Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
File: G57Ppx7--bsb_nsuQCFc2lsjHl0.mft (raw, json)
Hash identifier: QXoEAVjeFGJyawUla3Fhi8qP1cBxMp7a2Ys9v1shBq0=
Subject key identifier: 1D:E2:BB:4D:CE:BD:0A:89:38:6C:A6:BE:C3:DF:E5:A4:B5:E1:0A:36
Authority key identifier: 1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
Certificate issuer: /CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Certificate serial: 0197481E2152FA69B958509CBAFE2F811838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 02:00:23 +0000
Manifest this update: Sat 07 Jun 2025 02:00:23 +0000
Manifest next update: Sun 08 Jun 2025 02:00:23 +0000
Files and hashes: 1: G57Ppx7--bsb_nsuQCFc2lsjHl0.crl (hash: A7rG4uYjpUx1rJKRCRG5V73pRSTZvW3VblmsLHvBcGc=)
2: lxlrJ6zUgWTjPJVPagQ8_bikf3Y.roa (hash: ohk+IdQW1buST7Ifi9lGkmLrZs39V2tT52pS0ULxhf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:21:52:fa:69:b9:58:50:9c:ba:fe:2f:81:18:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9ecfa71efef9bb1bfe7b2e40215cda5b231e5d
Validity
Not Before: Jun 7 02:00:23 2025 GMT
Not After : Jun 8 02:00:23 2025 GMT
Subject: CN=1de2bb4dcebd0a89386ca6bec3dfe5a4b5e10a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b8:2e:6a:67:71:26:5b:31:03:94:30:3a:2a:
eb:c0:b3:96:c3:c3:f4:52:b5:18:19:ff:b0:6d:83:
68:51:95:e2:b1:ba:c3:92:54:0c:c1:6a:08:26:1f:
03:96:cd:d4:6a:96:dd:dc:20:ee:e9:b0:6e:80:77:
ab:d5:52:fa:d0:45:70:81:fc:7c:61:34:95:e9:ab:
2b:29:d4:9a:3d:5d:7d:39:78:84:2d:3b:4c:3b:52:
e6:c9:b3:21:05:99:35:c9:cc:51:3a:95:9d:54:80:
ed:0c:57:de:2c:aa:81:71:5e:18:c1:c5:e2:7e:4d:
a4:51:6a:b5:58:e9:9b:54:96:f5:b0:7f:2c:36:e1:
c2:6d:26:0e:1e:41:1b:5e:40:cc:44:95:ed:6a:53:
68:52:e2:9e:b9:82:42:29:5a:0d:f7:58:ea:dd:ee:
b4:a0:b0:e5:6a:7e:20:6b:f7:a2:94:39:a6:bf:3b:
22:b9:ac:97:01:57:fb:d6:55:6f:ef:96:d7:0c:90:
5c:61:96:5f:ff:0e:1d:13:40:37:c2:6e:df:77:6f:
4b:23:da:25:c4:20:df:d7:e3:05:7b:2e:ad:d2:82:
c9:4d:e2:e7:2f:b5:42:91:25:3b:f4:ed:7f:0a:59:
bb:aa:db:c5:2d:b0:c9:a6:bd:69:45:29:99:9d:67:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E2:BB:4D:CE:BD:0A:89:38:6C:A6:BE:C3:DF:E5:A4:B5:E1:0A:36
X509v3 Authority Key Identifier:
keyid:1B:9E:CF:A7:1E:FE:F9:BB:1B:FE:7B:2E:40:21:5C:DA:5B:23:1E:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G57Ppx7--bsb_nsuQCFc2lsjHl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ed1609-1086-47b4-a49d-f10d26e3c3df/1/G57Ppx7--bsb_nsuQCFc2lsjHl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a0:d0:81:81:60:12:1c:09:61:10:5f:1b:14:f8:18:00:92:
ce:01:c6:97:29:88:7a:e1:da:19:b8:6e:5d:e5:b3:4f:31:62:
ad:10:97:ba:b7:80:0d:b5:d7:7f:22:57:0c:c4:12:e7:1b:e1:
66:bf:78:ca:64:2b:e2:d8:25:38:cb:2b:a8:1e:e0:f3:80:6a:
61:dc:77:64:76:7f:ec:1f:f4:e8:36:83:79:95:00:23:66:78:
56:2e:38:5a:74:cb:48:81:46:81:c5:1d:1f:24:ae:6e:7e:cc:
f5:aa:0f:22:e7:7c:d7:6f:85:af:d2:f3:96:16:3e:af:1e:09:
6e:18:a7:32:27:8b:3b:3e:78:bf:70:a9:f5:4a:dc:e1:56:f1:
53:af:03:10:e9:cf:5d:b4:6d:8d:82:ee:fe:c0:26:4f:70:d9:
d3:1b:db:2e:94:0e:2a:f8:97:d8:4a:e3:9c:91:cc:69:96:e2:
45:14:72:95:0c:18:87:5d:8d:af:57:e7:a0:47:6c:5e:b6:b1:
ed:3e:3f:99:73:78:f7:33:33:eb:70:89:42:18:c8:80:d9:28:
30:df:ca:95:8a:13:53:40:0a:c8:33:62:bc:cc:c0:2c:94:18:
91:6e:3a:f2:6d:06:46:43:69:67:50:e2:ee:d7:91:62:16:9f:
f6:1e:29:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:59:11 2025 by rpki-client