Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: pPvgLWZfaXTI9LkZHH4p9rnvQA1n0tSqNQEvnrW60Ak=
Subject key identifier: C6:AF:81:CF:0F:05:15:78:02:5C:32:21:25:74:4C:DD:20:BE:7F:38
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 019748C2FCCAB52882CF744C3B5A6128AD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 05:00:27 +0000
Manifest this update: Sat 07 Jun 2025 05:00:27 +0000
Manifest next update: Sun 08 Jun 2025 05:00:27 +0000
Files and hashes: 1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=)
2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: vvSrklhbi5jHbMVJiAHcOgCNJu/Y5SkgGCEhJKhEI1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c2:fc:ca:b5:28:82:cf:74:4c:3b:5a:61:28:ad:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Jun 7 05:00:27 2025 GMT
Not After : Jun 8 05:00:27 2025 GMT
Subject: CN=c6af81cf0f051578025c322125744cdd20be7f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:cd:d3:1e:3a:93:a4:14:40:b4:b1:54:71:
6a:5d:1f:3d:6b:ce:f2:46:81:ad:76:0b:15:7a:cd:
b3:09:03:b6:b3:e2:a7:33:a6:2d:14:ab:08:f6:20:
58:93:50:1a:fb:fb:72:ca:8c:c0:91:1c:d5:12:c9:
e2:ed:0a:60:de:da:46:c2:cf:4b:f7:e9:93:43:d7:
1d:6a:d2:e9:c5:c7:de:b1:ab:69:d2:0f:cd:80:27:
4a:cd:58:a6:67:1c:d4:85:cd:b7:a3:dc:c3:89:f0:
bf:90:78:a4:19:c7:b0:b4:72:c4:1f:f4:b6:d4:12:
5e:17:ca:d2:55:82:6d:1f:15:3d:31:57:7b:fc:c1:
56:ff:27:0e:d2:e4:31:91:a3:2e:d1:f5:be:b3:c6:
57:38:6d:6c:ef:11:36:69:2d:62:b7:eb:b5:e8:93:
9d:44:b1:73:b1:7c:28:69:85:c6:bd:1e:6a:65:f6:
2a:a7:50:28:12:7e:29:9b:3c:65:c6:f4:f5:46:a1:
c0:51:1a:36:29:0f:8a:d1:8f:73:f0:5c:b4:5f:30:
3a:ce:89:02:ee:3f:07:a9:d1:d5:99:ef:a3:c3:d6:
78:45:1e:b5:4a:f8:46:24:c5:d5:aa:27:f0:09:5e:
b1:5b:78:c5:33:bc:5d:5f:a3:0b:e2:61:49:a2:86:
41:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AF:81:CF:0F:05:15:78:02:5C:32:21:25:74:4C:DD:20:BE:7F:38
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f5:e9:36:ac:14:44:fa:ad:fc:cd:f9:a2:b5:6b:ea:42:05:
2a:74:64:9b:c7:e9:4e:ff:53:71:fb:fd:b0:e3:88:ae:c4:60:
bc:f1:7a:01:69:45:61:0b:77:f5:c4:83:57:6e:98:19:8f:be:
b3:61:d2:d9:5d:ee:4a:40:88:29:da:04:7a:90:fc:76:24:3e:
3a:e6:c3:e5:38:f1:d3:6e:23:ac:5f:e9:d2:50:cd:bb:41:91:
9b:4f:c3:f6:85:6f:ea:09:d8:7e:d4:f1:db:2e:fb:e1:58:25:
e5:ec:13:05:75:8a:6a:2e:98:78:c9:29:db:4e:fb:11:ed:8b:
db:e2:b7:01:b3:97:3b:21:ad:0b:23:79:02:c6:22:87:d0:1b:
95:dd:8d:de:08:48:34:60:41:e0:ce:0e:f0:f7:fb:47:42:85:
fc:23:59:51:41:cd:24:fc:d7:9a:d4:88:c7:bf:59:04:4c:42:
26:0f:1c:54:93:12:5b:db:8d:3d:e5:62:d7:71:18:f0:71:71:
f4:81:ac:d1:05:6c:cf:96:51:53:c7:b5:82:44:31:ad:6f:63:
7a:18:89:95:53:67:40:0e:3b:10:39:20:06:e7:f3:d9:5c:92:
c7:5a:cd:00:56:6a:b7:30:66:48:97:fa:8d:ff:ae:3f:79:94:
a6:7b:68:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:10:16 2025 by rpki-client