Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
File: pB97t76hWBYk_LZQOrWnD0IMmz4.mft (raw, json)
Hash identifier: JEj4COIie2N+EWibNkJh8znaJPb47vsuWKkjAwZ2Z9I=
Subject key identifier: 94:59:CE:46:CA:E4:2F:0C:BC:FF:D8:56:B1:AF:68:59:84:62:BF:1E
Authority key identifier: A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E
Certificate issuer: /CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e
Certificate serial: 0197383DD3DE10500D0E83A563925BBEC6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
Manifest number: 26
Signing time: Wed 04 Jun 2025 00:01:05 +0000
Manifest this update: Wed 04 Jun 2025 00:01:05 +0000
Manifest next update: Thu 05 Jun 2025 00:01:05 +0000
Files and hashes: 1: TOnoVfX8Ap4KHroZhyTiZTPqFbo.roa (hash: h8XoURF67JqruQUoq14dZxGEi4Cnu4hmR974XbY5rg8=)
2: bktyDBqNSVITQAf_MKFUeQ2s_nU.roa (hash: q/tuR42MGkp/VtZe/IwxRfy5LTdFIBVwnpSc5i4a68A=)
3: pB97t76hWBYk_LZQOrWnD0IMmz4.crl (hash: 98yaf0HB5X2TIptfyfwPP8QMe7xjyyjzyMypolp7/IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:3d:d3:de:10:50:0d:0e:83:a5:63:92:5b:be:c6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e
Validity
Not Before: Jun 4 00:01:05 2025 GMT
Not After : Jun 5 00:01:05 2025 GMT
Subject: CN=9459ce46cae42f0cbcffd856b1af68598462bf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:b2:4f:2c:f6:68:25:94:34:ba:cb:6c:55:
1c:83:5e:9a:b0:d6:17:9b:7f:da:00:db:01:26:a7:
79:f6:e5:b5:c1:e0:62:ae:0d:2c:a9:c1:a0:0d:75:
6d:9d:4d:63:08:61:ee:b7:64:ab:23:81:75:eb:f6:
ff:bb:70:7f:e9:84:42:04:51:67:fc:f8:5c:04:a6:
b8:6c:57:6c:bb:9f:f0:6c:66:d1:db:18:23:67:83:
3f:4e:da:3e:a0:13:c7:10:21:35:c3:af:ea:0b:d5:
6a:45:e1:99:7f:4e:68:2a:d4:62:f4:79:07:3f:8e:
7d:4f:66:83:50:10:d2:67:2f:71:8d:47:13:7c:b0:
7a:d8:32:be:02:19:28:56:6d:5b:f0:af:13:13:ef:
ff:e3:05:48:2c:e2:20:05:b4:31:40:b3:3c:26:ba:
7a:60:03:fc:5b:d1:5b:0d:b7:42:0f:78:e4:ba:c5:
13:f4:bc:ec:d0:8b:91:7f:ee:79:ad:8a:fd:45:50:
4a:03:9a:57:93:26:ee:a4:07:c6:c8:88:88:31:b6:
1e:f5:03:d3:ea:6b:49:29:e7:6e:99:9b:71:28:3a:
57:b4:56:8f:e1:ad:00:ba:db:7d:67:57:20:fa:de:
36:13:fa:17:1b:f5:2c:36:9b:46:84:ce:a4:68:ed:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:59:CE:46:CA:E4:2F:0C:BC:FF:D8:56:B1:AF:68:59:84:62:BF:1E
X509v3 Authority Key Identifier:
keyid:A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:da:2f:a1:20:58:5f:4e:5e:07:f1:f1:57:f0:bf:5d:73:ac:
6f:e4:50:93:92:de:40:b2:95:fc:6a:dc:76:32:97:3b:35:42:
da:46:84:39:1b:af:cc:d3:80:6d:6e:33:76:1f:57:5b:40:ca:
d2:23:3e:52:be:ef:b4:65:41:d5:48:12:bf:c9:bf:0b:69:75:
d1:4d:37:7a:7e:95:fb:a0:db:0e:25:17:24:41:7a:b7:f5:50:
6f:8c:dd:66:45:ac:cb:a9:60:9c:55:84:64:25:52:8e:33:cc:
90:47:bd:50:75:60:ed:a6:cf:98:85:68:34:ed:f3:89:88:ad:
65:dc:6c:75:58:3d:ac:29:cc:7e:56:5e:90:f9:8d:8b:b8:46:
cb:ea:bb:31:ea:ea:be:45:3a:1b:27:e1:f9:7b:a7:9b:86:c8:
32:f4:05:e5:5a:64:0b:b4:a1:3a:0c:48:ce:04:44:df:ba:f3:
af:89:9a:35:a1:e3:c6:21:2a:f5:60:c1:1e:88:0c:1d:2b:4c:
66:96:7f:90:d3:7e:63:3d:de:40:1d:02:5f:27:47:cc:93:0f:
2b:7f:e9:ee:5f:92:c3:d8:e0:57:72:34:03:68:85:07:98:c4:
61:88:47:41:fb:02:3e:11:c5:ac:e7:ef:6d:59:7b:37:8b:d7:
51:21:1c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:20:47 2025 by rpki-client