Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
File: G82c0xYDmcHjyAzwdIZ6cp991Pk.mft (raw, json)
Hash identifier: BDfHWcTGzKJnd/xEyuyilr3Ou1Xo+Ir+U8GjdA1QjB4=
Subject key identifier: 4C:FA:35:51:0E:48:4E:93:2A:A8:78:33:8E:A7:32:7F:59:86:EB:42
Authority key identifier: 1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
Certificate issuer: /CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Certificate serial: 01974F334AFDC424F28C6054E1FD75B9A4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 11:00:50 +0000
Manifest this update: Sun 08 Jun 2025 11:00:50 +0000
Manifest next update: Mon 09 Jun 2025 11:00:50 +0000
Files and hashes: 1: 65jp3a6f2gh4Tkpte2rBeESresA.roa (hash: 07jq7hxGRgJkHsgPxiO4p+naJnzzp9QCQTCf5Ueq5Sc=)
2: G82c0xYDmcHjyAzwdIZ6cp991Pk.crl (hash: k4ibyZn3oJ/JP1ou7agK4w/VJkygaXu8/oE++BauEwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:4a:fd:c4:24:f2:8c:60:54:e1:fd:75:b9:a4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcd9cd3160399c1e3c80cf074867a729f7dd4f9
Validity
Not Before: Jun 8 11:00:50 2025 GMT
Not After : Jun 9 11:00:50 2025 GMT
Subject: CN=4cfa35510e484e932aa878338ea7327f5986eb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5c:61:dd:d6:68:0e:2d:ce:aa:c1:af:36:01:
04:32:b7:00:bb:33:81:7f:af:99:ea:36:b0:0a:f9:
fa:d0:f0:f5:bb:86:fc:bf:3a:cc:1f:69:8c:f5:f0:
09:15:10:35:60:90:ad:fc:ff:1b:02:94:9e:d7:7b:
30:e8:42:8d:aa:de:75:ba:b5:cd:a9:9d:c0:3e:e1:
42:f1:e0:15:1c:c3:17:9c:03:fd:08:68:36:9f:27:
bf:1b:68:ff:eb:44:e0:5c:cc:ee:c5:ae:d7:48:c8:
e9:4d:8e:89:27:15:a8:d7:4e:d8:9f:70:f1:63:02:
fc:c8:74:84:08:ca:fc:5e:64:9d:41:b7:52:1e:69:
ab:9d:ca:4f:e4:e2:a0:d2:7f:4f:de:2c:11:a9:13:
f6:d3:44:1c:dc:5c:2b:89:56:11:b7:5a:7e:51:0a:
84:2a:48:ae:d1:1a:17:c3:6e:d3:53:06:26:57:5a:
0d:94:f9:d3:77:9e:62:1a:1d:14:13:b5:b9:4a:42:
70:aa:67:95:db:e8:15:2a:98:d5:69:a8:8c:9a:88:
6c:79:5c:57:b7:5a:7f:27:fb:32:19:78:c1:e2:e4:
7f:7f:26:c1:78:bb:d5:80:09:07:d0:70:e3:98:6b:
75:d0:2f:e6:66:a2:e9:86:2d:19:da:c0:3a:97:12:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FA:35:51:0E:48:4E:93:2A:A8:78:33:8E:A7:32:7F:59:86:EB:42
X509v3 Authority Key Identifier:
keyid:1B:CD:9C:D3:16:03:99:C1:E3:C8:0C:F0:74:86:7A:72:9F:7D:D4:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G82c0xYDmcHjyAzwdIZ6cp991Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/427456-4957-4d33-9c64-16f4057fac26/1/G82c0xYDmcHjyAzwdIZ6cp991Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ee:92:89:c0:a4:3e:33:db:01:2e:ec:6e:d0:1a:d9:c6:85:
71:bb:bb:bd:63:92:94:ee:37:0b:df:9e:ca:1e:97:17:d7:90:
bc:e7:10:91:54:b1:38:20:00:25:11:fd:98:2d:d7:76:8c:2c:
92:8a:70:1a:20:dc:70:7e:0f:69:be:47:61:ad:81:54:1c:2e:
0e:5e:ab:f7:0c:25:8f:d6:85:97:ad:82:4f:ef:c2:77:61:7e:
f2:4f:e0:26:7b:e7:a0:67:e5:09:4f:78:8b:b0:c0:f2:38:7b:
aa:16:33:28:a8:5b:28:98:3e:63:3b:31:d3:e7:94:f1:d9:81:
4c:16:57:cb:d3:a8:aa:26:9a:72:b1:74:cb:d8:c3:b5:61:3d:
34:b4:17:1c:e8:97:a1:d5:27:84:65:68:ed:4d:d8:81:1d:01:
fb:bd:45:c3:61:ff:10:09:3a:0b:b7:32:69:08:ff:0a:8b:23:
cf:b5:ce:22:9e:17:18:ca:e4:e9:52:0a:87:e6:02:30:6a:85:
38:96:ef:0b:10:33:c6:38:9b:a8:e2:82:81:35:2d:a1:40:b7:
52:31:93:15:28:7d:b3:6d:ec:9e:ef:19:91:39:7f:67:62:d1:
31:74:10:ac:0a:72:99:86:3d:b8:b0:d2:e1:eb:79:21:6e:be:
7c:b4:71:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:02:34 2025 by rpki-client