Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
File: Sp0WbGSEc4ly6bM5OBZfRImlFow.mft (raw, json)
Hash identifier: cXXG/3BuCBalXL/ChidjcGRmbdk3eVd75Wl8vRIlZt0=
Subject key identifier: 16:6F:8C:8D:3F:0A:E8:6B:C2:6B:D2:A7:F7:37:5E:52:FC:78:04:9C
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 0197496831665991224093BFC457A3DFD2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
Manifest number: 08F3
Signing time: Sat 07 Jun 2025 08:00:54 +0000
Manifest this update: Sat 07 Jun 2025 08:00:54 +0000
Manifest next update: Sun 08 Jun 2025 08:00:54 +0000
Files and hashes: 1: 2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa (hash: z7wlSbeXCPnKRT5F6st24jvggmZT5WHmth3yDlecnKg=)
2: Sp0WbGSEc4ly6bM5OBZfRImlFow.crl (hash: cpP+Mshqde+I78kY02zu3DR6NwvVS1uI6/GP9f+DSro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:31:66:59:91:22:40:93:bf:c4:57:a3:df:d2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: Jun 7 08:00:54 2025 GMT
Not After : Jun 8 08:00:54 2025 GMT
Subject: CN=166f8c8d3f0ae86bc26bd2a7f7375e52fc78049c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:c8:1a:61:b2:14:1e:e6:ea:c4:03:ff:11:
3b:9a:46:b5:4e:0f:46:85:0f:4c:7d:7a:49:93:24:
50:5a:f4:19:e4:de:b6:37:08:37:8e:11:cf:79:0c:
5f:98:d1:34:08:f4:80:14:8c:a5:ff:f4:ab:70:db:
bb:24:25:bb:08:f4:55:a3:e1:97:87:37:ef:34:5e:
88:06:c5:fa:8b:78:44:08:d1:1d:5f:9b:aa:83:df:
9e:fe:ea:47:ef:3b:d0:5e:1b:74:4b:b6:0d:05:26:
b8:95:e6:f3:df:0e:3a:64:72:4c:fd:59:e3:25:7e:
ae:d6:f5:da:cf:cc:0f:7a:f9:09:01:8e:05:d2:54:
9b:44:15:1f:87:7f:ef:a1:87:13:cb:52:2a:02:7c:
72:e1:e9:28:05:1f:0e:e6:9a:cd:ee:6f:52:1a:a7:
1d:65:54:55:11:24:96:c8:84:3c:1e:37:47:14:a1:
54:33:cb:bc:b0:84:a4:75:0d:14:bc:99:79:27:1f:
9d:dd:51:5f:d7:b2:ab:00:b8:38:c1:5b:34:12:a5:
a4:97:fb:47:54:4a:25:2f:56:07:fb:c4:4a:e4:10:
65:8b:f7:22:db:86:93:6a:55:2a:5c:e6:89:90:39:
1f:8c:01:0d:1e:36:2b:84:03:d2:d1:db:5e:ef:e4:
2d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6F:8C:8D:3F:0A:E8:6B:C2:6B:D2:A7:F7:37:5E:52:FC:78:04:9C
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8c:2a:9e:75:07:65:e6:5a:83:27:44:a8:ff:6c:f0:5e:d4:
26:55:b1:6f:e2:63:4e:fe:b5:b5:3a:70:88:d8:6d:b0:5b:43:
41:98:90:60:79:9e:d1:e7:88:cf:88:2d:75:f7:a5:75:78:d1:
05:32:e1:d7:de:48:00:ac:b0:39:32:0e:5f:42:62:e2:04:da:
8b:e0:1d:f3:89:c8:64:e5:b2:98:e6:2a:e7:c6:3c:40:91:0b:
ce:7b:ea:b6:3b:db:c4:54:67:c5:23:aa:a7:1d:b8:e1:ac:dd:
bc:33:ec:30:f8:3f:b6:2a:4a:43:d6:6a:39:79:88:e8:ad:2e:
53:e2:8a:72:70:83:a2:56:13:86:52:c7:87:98:1d:8c:ca:5f:
5a:5d:55:b5:85:ec:79:95:5a:c7:b9:60:f9:59:81:8d:7b:cc:
1a:a7:91:b0:69:e8:a9:dd:e6:0f:6e:90:ee:81:9d:f9:e8:bc:
a3:85:de:b6:fa:fd:03:39:f9:7e:38:9b:7a:08:42:96:de:0b:
c9:70:92:63:13:5d:49:45:8e:f0:e0:65:f6:05:a6:85:73:81:
37:3e:b5:68:22:b9:36:82:be:62:37:ab:d4:fb:d2:5b:99:d2:
12:82:8b:3e:c4:48:25:8b:1a:2b:74:23:ca:fe:e3:c9:00:07:
2d:28:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:01:39 2025 by rpki-client