Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
File: itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json)
Hash identifier: wGCcG5/u44oTmBgKsNqIXfA0lKdyOdZRmQP8zmirBUQ=
Subject key identifier: 07:58:01:24:A2:6D:72:DE:DC:2D:B6:EE:4D:08:DE:6A:EB:0D:6A:F2
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 019749D6179A965741BE35ECE06109376404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
Manifest number: 0B14
Signing time: Sat 07 Jun 2025 10:00:56 +0000
Manifest this update: Sat 07 Jun 2025 10:00:56 +0000
Manifest next update: Sun 08 Jun 2025 10:00:56 +0000
Files and hashes: 1: U9YffwceqXxTMUqyDWCzvXHoX1g.roa (hash: /csuQO3etFqd6uIjkI+HLHNXHWK6MILTkxxMM7ARd6Q=)
2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: ngzTTJgG8NfqA2Z9AgzyrJKm/+oAothBB51dwJugqBQ=)
3: mogbma_RtoADQ0xZNuTva7SSLFU.roa (hash: rClnvodfou+7xsqC44z7GFztSAn0mdcV3oviTeI4b0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:17:9a:96:57:41:be:35:ec:e0:61:09:37:64:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Jun 7 10:00:56 2025 GMT
Not After : Jun 8 10:00:56 2025 GMT
Subject: CN=07580124a26d72dedc2db6ee4d08de6aeb0d6af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1c:f3:f8:a9:3e:ef:94:62:08:33:a2:13:4d:
42:e4:5a:ca:6d:59:e2:93:c9:c5:dd:34:f0:50:6e:
65:92:7e:30:32:ec:8f:69:80:d7:94:d5:a8:bf:7c:
37:1e:d7:0d:80:74:48:4a:d9:9d:a0:41:42:e3:2b:
c3:70:19:9e:d9:80:b9:39:69:5e:d3:e8:29:cb:a9:
dc:22:8e:9c:00:d7:03:17:3d:9f:fc:ed:7e:84:99:
7f:58:d3:0e:34:2a:89:1e:f0:3c:b0:91:39:dd:7e:
2f:d4:6a:6a:c1:c4:dd:f5:12:aa:97:40:af:27:fb:
70:95:79:35:b3:0d:66:bc:e0:4b:d7:e7:14:85:1f:
74:d6:4e:f3:e9:6c:96:c9:45:65:18:dd:e5:6f:20:
b0:98:8a:4d:62:e8:b2:4e:cf:1b:49:a7:54:36:7e:
f4:dd:da:d5:48:bb:77:a6:c1:35:f6:c4:7a:fb:e8:
10:05:9d:58:53:4a:d7:89:c8:4c:c6:bb:0f:55:80:
4a:40:49:ca:71:31:1c:00:22:fa:d9:08:05:8f:38:
9b:ef:b1:a8:f1:be:49:97:44:dd:0b:a8:18:cc:2b:
fc:72:9c:2c:bc:fc:60:cd:68:2f:33:78:7d:16:7f:
a3:40:4f:b0:a0:f6:f4:c5:f3:6c:bd:41:f0:b7:48:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:58:01:24:A2:6D:72:DE:DC:2D:B6:EE:4D:08:DE:6A:EB:0D:6A:F2
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b3:4c:f6:0a:54:16:b6:c5:eb:2e:58:d8:71:30:9d:5d:69:
4d:f2:07:91:34:4a:38:35:93:bc:eb:38:86:f9:10:2a:8b:11:
36:d1:5f:b2:29:3d:e4:57:33:1f:fa:eb:0c:9c:b4:19:f0:67:
99:95:f1:3b:b3:4a:2f:c2:6a:36:3d:24:92:a7:3f:e9:be:c1:
7b:ad:49:59:22:34:53:63:15:e1:71:86:44:a3:61:d4:65:c2:
3e:f5:a2:90:f3:41:4e:ef:35:7d:42:f9:81:4c:f9:a0:28:98:
63:bf:56:6c:00:55:29:ac:2e:17:8b:2e:e4:12:bd:b4:94:c5:
7e:7a:d4:54:83:f1:4c:57:5b:45:1a:c8:d4:24:2f:8e:e4:d4:
19:87:7e:33:20:3e:4f:f9:3e:9d:84:fc:43:7a:0b:9d:f8:7e:
b5:cb:6e:70:82:15:6e:31:0a:75:4a:2d:3d:cc:3e:49:b7:d1:
0a:04:9c:f3:00:5f:0c:e8:eb:85:13:30:82:97:ab:37:8e:6d:
e2:aa:c4:bc:d9:58:46:60:06:87:50:96:41:f9:b7:e7:a9:7b:
f7:70:c9:0b:9c:8c:4c:e2:a6:85:9e:39:5d:68:40:4e:2e:51:
6c:67:c2:f8:96:c4:20:d7:83:49:2d:96:91:d4:c1:6f:97:79:
a4:49:ee:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:02:40 2025 by rpki-client