Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
File: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft (raw, json)
Hash identifier: jsJPWYcp5+VtYUubGjc2ci7mX+KmdNimVWBEx3zNpsI=
Subject key identifier: C9:13:F9:1B:81:FB:37:37:43:EB:0C:CA:18:92:04:B2:37:AE:51:B4
Authority key identifier: 75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
Certificate issuer: /CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Certificate serial: 01975046883D18BBD7E6F51E1BB7E65501C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 16:01:29 +0000
Manifest this update: Sun 08 Jun 2025 16:01:29 +0000
Manifest next update: Mon 09 Jun 2025 16:01:29 +0000
Files and hashes: 1: 1-TOVnm2gd04tI-uLivEABR6Pazo.roa (hash: QVp2c0LkMSwloi3MOMCG1fyuxaPczwJ3tn0nHSxmhjE=)
2: HgA_tKLG5N3ASR5gcHl20EupVRE.roa (hash: DRYtmqvkH/s26hespCVF8HpGzgqR1cL88tvUFROmz9s=)
3: dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl (hash: mq3tK0V41C1ilZ87ayB8DaMK7SJtRzDdskrAQwABiRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:88:3d:18:bb:d7:e6:f5:1e:1b:b7:e6:55:01:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=752b0d72bf0743bf2cdc78ba1f53e9a988f9af1e
Validity
Not Before: Jun 8 16:01:29 2025 GMT
Not After : Jun 9 16:01:29 2025 GMT
Subject: CN=c913f91b81fb373743eb0cca189204b237ae51b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:c3:ef:b9:a9:72:23:12:b4:58:6e:be:27:
21:d8:ae:67:d8:e9:93:5a:e9:49:53:ac:2b:51:5c:
2c:21:4a:f3:ab:96:89:2d:29:b0:3c:65:25:09:8c:
24:4b:5f:75:0e:51:da:77:46:11:65:3c:3d:f9:58:
16:2d:20:43:0c:1c:14:75:4f:29:ba:a4:de:9b:04:
0f:d6:78:3f:39:fd:d7:20:9b:25:05:81:3d:4a:12:
f9:0e:34:27:5a:69:f6:02:78:8f:c8:b0:1d:d3:fa:
06:c4:af:84:18:d6:9f:e3:f3:86:03:06:31:14:22:
de:60:1a:fc:1a:be:af:5a:75:2d:e8:7c:d9:1a:5e:
f7:b0:d9:54:04:10:2a:ce:37:bd:3f:b5:91:a0:8a:
79:0a:46:3c:28:b5:09:a5:cd:0f:dd:a1:d4:38:01:
c4:8b:8c:89:0b:40:9a:64:9f:58:fc:63:c9:15:92:
01:4f:34:29:4d:d8:0c:00:a2:a1:8b:86:a5:18:1a:
43:b1:b6:bd:14:e7:d7:2e:a7:90:d0:7f:26:b4:27:
0e:2b:c4:f2:d1:00:3f:a4:dc:5d:d5:20:b5:cc:0e:
4f:ed:b1:29:c2:26:ac:c7:74:9e:73:7b:08:f7:ad:
ca:e1:18:c5:59:04:2b:37:16:01:24:31:fc:be:f3:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:13:F9:1B:81:FB:37:37:43:EB:0C:CA:18:92:04:B2:37:AE:51:B4
X509v3 Authority Key Identifier:
keyid:75:2B:0D:72:BF:07:43:BF:2C:DC:78:BA:1F:53:E9:A9:88:F9:AF:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/dSsNcr8HQ78s3Hi6H1PpqYj5rx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f8:10:ca:7a:d6:1f:be:a9:dd:98:52:f2:bf:72:8e:5f:cf:
61:2e:87:0b:3d:13:15:c7:ca:2f:61:27:f9:17:6c:10:a2:2b:
85:b7:8a:e5:37:5b:9c:7f:6c:38:ab:64:17:4b:d4:81:c7:2d:
70:17:9d:0d:db:f7:de:12:d0:71:f2:57:b7:76:e3:7b:29:ea:
31:05:6c:83:84:9f:c6:fc:08:a9:14:d1:e4:0b:11:95:b0:82:
20:9a:d8:e6:dc:32:89:c3:cb:70:cd:28:99:0b:4d:82:a8:95:
a0:c1:99:7d:cf:30:42:39:f7:16:0f:04:96:31:43:6c:b8:dc:
72:15:6d:bb:26:90:21:9d:5a:e7:ef:70:ea:20:0c:59:1a:21:
fb:48:06:17:43:21:b7:56:52:a2:b5:19:81:58:32:b7:48:77:
9b:4c:9a:57:f1:2d:91:48:7a:eb:2b:67:b7:52:6a:fe:94:51:
17:7f:6d:33:da:19:a2:78:97:e2:38:6f:45:ba:a8:59:30:41:
0c:f6:f1:cf:42:6e:5b:30:17:6b:88:eb:b0:e0:20:f2:a4:b8:
97:79:01:2a:a5:08:b0:ce:2c:04:bd:7f:16:a7:8b:ad:08:3c:
33:48:a3:93:fb:76:35:5e:65:1c:bf:54:a2:3a:4f:3d:54:c2:
bb:42:19:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:15:33 2025 by rpki-client