Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File: p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier: lAPVbdJpftTe3Y/rGpyvh3oIDfbLvsfLYuHO0Mj0ljE=
Subject key identifier: B6:1B:AF:32:95:D6:53:AD:62:C1:29:AD:D7:49:7F:16:D3:C5:7C:67
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 01974EC51F54AB2DDCD047C80A24170A273E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number: 0D09
Signing time: Sun 08 Jun 2025 09:00:30 +0000
Manifest this update: Sun 08 Jun 2025 09:00:30 +0000
Manifest next update: Mon 09 Jun 2025 09:00:30 +0000
Files and hashes: 1: 3DUEt-aAns-v1SVe6cG9Jeqaah4.roa (hash: 80+E6/cb26cmgMWADgR9cowpvlm1kb/qW3Qt9g0U5L8=)
2: Ap5URXBO93O7jJtjlLZVH2pw48c.roa (hash: p0iYaq767KbYvMNrK5KRomzTD5nBTVSwaVmB+7Atf7Y=)
3: JEudm5eaXMbpcorZfF2mGZr0koE.roa (hash: XbkPUoxJZnY0l62UTU5OlIMUIwc1e7/u/vIUsrvTLYY=)
4: gJZeDk4rmX44E5axtXtFWO80NO0.roa (hash: pUiSGUoY8i4KMd2N+BSEOVvNbEKEOnmR+nGAVe0LW6E=)
5: lejfRms_8jcNpkPTbPyQIBJyGvk.roa (hash: tyCtAQGeo8obwJOw9cT2nm1EzzLsrcw7uVb2b4sZkgw=)
6: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: 1HU+NPSkLyD49xpqHVQCnkTg1sGtXJqvf9JLf98Emok=)
7: saa_0VvgXSNx1kkjSqyVEbVnkCY.roa (hash: v+RU7IsAtr1sKZAICZ44u+iiQ3vM7YjRtrxROuRMlCQ=)
8: x0T3yvJpLXpG0yBkBOlH0qchh3U.roa (hash: Lt2tpn0tH6x5Kf9HXc8LFADRTohAK1wE2pgpgUDlEXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:1f:54:ab:2d:dc:d0:47:c8:0a:24:17:0a:27:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Jun 8 09:00:30 2025 GMT
Not After : Jun 9 09:00:30 2025 GMT
Subject: CN=b61baf3295d653ad62c129add7497f16d3c57c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b7:c5:cd:2c:13:9b:2b:1b:cd:f1:3d:01:53:
8c:90:a7:e7:18:f9:f3:22:45:c8:a1:97:a9:7b:72:
95:e0:95:8c:d8:d0:2d:64:62:79:80:39:17:ba:9a:
a3:c4:2a:b3:51:83:69:00:f9:c4:29:76:5d:86:6c:
fb:e7:db:aa:0e:1e:b9:65:25:03:de:49:1f:4f:97:
68:ac:8c:01:06:9f:d7:59:82:55:f9:ba:cc:3c:73:
62:68:70:57:53:7a:28:73:2e:08:62:2e:ac:1f:08:
6e:57:47:84:8c:55:4e:6b:5e:f2:15:cf:89:b0:7a:
1a:b9:49:ae:60:e0:13:aa:a6:82:7f:e0:96:05:bc:
3e:8f:e8:ff:1f:94:3e:e8:f4:0a:86:eb:2e:17:eb:
49:6d:2d:36:0c:58:b8:0d:95:7e:82:e9:0a:b6:7e:
f0:19:8f:8c:9a:c6:fa:ba:98:23:30:70:d1:c8:8a:
7c:a9:d6:0d:e1:eb:bb:6c:b3:24:3a:93:bd:91:2b:
7c:3c:2c:e2:3e:e6:ce:7e:32:82:22:73:5f:8f:2d:
44:fd:21:e9:2d:ed:60:5c:f2:a1:5f:ff:ec:58:fb:
b1:d7:71:14:1d:42:fa:c4:8d:03:7b:fb:a4:a0:3d:
e4:32:86:47:f3:50:7d:00:ea:57:34:43:31:91:b3:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1B:AF:32:95:D6:53:AD:62:C1:29:AD:D7:49:7F:16:D3:C5:7C:67
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0d:1b:11:ef:de:aa:b7:1a:2e:1b:3f:82:5a:98:0b:f8:ce:
a7:8e:93:db:99:8a:04:b5:7f:01:8c:3a:73:d5:6d:ca:d8:e1:
f2:1b:d2:8f:c7:2e:bf:2a:01:3c:5f:9a:8f:5f:f8:12:b6:b2:
85:4b:40:e7:30:61:81:72:c4:57:e8:4c:5e:f4:23:88:9a:d1:
dd:7a:b3:f0:36:9f:4c:2e:6e:9d:eb:2b:7c:6b:0b:69:2d:81:
53:9d:c8:24:52:3c:1d:18:5b:52:be:07:d8:3d:06:92:53:e0:
2c:8c:68:98:3a:39:b8:7d:3e:ed:40:c8:91:8a:17:2d:f6:bb:
81:ff:7e:df:46:6a:d1:29:34:b5:d2:e9:59:e2:4c:6b:2b:cd:
4b:65:ac:03:a3:12:db:8b:86:a2:b7:85:53:41:7e:3a:d9:7c:
a3:9f:93:1e:ab:b9:8b:cb:5c:31:aa:52:d2:f2:7b:30:77:c3:
61:e8:e3:c2:29:84:60:40:84:20:c5:98:73:62:c3:d0:58:08:
7c:c8:c9:e8:b8:d7:c4:bf:5d:be:93:93:cd:69:e3:a8:de:59:
49:15:5b:5c:85:ab:14:53:8f:96:3e:2b:9a:b1:a3:30:b9:08:
d7:16:f6:04:ba:fb:4e:1c:14:e6:d9:69:fd:8d:d7:58:5f:68:
60:a2:22:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:00:51 2025 by rpki-client