Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
File: aDjbfmmRJ9pMHFpek_RPMCtihjs.mft (raw, json)
Hash identifier: bt1O6Tkh4v1d+4SV4FYIfVMrFk0Vdt0tAnaDxxeINKc=
Subject key identifier: 5B:D6:F0:BC:CA:B1:84:BE:3E:D5:A6:83:4B:DA:1E:1C:D9:4F:9A:A1
Authority key identifier: 68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
Certificate issuer: /CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Certificate serial: 0197470B8B59C1584CE88BAAB74527249F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 21:00:28 +0000
Manifest this update: Fri 06 Jun 2025 21:00:28 +0000
Manifest next update: Sat 07 Jun 2025 21:00:28 +0000
Files and hashes: 1: aDjbfmmRJ9pMHFpek_RPMCtihjs.crl (hash: g0zRII/nU3LspEK8pQQYLPrafnaoW3sAjq2qR9Lg80E=)
2: ndozZxXsqqvoYlnvn2R8eG6q9WM.roa (hash: J/bxB2F1VD9ABMhf1I4cZo/1cjeHrt4Cto7ZdYkPM28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:8b:59:c1:58:4c:e8:8b:aa:b7:45:27:24:9f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6838db7e699127da4c1c5a5e93f44f302b62863b
Validity
Not Before: Jun 6 21:00:28 2025 GMT
Not After : Jun 7 21:00:28 2025 GMT
Subject: CN=5bd6f0bccab184be3ed5a6834bda1e1cd94f9aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:85:46:7d:35:37:b7:1d:25:c9:77:7d:62:68:
5b:0a:cb:29:f8:ba:28:1c:ac:7b:90:57:a5:13:47:
1b:4b:91:96:3f:8f:a2:0d:3f:db:6e:e7:d0:15:3f:
cd:19:c8:54:9a:27:98:63:a8:10:5c:37:fb:2c:17:
42:f7:c4:13:97:d8:10:ce:d5:e5:76:a6:24:31:f1:
22:51:6f:bc:59:de:3f:02:7a:f6:4e:15:78:c2:05:
74:0c:a6:c0:b8:d3:fd:c5:91:e0:f7:1d:28:a0:b1:
16:bf:bd:2b:be:b7:bd:38:43:66:4d:72:eb:d9:79:
67:03:33:11:8f:ce:6b:32:05:ce:61:67:82:b2:44:
2d:5c:32:90:41:e8:83:9c:d5:8d:c7:dd:7a:f6:d8:
0b:93:0a:9c:6b:09:20:0b:b5:09:b2:94:eb:9d:94:
da:4c:b4:9e:16:61:46:b0:da:01:d1:62:a6:7e:be:
7c:72:bf:f1:c1:89:d5:4f:9a:c9:bc:54:91:87:5d:
99:b7:78:ce:80:4f:0e:0b:ff:49:f6:b9:3b:1f:b9:
13:75:4a:26:ed:bc:cb:d9:9e:b4:18:33:4a:26:88:
e8:64:ca:7d:b6:14:1f:b6:8a:51:e3:22:f7:df:9c:
b3:51:e7:47:c7:01:69:03:bf:23:f7:a2:d4:5b:76:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D6:F0:BC:CA:B1:84:BE:3E:D5:A6:83:4B:DA:1E:1C:D9:4F:9A:A1
X509v3 Authority Key Identifier:
keyid:68:38:DB:7E:69:91:27:DA:4C:1C:5A:5E:93:F4:4F:30:2B:62:86:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDjbfmmRJ9pMHFpek_RPMCtihjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b2471c-bebc-4412-a6a4-2f9cac700fa5/1/aDjbfmmRJ9pMHFpek_RPMCtihjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bc:7b:ec:90:fb:0f:e0:48:97:a1:51:8f:b4:5a:af:39:d1:
c3:d6:ac:80:be:77:81:a1:75:f7:01:f4:e1:c1:e3:5f:65:e0:
8c:df:e4:ce:51:23:5c:e5:69:df:05:3b:67:e4:ae:4c:e4:2f:
f3:79:17:5d:69:e8:d1:9f:25:8d:8b:68:bd:75:ca:da:85:93:
bf:bc:72:cf:78:02:f1:ad:95:b9:de:1d:ab:a1:91:19:c5:34:
0a:38:a2:fa:1f:95:c2:9d:a4:3b:d0:81:42:71:d2:8d:8a:7b:
00:65:45:8b:a2:69:db:54:8e:83:a7:1b:c5:2e:a5:b2:ad:5f:
ac:7e:19:43:8d:17:16:60:3b:53:65:86:14:1e:b0:9f:3a:7f:
99:f2:ce:86:ed:87:df:33:61:13:0e:94:db:19:36:ab:fa:d9:
d4:b0:f9:ac:a8:b5:90:9f:ed:ad:ea:d7:66:1b:b6:05:00:55:
03:e3:dc:99:36:44:a2:0b:7e:67:07:74:85:c5:ce:aa:9b:21:
c6:3e:56:16:92:71:a5:06:83:7a:23:4a:7b:c3:bc:12:65:52:
7a:97:5e:f2:a2:37:26:54:8f:51:a1:ae:d7:b4:1e:a9:16:52:
35:58:a0:76:2e:10:cf:5d:06:da:62:2e:88:77:26:3c:ef:b3:
9a:08:4e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:23 2025 by rpki-client