Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
File: SU0Or4AlCrgkiYm-caQDlxjWk1o.mft (raw, json)
Hash identifier: mkJAaGZZCFwk9noNVt1/lN9e0kfGI11srF5QOKgE1Rw=
Subject key identifier: CB:75:3E:E3:B4:8F:B5:9A:FA:FF:EA:DB:69:B6:9D:4B:30:E4:89:FE
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial: 0197488C3EE796DFA3BC4C0F0F3FA7CA3C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 04:00:40 +0000
Manifest this update: Sat 07 Jun 2025 04:00:40 +0000
Manifest next update: Sun 08 Jun 2025 04:00:40 +0000
Files and hashes: 1: Ad7sRIt_14WqsoXSVJnhtt5pR6I.roa (hash: d1H2UkdaZjL8z/VCs5Y8T9oYvq5D7T8CQrV9qDD8uXE=)
2: SU0Or4AlCrgkiYm-caQDlxjWk1o.crl (hash: EkuZH7YthQU3PSsimgeRwQY34b9oRQ81+EQY8uNIRP8=)
3: fbnqy98yfE_Lzn_9R-s84dMZn3s.roa (hash: RB1a5+/ABy4Ucs2InLVoqKGALjdVGmuLcFN8wD1kPqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:3e:e7:96:df:a3:bc:4c:0f:0f:3f:a7:ca:3c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
Validity
Not Before: Jun 7 04:00:40 2025 GMT
Not After : Jun 8 04:00:40 2025 GMT
Subject: CN=cb753ee3b48fb59afaffeadb69b69d4b30e489fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:01:ac:00:4e:5a:24:d9:c0:6b:63:90:c5:58:
cf:65:7f:35:51:8a:8b:2f:f8:2b:40:fc:54:bf:9a:
fd:0b:07:10:64:2d:ca:9e:f4:e4:80:84:79:6c:80:
2a:9e:97:45:f0:85:4c:ec:b1:d0:61:4f:a6:cc:de:
d2:55:81:d1:c2:f8:0b:dd:e2:57:bc:fa:1d:44:1d:
34:f4:91:4b:d0:40:48:2b:a4:6e:e1:4f:78:60:ee:
b4:8c:75:0e:33:18:49:14:04:11:8e:31:af:91:25:
55:37:d4:fd:76:ea:aa:41:ba:10:c9:c3:22:04:a7:
4c:7d:f9:3e:6f:f3:07:71:fb:69:d9:cf:8c:63:6e:
c1:6b:ef:5f:25:d8:77:d5:68:81:8d:4f:ea:30:61:
7c:7b:f3:4a:5f:02:20:c3:81:ea:15:a7:39:a5:8f:
2f:f9:c0:f1:28:d8:a5:bd:e1:aa:36:2e:59:f8:6a:
ea:dd:0e:e1:96:ba:ca:2b:3b:54:4a:1f:fe:dc:63:
72:3e:bf:10:a0:a3:2c:ab:5f:84:5d:a0:32:cc:5e:
12:56:c3:fc:ad:50:02:bb:38:67:a5:60:ce:9a:96:
28:01:11:85:b3:2e:99:0d:6d:0a:26:98:c5:c1:66:
f4:e5:96:b7:3d:39:17:be:3c:c3:20:0f:71:bc:e6:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:75:3E:E3:B4:8F:B5:9A:FA:FF:EA:DB:69:B6:9D:4B:30:E4:89:FE
X509v3 Authority Key Identifier:
keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f4:c0:7c:2c:ab:d5:b4:07:a9:81:13:02:a8:01:6a:71:4f:
b2:a3:39:c9:a0:a9:a0:37:65:ea:f0:a3:74:51:9a:d7:07:b6:
83:1a:b5:e8:ea:a5:d8:43:75:a0:b9:ef:38:ce:18:b9:0e:0f:
63:81:fb:ef:3d:68:6e:ee:22:e4:3f:f5:fb:f9:4a:34:dd:97:
af:4b:f7:4b:55:f3:b0:f7:20:e3:3a:44:af:a5:5d:5a:24:ae:
08:ec:29:24:c8:0e:dc:cf:35:da:dc:d9:9f:30:95:b9:e1:50:
ef:bf:37:b0:51:34:60:14:46:f8:a8:a6:3c:32:0e:d4:58:d3:
68:99:e2:3d:9b:a2:c4:3b:57:53:7b:ec:d6:f6:c6:96:b4:6c:
a5:9e:b1:92:96:8a:5c:49:7c:6d:de:f0:92:66:4f:10:b9:e4:
d0:6b:f3:e8:f5:44:57:15:d2:bd:e3:0c:d8:3c:a6:dd:01:9e:
71:70:5d:06:9c:9d:a6:be:d1:00:0b:ca:82:6f:ed:28:58:e3:
7a:8a:ed:cc:47:29:34:c8:5e:04:ca:30:07:5e:7e:28:98:6e:
39:07:c2:14:5c:b5:bf:bb:ef:c9:5f:89:ef:88:f3:e3:76:65:
f6:2b:94:11:1e:8d:dc:91:20:72:0e:7c:2e:83:1a:3c:5e:2f:
8f:a4:d1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:55 2025 by rpki-client