Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
File: 7094lHNBzlWIi36_NpAUOwy_89Y.mft (raw, json)
Hash identifier: DiQmEkCNWHM/c2jkBS+O5OYWxHO1xMGc6FCetByrL8g=
Subject key identifier: FA:CE:FE:41:16:D0:23:99:0B:90:00:D9:F7:21:D9:1F:7E:7F:AD:D3
Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
Certificate issuer: /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Certificate serial: 019752D9058B387E8A9F227DF213D3ADB477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
Manifest number: 158F
Signing time: Mon 09 Jun 2025 04:00:43 +0000
Manifest this update: Mon 09 Jun 2025 04:00:43 +0000
Manifest next update: Tue 10 Jun 2025 04:00:43 +0000
Files and hashes: 1: 0IObLXNjZpL-NqHLkGFRtshmZ4Y.roa (hash: iLVj7sxryrS44+Um3qKoIRww0o5d/litSLFCSSNu8gk=)
2: 7094lHNBzlWIi36_NpAUOwy_89Y.crl (hash: nkpuibx66grjlgpvx+dM947TRE9AtHWZq24G9EAkCM0=)
3: BUhsNJUBNyb2HSIUiIeGUaXbRSs.roa (hash: WZxDNbWAEQbOChQ4uBirZFUp84bvXSVkcscB3oLo9vU=)
4: g0sPCB79WMlgxKBl78JsjxBs-fY.roa (hash: X+EXtP8p8Q91QAPiVwkYVGvv2ZKJC7/ZwL2Di69yJ1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d9:05:8b:38:7e:8a:9f:22:7d:f2:13:d3:ad:b4:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6
Validity
Not Before: Jun 9 04:00:43 2025 GMT
Not After : Jun 10 04:00:43 2025 GMT
Subject: CN=facefe4116d023990b9000d9f721d91f7e7fadd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:f7:6c:04:e7:8c:bc:b7:b0:46:f5:a7:d3:
f9:51:a1:e1:59:c6:fb:c2:18:07:f4:98:c6:70:13:
cb:13:ea:31:8f:90:e6:7b:60:cc:a1:9e:c0:35:d0:
9e:44:9b:43:94:f1:9a:72:76:b6:46:53:14:af:8a:
ad:d9:b1:04:24:7c:1e:06:e6:bb:a8:13:d7:02:3b:
88:cf:77:30:be:d5:c6:8f:04:46:33:d2:06:fa:7a:
17:ef:ab:14:ff:47:fa:e4:b7:da:92:7d:88:02:ae:
d9:11:76:40:34:ba:f1:79:1b:f9:c6:73:a1:59:b0:
fe:44:39:16:d4:75:c4:5b:84:44:5d:22:7e:fb:1f:
39:73:05:9e:35:b6:b9:12:c6:49:45:73:90:93:03:
c1:4d:87:d8:f9:b8:a2:c9:3e:f1:ff:e5:e1:d1:c2:
4d:bd:c8:0b:9b:92:07:b0:95:52:e1:df:84:0f:f4:
68:d8:72:fb:7b:49:c5:b8:b2:9c:94:d2:b2:9b:e1:
6e:4f:d5:62:12:46:cc:f5:83:67:2b:11:01:bb:9f:
f8:ea:a2:a8:d2:51:ee:5e:4d:60:37:01:73:70:06:
d9:9e:12:70:91:33:0a:2d:c4:bb:26:91:14:8b:7b:
2b:67:02:21:85:13:84:b6:63:5b:f2:10:64:6f:34:
2a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CE:FE:41:16:D0:23:99:0B:90:00:D9:F7:21:D9:1F:7E:7F:AD:D3
X509v3 Authority Key Identifier:
keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:36:58:1c:f6:df:f7:d9:45:02:93:af:e7:6c:a9:fb:62:4e:
23:da:d3:3e:d3:6a:86:11:2b:06:4b:98:31:d0:b3:bb:ef:e6:
90:27:9b:89:ae:3d:3b:98:46:18:a3:f7:19:71:4c:4d:51:cd:
00:46:1e:cc:e6:9b:fd:95:18:aa:85:86:b4:d2:6c:7c:27:a0:
a2:b7:56:c9:04:1a:c1:4e:73:dd:69:75:9e:0c:52:54:8c:73:
a9:ea:b5:bf:f2:39:1e:0c:d0:8c:00:1e:00:3c:d3:25:a8:e0:
4c:83:44:1b:2e:7e:f3:b5:ba:3a:58:9e:e5:e7:0d:2e:56:e8:
8b:4b:0d:e5:91:80:4d:b5:93:68:e3:49:b1:18:eb:43:c2:88:
8a:cb:d7:90:b8:37:6b:c0:93:5b:55:60:94:0b:8b:1d:45:fe:
cc:35:7b:77:d4:7b:0b:52:37:cc:93:f9:a1:77:99:73:e3:fb:
f0:36:2e:2d:23:1d:31:64:25:18:66:3c:c1:dc:64:99:89:46:
e7:ec:13:a2:99:a6:25:be:f0:bb:fc:4d:17:9f:34:82:f6:6d:
21:bc:04:87:db:05:f5:ad:ca:b3:b4:22:c9:14:aa:ab:ab:4a:
21:0a:82:6b:e6:42:6b:9a:aa:ae:f2:34:a5:db:b5:f7:df:1e:
0a:ff:33:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:57:08 2025 by rpki-client