Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
File: IAsV4Hg_4A8bile9FP29BpJLiDI.mft (raw, json)
Hash identifier: WhWP1CunLrR+rIN1c5+yhxbPgDeHTk9oKRQpek9L2tg=
Subject key identifier: 55:4C:D1:3D:81:C7:4D:2A:89:44:00:8D:00:C8:65:87:44:EF:CA:FD
Authority key identifier: 20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
Certificate issuer: /CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Certificate serial: 01974B1F83C4FCA1DE24FB81B5B64D814D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 16:00:45 +0000
Manifest this update: Sat 07 Jun 2025 16:00:45 +0000
Manifest next update: Sun 08 Jun 2025 16:00:45 +0000
Files and hashes: 1: IAsV4Hg_4A8bile9FP29BpJLiDI.crl (hash: 7i0QSNj2NEEg5TMfDr4PIVW2E/mo7HWj6TWncWE98Rw=)
2: foZeHIwLujdlY8Z9L88C79OdbL4.roa (hash: kBji60S+DjYJ/bgY7+g+22RM5gAKkLkkfayTk1h8AIo=)
3: szEuog0QzjoBQW1CQcU6MA8xPCY.roa (hash: LsMXxa5IeE1fxcnMKQjYIuPdJ91pJvkbpdujugd5olw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:83:c4:fc:a1:de:24:fb:81:b5:b6:4d:81:4d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200b15e0783fe00f1b8a57bd14fdbd06924b8832
Validity
Not Before: Jun 7 16:00:45 2025 GMT
Not After : Jun 8 16:00:45 2025 GMT
Subject: CN=554cd13d81c74d2a8944008d00c8658744efcafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:42:f3:50:24:36:70:c0:44:aa:84:e5:63:39:
25:a4:d9:0d:12:9b:1f:0f:ac:a0:57:46:8c:55:be:
c7:36:95:67:a4:de:c8:a4:ca:e9:e5:08:27:70:34:
e3:27:6c:4b:ec:53:49:91:c0:b2:da:07:77:e5:ad:
26:71:49:d6:fc:b4:98:a2:ce:83:3e:2f:2d:2e:60:
49:e9:b6:d9:fe:96:4e:3a:a4:b7:f6:df:9e:67:85:
4b:bf:34:4a:11:3d:4a:a1:ef:0d:fa:7d:cc:74:25:
13:74:47:79:7d:81:1e:0f:46:c2:c1:51:f4:65:e5:
fa:59:37:e9:4f:46:d6:cc:ea:c7:c9:20:22:b8:78:
fc:88:cb:60:bd:ab:00:51:7b:8e:70:81:72:74:b8:
5c:19:c7:87:df:d6:a4:ac:54:d2:f0:88:5d:77:d0:
57:10:16:80:cf:71:24:02:4b:68:67:a6:00:a9:ac:
e1:a8:3c:bf:b2:de:24:b6:05:49:41:eb:fa:b8:49:
ef:1e:10:a0:e4:8f:7b:74:e3:c8:43:27:64:84:6a:
21:33:56:7d:7a:ca:fb:35:fa:62:5a:42:21:5a:c9:
b8:da:13:96:b4:11:f6:47:cb:17:c4:b9:04:2f:79:
22:56:06:56:b1:c8:e9:07:83:71:45:0a:4a:48:d2:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4C:D1:3D:81:C7:4D:2A:89:44:00:8D:00:C8:65:87:44:EF:CA:FD
X509v3 Authority Key Identifier:
keyid:20:0B:15:E0:78:3F:E0:0F:1B:8A:57:BD:14:FD:BD:06:92:4B:88:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAsV4Hg_4A8bile9FP29BpJLiDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f0a67c-bd4f-4ddc-8c61-3fe7aea9e2e0/1/IAsV4Hg_4A8bile9FP29BpJLiDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f3:01:c1:56:66:f6:54:ae:57:45:87:88:04:6f:d5:17:74:
a7:52:cc:0c:c9:5a:8c:4e:2c:51:6f:b8:57:76:8f:ed:90:18:
8d:68:3b:b2:a6:77:d4:2f:b3:6a:fb:99:5b:80:35:e6:ab:a0:
9b:bf:65:45:47:c1:62:84:fa:0c:b8:af:6b:02:37:e1:3b:83:
d4:c4:8c:dd:68:8e:15:30:5c:0b:c0:3e:c9:d6:20:ae:29:df:
09:fe:4b:c5:d5:bb:4c:77:36:77:d2:1d:03:6f:55:d6:c2:cd:
e0:65:f8:02:ae:c1:35:c0:aa:7b:3d:6f:06:61:39:e5:78:1a:
a4:81:41:7c:7c:68:a0:9e:bc:06:45:0a:be:a5:ec:74:d3:87:
db:74:3b:73:9b:01:87:cd:4a:3d:bf:30:94:10:bf:91:59:20:
71:da:4e:b3:de:25:09:aa:13:4b:37:ec:4c:30:52:72:cd:b6:
f1:b8:db:08:90:89:74:42:c9:5f:a1:a1:ec:b7:ae:fc:c1:55:
42:ba:7b:32:65:69:01:ad:29:10:dd:cf:97:25:d1:61:7d:60:
ad:f1:79:e8:6c:12:64:ac:c4:10:f5:3d:d3:16:65:9d:1d:a9:
97:10:db:44:14:fe:52:4c:90:56:87:28:51:09:f0:df:da:87:
00:77:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:26:21 2025 by rpki-client