Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: XVSQof6m1UoA3pb5DThpWsnrEbAHnscPSpSG6EEr4Yg=
Subject key identifier: B0:64:A1:0F:AD:A7:EB:B5:49:33:96:2B:F3:95:71:21:02:F9:63:AE
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 019746D4F7F3E38631EA9476480147505EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 20:00:51 +0000
Manifest this update: Fri 06 Jun 2025 20:00:51 +0000
Manifest next update: Sat 07 Jun 2025 20:00:51 +0000
Files and hashes: 1: Jo8Y435n3Pd_3zXxNtedYgjItDk.roa (hash: s59FKEp30KDhXVkiZy91uysMmddt+n0/jacR5LsK5DU=)
2: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: znUbZ5IShh2c9Xo+eS9xK4vYngVJbxGbNk8iN7LZisA=)
3: fvocZOR5mjQw63-hlnTV0AYJ-n0.roa (hash: EDtt1bNtketuScVPOmt7fRRKZDdXsTL+CjwO3mYdaKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:f7:f3:e3:86:31:ea:94:76:48:01:47:50:5e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Jun 6 20:00:51 2025 GMT
Not After : Jun 7 20:00:51 2025 GMT
Subject: CN=b064a10fada7ebb54933962bf395712102f963ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2d:28:a3:c7:58:d5:03:b0:35:bf:27:34:ec:
11:e8:ce:34:f9:cd:c5:61:bd:e8:47:00:e6:ba:ef:
e6:30:b3:c0:6e:a2:3f:2a:e1:b3:0b:06:77:4b:21:
52:f4:fe:d0:02:32:24:0c:51:89:3e:7d:8e:ee:dc:
9a:82:02:22:26:56:6c:f0:cb:19:e8:ff:b9:d4:ae:
ea:33:6a:75:f2:12:75:04:06:70:fd:1e:54:1d:74:
59:8f:71:9a:d4:8a:0c:ec:b7:a8:6a:c1:04:ce:d6:
72:58:4b:e8:57:59:81:26:30:fb:5c:23:d9:5a:ca:
b1:27:ca:fb:79:3a:ca:73:0d:58:c8:29:4a:78:2c:
7a:bd:da:44:b3:0e:6c:a8:49:a5:a2:1f:cf:f2:a6:
ee:39:be:a7:2b:07:8c:ba:4a:6d:a1:db:24:c6:06:
87:f0:e7:fd:15:2f:5e:0c:54:eb:0c:fb:39:96:b4:
49:46:8b:ec:6a:c2:6d:d6:56:2f:50:5b:5f:cc:1d:
84:df:67:7d:69:29:bf:be:59:91:45:14:21:64:e7:
ce:2f:31:66:d6:36:90:e3:62:59:74:5e:6e:99:42:
eb:6a:8e:44:cc:a1:23:16:58:a7:69:0c:4a:33:d8:
25:9f:50:c6:3a:0e:30:29:b4:60:31:f7:9d:b9:24:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:64:A1:0F:AD:A7:EB:B5:49:33:96:2B:F3:95:71:21:02:F9:63:AE
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cf:dc:76:84:99:69:33:db:49:3f:7f:36:e0:c7:7e:8f:c4:
48:b7:fb:cc:53:d4:d7:80:3a:9b:98:5c:95:f7:12:da:4f:55:
91:b7:94:2b:d6:a7:7c:7c:62:a8:11:c8:4c:29:93:cd:70:ef:
ac:06:7f:e8:53:20:1f:a4:95:7d:26:4e:27:83:bf:05:d9:c1:
52:7b:9a:c4:f8:94:4f:da:b7:18:da:9a:02:b9:6c:5f:2e:2f:
aa:f3:3e:2b:d6:22:81:48:50:8f:fa:77:ec:24:d2:e0:e6:82:
dc:a4:3e:12:aa:6c:a9:32:16:94:1a:05:06:3a:7e:d8:1a:75:
f3:20:23:9f:1b:f0:88:8c:97:75:15:a8:c8:ac:80:64:19:ec:
37:b4:94:6e:5a:b3:db:90:1c:bb:9e:97:3f:88:a2:c0:5f:29:
6d:36:48:31:e5:88:92:c0:cf:d3:7a:20:8f:0e:42:cb:cc:3e:
7d:eb:21:4a:db:6e:e6:ae:68:22:d1:be:42:73:e5:ae:39:04:
61:d7:5e:c5:9a:28:e9:da:1e:a4:a0:35:1b:25:50:a1:2a:db:
7a:8e:c2:4d:84:04:eb:dc:40:14:34:4c:5e:8b:4c:a0:1e:34:
f6:a1:e1:11:ed:aa:38:5b:ac:67:a4:94:36:c4:ca:85:17:71:
2f:33:7b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:33:09 2025 by rpki-client