Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: oR8eShcSDBqiTmmoPHmrjsJl4TPBQBaLNWhsImqeMSQ=
Subject key identifier: 88:B1:93:4D:E1:DC:A8:CB:5C:46:6B:73:51:DE:C4:22:95:E2:3F:48
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 01974A7B8CE94A4CDB42B0920E063D8699DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 13:01:40 +0000
Manifest this update: Sat 07 Jun 2025 13:01:40 +0000
Manifest next update: Sun 08 Jun 2025 13:01:40 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: pZEqOfTOvoX6Fi/gvc1ZZUw8uBlqeGSiO7cyidoK9qs=)
2: y4Dr14LmLQXVPFrGXXshyx64j84.roa (hash: 1bzHGlABR0e65obFVowAu77APqKznVv88s6eHNbebiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:8c:e9:4a:4c:db:42:b0:92:0e:06:3d:86:99:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: Jun 7 13:01:40 2025 GMT
Not After : Jun 8 13:01:40 2025 GMT
Subject: CN=88b1934de1dca8cb5c466b7351dec42295e23f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:66:63:7a:cf:24:25:2c:ec:ce:0e:6a:1f:5e:
67:75:b4:d6:d1:ad:86:60:2e:1c:15:e6:55:17:f3:
17:d3:dc:b9:ed:0f:34:35:f2:2a:22:ba:c6:f1:9a:
55:6d:38:d3:e1:2f:bd:4e:80:05:6b:d9:07:8c:6f:
d2:b5:22:60:b9:08:56:1b:a9:ab:a3:f4:5a:15:39:
e9:b3:1c:d3:44:bc:4d:45:2f:5a:ef:57:73:f6:ef:
40:d8:ad:b4:59:49:1b:ed:48:11:50:d8:35:e3:82:
17:dd:f5:93:0a:0c:aa:53:9b:45:4d:10:9a:6e:94:
c2:f9:a8:2a:f6:35:b7:d5:3e:c8:2e:35:9a:43:c8:
9a:6b:63:12:8f:61:4c:7c:d2:c7:ee:04:56:53:ec:
a6:3c:ef:a6:78:47:df:db:42:11:1c:52:35:db:d5:
2e:26:1a:cc:73:88:32:63:c8:4e:ec:a4:3a:26:f0:
e5:8d:4a:72:eb:ae:f7:70:cd:34:5c:49:40:aa:de:
a4:84:4d:d9:7c:8a:62:57:74:fc:dd:19:75:38:cb:
50:50:46:67:eb:65:29:62:d2:ce:29:5f:d6:68:20:
68:62:79:41:04:c4:70:0f:fd:fd:c1:4e:6a:ab:7d:
52:b6:a4:ec:55:7e:77:66:2c:80:fb:96:cf:53:8c:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B1:93:4D:E1:DC:A8:CB:5C:46:6B:73:51:DE:C4:22:95:E2:3F:48
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:68:54:8e:e6:d0:39:dd:b3:12:50:9f:a0:17:fa:1f:53:fc:
2d:60:9a:d5:9c:b3:b4:3e:e5:7c:92:bb:d5:83:0c:62:a6:2a:
80:ef:c4:cf:21:7d:4b:f0:cf:c6:ed:cc:e6:77:05:3f:32:2f:
7c:0d:34:93:85:d0:e5:32:4a:dc:f1:3f:53:c8:9c:a5:4f:64:
1b:a8:59:5d:dd:66:26:b3:7e:13:99:49:d6:e2:fe:1d:d9:fc:
a6:8c:52:40:30:03:45:cd:06:7a:10:0d:49:8c:9d:bb:da:20:
2b:9e:38:59:ee:c7:ba:f5:db:b2:13:9c:11:bf:23:f5:18:0a:
10:9e:d3:a7:4e:1e:2d:26:27:5f:8e:dc:4e:b0:72:3a:90:69:
f5:c8:1e:c5:c6:01:e5:e9:f7:e9:ee:d8:6a:e6:11:80:7c:9d:
28:c7:bb:f1:d0:65:23:a4:b2:73:f1:6c:15:4f:97:8f:32:00:
fb:be:99:af:6e:ef:bd:22:3b:1f:0f:7b:8a:b6:3c:dd:d3:3b:
b2:57:bb:7b:1a:37:4d:0b:09:c9:34:2f:73:84:67:9a:93:dd:
ae:53:a6:ec:68:94:93:bf:30:7b:3d:05:cb:b6:5b:8d:20:70:
ef:4e:4c:91:19:8b:63:01:44:a1:ca:93:2f:8d:f8:36:d7:24:
31:3a:ee:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:51:18 2025 by rpki-client