Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
File: E-Ga72g5aeuYLy3bIZtGUq8muW0.mft (raw, json)
Hash identifier: Mn3tDOOSRH69xdvqqnL05/uGRnbEwEf2thjwNihM6U8=
Subject key identifier: 3F:08:ED:31:88:E3:F9:B7:5D:83:B5:6B:44:7E:87:3A:9B:2A:86:9B
Authority key identifier: 13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
Certificate issuer: /CN=13e19aef683969eb982f2ddb219b4652af26b96d
Certificate serial: 01974AE856BA04A56D528D40F68AFD31ED08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:00:29 +0000
Manifest this update: Sat 07 Jun 2025 15:00:29 +0000
Manifest next update: Sun 08 Jun 2025 15:00:29 +0000
Files and hashes: 1: 0rZo7T7QJSfK-cCHectv5r7maVc.roa (hash: ydGK6Xk1/nHzsPWXGP+mEEVT+bo9klxNhdh+HOQt8DI=)
2: 99X--GN0tUdbB7wXVNOGQxyvW00.roa (hash: DzsMRo6WJ9FJ0Pcv5LVEusYADeP8vZFSYsS2DB6NSss=)
3: E-Ga72g5aeuYLy3bIZtGUq8muW0.crl (hash: QIJIdMDyUbHzVFVNXC98T9Xd8C9RWdfWtBwR2UGUQrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:56:ba:04:a5:6d:52:8d:40:f6:8a:fd:31:ed:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e19aef683969eb982f2ddb219b4652af26b96d
Validity
Not Before: Jun 7 15:00:29 2025 GMT
Not After : Jun 8 15:00:29 2025 GMT
Subject: CN=3f08ed3188e3f9b75d83b56b447e873a9b2a869b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:74:e7:b4:ee:75:05:c1:d6:87:36:ed:41:
e3:e1:23:78:b1:21:3e:74:d3:bf:e9:05:9a:03:93:
2e:7d:4e:9c:f3:f7:80:e5:da:c5:a6:e1:0c:60:65:
64:9e:90:84:15:8c:2b:61:17:d5:cc:d3:55:22:34:
6d:d0:00:a6:72:51:29:64:e3:75:66:db:5f:7b:75:
8b:44:48:09:04:1d:db:fe:22:00:56:5d:56:fa:95:
b6:f8:41:b7:fe:dc:79:3e:96:96:70:3b:c4:f6:eb:
72:f8:40:fe:b4:eb:ab:d3:95:a9:ea:5c:fb:cf:58:
76:9d:71:36:af:01:9c:19:ea:97:07:62:6d:d5:ec:
e6:da:b2:d7:29:1f:37:85:41:ed:be:63:e4:4a:90:
39:b2:46:c6:30:fb:d8:c3:f4:67:b2:ec:c3:9f:09:
ea:ad:57:11:f4:da:bb:02:bc:0f:65:ca:dc:4b:7b:
cf:b0:1f:93:c7:d1:5d:e1:fc:b8:f5:db:4d:37:f3:
fd:ff:fb:b9:08:21:d2:f0:f7:2b:2e:03:d7:9f:72:
74:b2:02:48:78:97:66:66:a2:6f:53:db:b1:1f:23:
ab:99:a6:8c:37:91:2e:9f:3c:4e:7b:21:3c:f7:bf:
97:04:89:64:35:88:f8:ff:f9:0d:3e:50:48:3a:2b:
81:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:08:ED:31:88:E3:F9:B7:5D:83:B5:6B:44:7E:87:3A:9B:2A:86:9B
X509v3 Authority Key Identifier:
keyid:13:E1:9A:EF:68:39:69:EB:98:2F:2D:DB:21:9B:46:52:AF:26:B9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Ga72g5aeuYLy3bIZtGUq8muW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/236aba-e8f2-4e06-a064-ff96928a6df4/1/E-Ga72g5aeuYLy3bIZtGUq8muW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:77:1c:bb:6c:31:b2:13:12:40:3a:fb:55:0e:dd:4e:0c:29:
7e:a5:bc:f0:df:89:38:b6:47:b4:0f:f8:08:2e:82:ed:26:b2:
37:d4:4a:f1:e9:cd:63:9c:f7:69:df:d2:14:09:69:ac:25:5f:
d2:78:cf:9d:2c:e9:70:3e:fa:54:01:23:d3:eb:f3:5a:49:ad:
3c:fd:94:77:76:c1:87:07:65:4d:f4:20:11:64:42:5c:e0:94:
66:82:cf:eb:46:35:4a:a8:f6:40:e7:c2:d6:a4:f4:0e:4a:2c:
28:f2:c1:2f:4d:e5:95:2d:5d:a2:a2:a5:b1:e9:f5:78:84:fc:
62:41:80:4a:94:f6:a2:9c:26:58:3f:ec:e3:b6:66:1d:d1:93:
f7:8f:b2:35:19:63:a7:38:f9:df:44:06:e9:12:37:3a:3f:bc:
d6:1d:e0:7f:51:f0:47:2c:4b:19:a6:0b:16:62:f2:53:91:0a:
4c:c8:47:75:75:45:d6:99:ed:7d:ff:91:e1:27:92:5e:a5:22:
47:3b:42:de:ef:66:36:db:32:b8:bc:a4:a3:3a:4c:11:15:00:
a7:ec:e5:31:e4:61:77:0d:6f:88:70:3c:4c:a9:a8:4a:9d:c9:
32:0d:3a:c2:2d:3e:23:df:30:aa:a5:5d:85:98:90:df:76:92:
09:5e:23:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:16:28 2025 by rpki-client