Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
File: 51qM71_SqPGFr_WajG692YNjrGc.mft (raw, json)
Hash identifier: KHkerxmBuUChpKFAGvBVqITfRCgA8riQnOs0WQoG3uA=
Subject key identifier: AA:C6:C0:7F:36:B2:F4:A9:72:AB:9A:0E:03:D3:9F:65:02:15:45:C4
Authority key identifier: E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67
Certificate issuer: /CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67
Certificate serial: 01974C69BBD1735318C8CDD7891AC5B6F98E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
Manifest number: 07F1
Signing time: Sat 07 Jun 2025 22:01:26 +0000
Manifest this update: Sat 07 Jun 2025 22:01:26 +0000
Manifest next update: Sun 08 Jun 2025 22:01:26 +0000
Files and hashes: 1: 0IBqXjTVhcvD4lCSiVgJHykRKw4.roa (hash: Dumvxj6VzhZyR7xgjdh7+SNA6SS4v9smnXFYVL96Sao=)
2: 51qM71_SqPGFr_WajG692YNjrGc.crl (hash: O3b6qtRsQu+4uQjuMSJWpcHWoeS/JakxhL7QPGE2dIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:bb:d1:73:53:18:c8:cd:d7:89:1a:c5:b6:f9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67
Validity
Not Before: Jun 7 22:01:26 2025 GMT
Not After : Jun 8 22:01:26 2025 GMT
Subject: CN=aac6c07f36b2f4a972ab9a0e03d39f65021545c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:69:25:c7:e4:16:92:aa:c7:3c:11:fe:28:f6:
0d:76:fe:7b:5e:87:09:3d:0d:7b:83:88:2c:44:8d:
b6:51:57:56:1c:2b:bd:a9:47:48:50:cb:af:1e:6f:
2f:14:05:fc:59:1d:0f:67:45:b7:4a:a8:b0:fe:b5:
8f:e7:c8:13:9b:73:a3:96:bd:27:54:dd:62:fc:46:
a8:fb:e2:66:d2:80:cc:61:a1:7b:2f:1d:b1:22:88:
17:db:c5:fa:7d:6c:d8:2d:b5:98:3b:ce:cd:44:af:
39:ea:8a:d0:3e:58:de:16:3f:31:cc:5a:90:fc:15:
ff:e7:78:65:b6:57:c5:a1:c1:50:de:75:5d:c2:2f:
c0:84:87:95:dc:5f:c8:ff:54:5c:3f:23:93:9f:77:
3e:12:d5:91:53:d6:25:72:20:b6:89:39:1e:18:02:
96:8f:d4:9c:e9:f9:c6:05:e9:54:b6:bd:ee:55:68:
6a:e4:01:d0:6b:11:72:c6:c9:a0:9c:ca:07:05:f0:
da:ea:19:ba:46:f6:62:51:c0:94:60:de:ef:61:99:
f8:c2:74:fe:a8:22:ca:c8:89:8f:87:89:bb:72:87:
98:23:d2:3d:2d:14:1e:ea:3d:a5:58:4b:82:23:97:
c6:23:28:21:16:81:76:2d:a0:52:f4:43:90:87:28:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C6:C0:7F:36:B2:F4:A9:72:AB:9A:0E:03:D3:9F:65:02:15:45:C4
X509v3 Authority Key Identifier:
keyid:E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2b:54:f7:f6:5f:36:11:b8:91:45:3d:f6:63:94:29:cb:0b:
51:e4:f2:6f:b6:e8:c5:eb:e1:8f:0b:0e:d0:01:99:a6:3c:e5:
b1:9d:a0:5e:d7:a7:2e:8a:51:b3:a3:6a:34:12:0c:69:7c:6a:
cf:2a:1a:4e:66:91:ae:09:16:82:b4:8e:8a:de:ea:82:59:45:
97:78:0e:26:85:77:f5:79:49:3f:06:a0:fc:b1:36:87:06:b4:
b2:aa:04:6e:44:e5:56:db:61:ce:a0:e1:d2:e1:10:3e:0e:0d:
dc:27:2f:d2:c8:64:df:86:2d:44:59:8c:08:24:9f:9f:ae:fe:
0c:6c:35:d2:9e:69:c6:73:a1:82:60:c2:f3:df:e0:4b:91:1a:
c7:67:25:85:da:67:09:28:3a:1f:ca:c1:29:3b:94:8c:85:25:
ed:4a:95:27:d8:ed:ed:14:a9:5b:69:ee:53:b3:42:b6:14:cb:
0e:c0:9a:a6:de:9d:7b:e7:f6:ef:94:27:4c:95:3c:71:18:2a:
5c:d4:1f:08:63:ac:cd:6f:7d:47:af:d0:c1:bd:d0:be:a1:52:
90:1d:b8:bf:1f:85:44:18:5b:b3:9a:2f:a3:4e:39:9e:79:0b:
88:19:9b:98:8e:11:67:fe:50:4a:3c:5e:78:64:71:7a:52:13:
33:7b:8b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:14:11 2025 by rpki-client