Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
File: px4O7lkN4v2N7Epn6HvIlv_IsrU.mft (raw, json)
Hash identifier: Rk78NjSN744QcsZ1blEKzkd+gt42FhIjR/3Z90Iz87U=
Subject key identifier: 6A:32:64:CC:49:8C:17:E1:45:AA:CB:B0:22:3B:BC:D7:95:36:0A:C7
Authority key identifier: A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
Certificate issuer: /CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Certificate serial: 01974967D3E0F07AD65CEAFB1B9527587AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 08:00:30 +0000
Manifest this update: Sat 07 Jun 2025 08:00:30 +0000
Manifest next update: Sun 08 Jun 2025 08:00:30 +0000
Files and hashes: 1: gACG_CZ-Iug99I2lwvBj2F9-h5o.roa (hash: nmlBka4iP6DO0ZjdL5pCRw7PZdQRFau0PkO/pT9dD0g=)
2: px4O7lkN4v2N7Epn6HvIlv_IsrU.crl (hash: a/3L20PGJfhHe2xXCwyElMFUFUnTp0M09FDOeLd4GFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:d3:e0:f0:7a:d6:5c:ea:fb:1b:95:27:58:7a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71e0eee590de2fd8dec4a67e87bc896ffc8b2b5
Validity
Not Before: Jun 7 08:00:30 2025 GMT
Not After : Jun 8 08:00:30 2025 GMT
Subject: CN=6a3264cc498c17e145aacbb0223bbcd795360ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:fe:6b:1d:31:f1:4e:b7:6c:cd:c4:0e:cd:
eb:70:c2:45:ed:66:0d:5c:0b:3e:9b:92:02:1b:da:
3c:68:23:f4:2b:d7:f9:b7:bb:d0:57:77:db:e6:e3:
9e:7f:41:86:54:f9:6c:81:b4:96:0c:cb:4b:f6:df:
6e:64:91:f8:4d:89:de:43:a2:78:ce:b1:bf:55:56:
5b:d4:7d:a2:8d:e8:06:ea:f1:70:73:9a:3b:4e:2c:
e9:43:d1:5f:76:3c:1a:34:84:b5:f9:24:96:b9:ea:
f6:6c:79:84:77:ca:65:b4:fe:54:08:59:b7:44:78:
c8:90:97:32:26:03:58:02:1d:08:42:b6:1f:33:cf:
ee:f9:7d:bd:30:cc:ee:70:c2:51:4e:a0:cf:e4:13:
1c:e3:ae:ee:98:fb:c0:de:01:ab:95:4c:23:2a:3a:
fc:6a:55:8b:84:01:72:22:1b:8a:0e:34:34:12:52:
3c:ce:c1:7b:84:5b:00:3c:7e:1f:15:24:93:7f:4e:
24:4e:bd:96:83:cf:60:a7:2e:01:f6:0d:0b:ab:bc:
6a:24:04:96:70:8a:12:98:15:1d:74:07:a9:4e:2e:
14:e2:e6:f1:8b:e4:6c:37:04:17:6a:9d:dc:12:b8:
4f:48:25:36:e3:3c:68:d8:fa:32:c1:cd:0e:9b:4c:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:32:64:CC:49:8C:17:E1:45:AA:CB:B0:22:3B:BC:D7:95:36:0A:C7
X509v3 Authority Key Identifier:
keyid:A7:1E:0E:EE:59:0D:E2:FD:8D:EC:4A:67:E8:7B:C8:96:FF:C8:B2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/px4O7lkN4v2N7Epn6HvIlv_IsrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/c51fd6-3d08-4205-b747-b80530a5e042/1/px4O7lkN4v2N7Epn6HvIlv_IsrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f8:11:79:2d:30:98:e3:dd:54:48:47:eb:b0:36:8d:59:e9:
70:8e:be:2e:25:df:0a:24:62:d4:23:c7:23:7f:99:eb:31:2f:
23:a5:99:49:94:93:c7:e2:87:1d:af:42:b0:16:e4:33:5d:6d:
9e:ec:23:12:f8:fe:6a:f6:3c:20:66:c9:8e:61:52:85:f0:36:
3f:36:95:ca:06:f4:11:af:59:11:54:40:70:77:f9:72:f5:e4:
44:1a:14:41:dd:3a:46:99:0e:95:43:5b:b4:30:d1:3c:df:53:
dc:57:2c:c1:41:69:a9:08:ba:9a:6e:7e:d4:83:35:dd:e7:79:
72:8a:13:34:64:28:5b:e6:71:3d:6c:53:81:1d:19:c5:97:7c:
49:9d:2b:1d:15:19:ad:ba:73:18:69:c6:68:fb:f5:d0:3e:d7:
a7:ae:4a:5c:c4:3b:78:ba:0a:10:12:d6:c2:13:05:5a:1e:60:
34:4a:de:d4:d0:95:f0:5c:a0:79:32:01:0a:67:a5:6f:04:e0:
1e:e6:f3:6d:40:ce:d1:f1:5e:07:db:7d:35:6a:ae:09:e9:5e:
0f:d6:c5:9a:48:e8:c8:cf:d8:a9:3b:ab:36:e1:6a:ec:29:b0:
4a:8e:d3:45:33:14:06:ea:2e:7b:8e:33:ae:e2:34:5a:fd:68:
9b:e6:3c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:32 2025 by rpki-client