bc:73:d6:dd:b5:2a:64:cc:53:f8:53:74:
ed:9b:5b:33:da:11:c1:09:ee:1a:15:35:64:ad:cb:
a7:61:27:c5:eb:1a:32:5f:32:ca:c0:20:dc:87:ba:
74:aa:df:62:7b:40:e5:54:43:fa:bf:5d:bd:94:0b:
57:6a:d2:14:e8:80:95:b2:76:f5:4b:2d:1c:c1:3c:
bd:b0:13:19:9f:62:f4:4c:4d:f5:f6:eb:be:4b:70:
5d:27:93:61:3c:34:c2:07:7d:6a:18:1c:19:d1:51:
e1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:21:D8:24:9B:76:99:FB:27:D0:16:FC:BF:DB:81:30:C3:8C:28:5B
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:02:de:65:2f:69:af:78:fd:57:a0:85:74:a7:a1:a9:77:10:
5d:87:d7:5d:db:cf:7d:84:85:51:68:f7:50:7b:9d:42:9c:91:
82:44:83:26:0c:54:9a:7c:e0:a9:41:ec:dc:28:22:82:84:63:
68:30:87:24:1f:5a:12:7f:15:fc:fc:1d:d6:39:1a:c0:a5:57:
e6:5c:78:ef:72:64:94:fc:74:99:2f:63:46:5b:b0:5e:b1:a9:
8b:21:c0:1f:ea:64:e9:72:09:63:8a:f5:a7:7a:07:8e:63:5f:
dc:69:6c:cc:b2:54:96:b7:8e:18:53:ea:a6:b7:c5:d2:34:37:
3c:00:6f:a2:e7:2f:d9:9d:04:06:93:c0:48:85:2d:aa:55:70:
96:df:26:64:da:48:3b:fe:6b:52:af:7d:b7:55:ae:00:c4:fc:
69:b9:b3:11:28:ef:2e:d1:dc:89:81:07:70:6e:81:08:ed:5d:
c1:18:92:90:20:47:09:e9:54:5c:ea:30:d1:1a:e1:3c:a8:21:
da:76:98:5a:98:c9:f9:80:f6:ca:0d:af:60:49:f0:37:75:dc:
b7:77:92:82:f6:f4:8a:13:2c:18:28:05:dd:0b:00:80:f4:c9:
d9:ac:91:70:89:03:96:bf:16:b5:91:bf:2a:88:b3:a3:59:b1:
5c:c8:58:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:13 2025 by rpki-client