Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
File: cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft (raw, json)
Hash identifier: AQwMhhZZcODO/rKWC66/JmPKxJ5LeROMSFLnAbMlk+k=
Subject key identifier: C1:74:5F:C0:98:99:5C:AC:72:55:8F:97:11:34:A0:D6:5C:E7:FA:67
Authority key identifier: 70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
Certificate issuer: /CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Certificate serial: 019748FA43D943EC643A57B0537B2EC0FEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 06:00:50 +0000
Manifest this update: Sat 07 Jun 2025 06:00:50 +0000
Manifest next update: Sun 08 Jun 2025 06:00:50 +0000
Files and hashes: 1: cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl (hash: 62XsrhteFp6Y/c+JILG4dsW47S28zHMc+jL526j2aV8=)
2: gEcPKMyXsq8EnU4MPoFeY2Uidb0.roa (hash: 43PR1hTJL7tXyu9/IcMkUlMdJ9SOinPx2dKMQk9nNKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:43:d9:43:ec:64:3a:57:b0:53:7b:2e:c0:fe:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Validity
Not Before: Jun 7 06:00:50 2025 GMT
Not After : Jun 8 06:00:50 2025 GMT
Subject: CN=c1745fc098995cac72558f971134a0d65ce7fa67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:03:a6:47:ce:3b:93:c6:51:5d:5d:85:86:
13:ee:ee:21:a8:4a:17:5c:7c:72:75:e4:8c:f2:71:
08:38:63:b6:11:21:ae:14:27:fc:c8:93:f1:e6:bf:
e6:0e:1d:9c:e2:4b:88:a6:cd:cc:c5:37:8b:6a:f0:
96:44:87:09:04:d9:5b:c7:bf:34:6a:c4:7f:19:20:
6a:49:1c:d8:15:75:08:33:6c:f0:cf:ce:83:50:2c:
b0:48:53:73:a7:f3:6e:9d:dd:69:f7:80:9e:b8:58:
0b:80:bd:2a:dd:76:ec:7e:f3:eb:2d:eb:b1:bd:0a:
36:be:e9:e0:0f:b9:cc:df:e6:14:c3:46:d8:ef:5e:
68:6c:d3:fe:6a:7a:17:57:fa:1d:48:17:af:32:7e:
74:7e:5c:30:99:bb:4e:c8:f3:29:fb:1b:57:55:4f:
86:a9:46:66:43:c3:ab:29:4c:c6:d3:a1:88:4d:d8:
3d:48:e1:36:58:c9:88:5a:52:27:20:76:3f:27:84:
44:04:ad:93:93:16:8e:70:5c:db:d6:b3:80:73:b6:
43:f5:f1:de:ea:01:d4:f1:4e:10:ef:e1:b9:8e:58:
cb:ac:52:24:4f:84:c0:2e:fa:63:7b:e0:54:44:97:
3a:1b:c4:e2:2d:3b:b0:6a:6f:dd:74:31:15:ed:16:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:74:5F:C0:98:99:5C:AC:72:55:8F:97:11:34:A0:D6:5C:E7:FA:67
X509v3 Authority Key Identifier:
keyid:70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c0:a4:be:fa:22:99:51:4c:1e:f7:25:b0:5c:9b:32:d4:5c:
8f:f8:1c:9e:36:25:7a:f6:6a:be:ec:da:de:93:f0:a1:a1:0b:
11:e5:24:ca:ea:e3:01:25:c0:19:1a:da:50:30:e9:8a:98:20:
e4:34:e1:64:2d:99:79:70:e3:ae:b7:f7:93:c7:d0:4b:36:98:
ef:2f:c7:9e:56:8c:82:3d:97:e0:e0:bc:1c:4d:36:6a:f6:a5:
fa:f9:79:ad:ae:7c:3a:19:e9:78:52:82:9a:0d:05:77:6e:36:
2b:d1:0e:72:0e:7f:af:f6:05:48:21:3f:44:b1:3c:46:f6:cc:
1d:a3:c8:f8:9d:e4:f4:f6:e1:a6:bc:9a:25:67:6f:6c:20:e6:
65:64:1a:e0:a8:1a:cc:6f:61:aa:bd:f7:73:c9:b1:cb:eb:cf:
b5:1b:23:ea:9b:74:f3:28:f5:bf:7a:b2:fd:5a:fd:9a:31:24:
46:83:b0:d7:4e:a7:ba:11:10:6a:45:de:18:68:29:62:20:f3:
82:e4:55:38:a6:18:34:94:da:ce:3b:91:83:72:e8:95:54:ee:
c9:db:0f:b4:7e:c9:16:b0:f6:32:a6:43:25:e2:55:82:f0:ca:
9e:6c:3f:a8:2f:bf:66:61:a1:a9:06:9e:d8:35:81:84:3e:38:
99:0b:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:17 2025 by rpki-client