Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
File: D8T3CpLUasAsjf5_l1vkir1i56Q.mft (raw, json)
Hash identifier: Q6Q/9Q316TE87lpDu8h3oSfHOmIk3kRenRaaaKs8tV8=
Subject key identifier: A6:60:53:D5:08:76:D7:44:65:63:DD:66:94:8B:F9:D5:76:53:64:AD
Authority key identifier: 0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
Certificate issuer: /CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Certificate serial: 019749317C43DDD2F1D1FBCB2B8DE31361DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 07:01:09 +0000
Manifest this update: Sat 07 Jun 2025 07:01:09 +0000
Manifest next update: Sun 08 Jun 2025 07:01:09 +0000
Files and hashes: 1: D8T3CpLUasAsjf5_l1vkir1i56Q.crl (hash: nGmJQanxKTodp63fwnw8VVk4sjBGBgHwVPuwTYF8ngI=)
2: KV7Ah7ECaAsyXag5Rq5pooWC9JA.roa (hash: VgR4uMVD7rCZUo7Z3bX/mNyr94Jdnu1Q2sOy20+13Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:7c:43:dd:d2:f1:d1:fb:cb:2b:8d:e3:13:61:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Validity
Not Before: Jun 7 07:01:09 2025 GMT
Not After : Jun 8 07:01:09 2025 GMT
Subject: CN=a66053d50876d7446563dd66948bf9d5765364ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:67:bd:3d:b4:53:de:db:66:74:c6:01:3a:
cc:c3:fc:2d:03:60:b0:7b:da:72:79:73:d5:0e:95:
22:8d:1e:57:ad:98:41:36:60:8a:10:71:fe:53:d2:
82:2f:4e:c0:f8:cd:31:1e:22:c6:1b:50:cf:02:e8:
74:12:44:2a:fe:12:6f:ab:a0:b4:6f:3b:bb:94:45:
7b:1d:d3:b8:fb:55:68:b7:ee:de:b8:fe:9c:c1:4c:
0f:e7:3a:f5:c1:a2:35:8e:52:3e:11:2a:83:ac:08:
29:21:12:5e:c7:c5:d7:e8:7e:60:22:d2:93:ff:99:
3c:10:03:5e:46:9e:61:1e:36:38:23:43:27:4d:27:
8a:75:36:7a:d0:30:69:3f:c2:61:66:16:09:63:0a:
d3:a8:15:1b:d2:37:51:a5:f3:5c:19:69:d0:25:08:
4d:e9:5c:fb:40:ca:72:5b:02:86:9d:58:f7:f8:7e:
21:37:14:6b:c3:9c:d9:cb:d2:4c:10:aa:06:ee:f3:
dc:b8:ab:51:91:f5:23:68:63:35:7a:ee:c8:ab:94:
e7:6f:2c:41:79:c7:e2:95:aa:1e:87:4b:9e:ad:76:
ef:d1:32:be:88:f4:c0:32:7c:2f:11:d7:20:0f:88:
e9:69:19:84:55:7b:19:cb:d8:f3:42:58:37:66:c6:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:60:53:D5:08:76:D7:44:65:63:DD:66:94:8B:F9:D5:76:53:64:AD
X509v3 Authority Key Identifier:
keyid:0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:55:6e:05:85:52:f8:ec:ca:4b:9e:13:35:6f:ae:59:e4:65:
a8:84:b0:dd:9d:91:56:4d:bc:c4:3e:69:2c:5d:13:e1:9b:15:
63:09:50:3f:56:e0:4f:dd:6e:6b:c5:0f:d7:38:e1:99:9e:82:
6b:9f:ca:7d:0c:db:a9:f3:36:7c:54:a0:46:02:a5:b0:88:2f:
f1:6a:3d:0e:d1:7a:2d:b3:28:3d:34:8d:18:dc:2f:99:8e:a3:
63:35:4c:34:d4:42:a1:e4:75:d6:69:37:cc:ac:57:fe:bb:ef:
c7:50:76:cc:76:16:34:42:33:17:3c:5d:73:7e:eb:c8:b5:17:
3a:4b:84:55:e4:00:df:d7:5e:82:b7:b4:a1:9d:88:f5:47:c0:
2c:06:0b:7b:8a:a4:37:40:7f:c2:cc:08:b9:2e:f0:e6:a6:e1:
f1:fb:c9:7d:0d:0d:82:d8:69:59:25:98:65:90:c8:83:ee:bf:
56:29:00:a1:ac:a2:dd:9b:56:bd:40:25:33:3c:53:e8:bf:0d:
cf:51:9f:f5:62:a0:8b:30:a0:3f:f1:8a:a4:63:66:09:d6:90:
16:73:b5:05:e5:55:ed:b9:3a:a4:2a:ff:5f:1a:f3:81:47:c1:
58:84:c0:13:6b:51:f1:7d:18:ab:f4:d5:73:cd:02:95:70:0b:
33:84:12:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:49:01 2025 by rpki-client