Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File: A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier: Pb3T6ZRMb9jhloft+z+jUp31xkLr6cevf0KYCsy78Qg=
Subject key identifier: 69:20:F7:2A:DF:68:00:D5:55:D0:AD:AC:8E:46:CC:3F:92:0E:BF:07
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer: /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial: 019749D64C1997781A054DA548271EF1699C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 10:01:10 +0000
Manifest this update: Sat 07 Jun 2025 10:01:10 +0000
Manifest next update: Sun 08 Jun 2025 10:01:10 +0000
Files and hashes: 1: 8uFEs8KT2lHNTf9FsmJqqvY7o28.roa (hash: vboc19xwSNPRyM8I2dQ1/VWhvxJAqCUk+Ws21D+P2qM=)
2: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: 8tLge92BqprSuxFDSx7O7VfwBwNIZG6Gzb0DKGt0QP4=)
3: JaJTfkcMlPavkQgIWd6Q5PErN44.roa (hash: xdZi+om1DwYfwvuK4ikXRudvdwfTqYCO5L9ilWGS09U=)
4: jBMHF4ZncYY2dSJ5CHqMIPV8Ofc.roa (hash: 42cb4s8kzaDp+6oFZFM5NFuRsfHrfiqhUgjsGF12wb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:4c:19:97:78:1a:05:4d:a5:48:27:1e:f1:69:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
Validity
Not Before: Jun 7 10:01:10 2025 GMT
Not After : Jun 8 10:01:10 2025 GMT
Subject: CN=6920f72adf6800d555d0adac8e46cc3f920ebf07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0c:e0:d7:e7:30:10:33:9c:36:b4:6a:f4:a7:
32:27:1b:bd:4d:ca:09:24:76:46:da:f8:44:e7:9d:
99:d6:e3:af:dc:b6:02:43:20:97:01:4d:8a:4b:f6:
1e:93:7d:53:a0:f9:c3:8e:94:ae:8f:0a:e0:70:da:
f5:76:13:50:3f:6b:3f:0e:05:64:cf:14:b5:82:94:
0d:d8:b8:d2:91:5f:00:72:a0:b8:08:10:43:bd:2c:
b1:d3:60:6f:aa:34:3b:13:fb:13:1a:c7:e9:1a:75:
4d:cc:99:30:03:af:69:63:03:c0:3b:b8:36:33:6f:
26:9b:cb:81:d3:cd:e4:46:5b:41:e5:61:83:52:d4:
6d:ae:40:48:27:d4:2d:ae:43:bb:4b:2c:a8:63:ac:
f3:4c:f4:2d:9d:6f:b5:c9:cb:a3:77:ff:0f:7b:e2:
0e:7a:b5:ef:18:4a:dc:b9:0c:d8:cf:0e:8a:96:1b:
2d:9d:bf:2b:a8:6d:a2:49:1e:17:54:b1:af:7b:bd:
a4:e8:dc:06:ae:69:2e:e1:3f:fe:a2:ab:4d:b0:d9:
90:6e:7b:84:d1:9c:77:d9:9f:17:4e:11:e7:9e:cd:
fb:02:75:3f:d6:5e:c6:b1:c2:ab:b1:88:9a:3d:16:
b7:23:da:f0:6d:e9:e3:ff:c0:56:19:98:50:34:9f:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:20:F7:2A:DF:68:00:D5:55:D0:AD:AC:8E:46:CC:3F:92:0E:BF:07
X509v3 Authority Key Identifier:
keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:37:04:38:80:70:27:73:93:54:4d:e6:9e:07:ff:af:c6:0e:
f8:b4:f8:c6:89:c2:95:1e:35:91:6c:1c:78:75:69:0c:e5:f0:
4a:40:a8:e7:2b:2d:e3:5a:b6:34:6d:53:32:1d:63:bf:92:02:
e5:bb:65:f0:c8:60:85:33:8b:96:0d:35:62:b1:2e:8d:ac:29:
e1:53:c2:1e:e9:8c:f4:68:18:90:ed:6d:cd:60:38:66:e2:99:
25:9f:f1:1a:61:2a:e8:20:64:f1:7a:14:5c:dd:ed:fa:cb:60:
c3:58:f9:e4:53:fc:c1:82:c9:6f:a7:a8:82:06:9a:5f:24:74:
b0:60:33:be:b6:93:f9:67:68:b3:7f:25:c9:ba:2e:3b:ba:69:
c4:e4:8c:4f:e2:f4:5f:be:32:4f:be:fe:f4:be:7b:e1:33:b1:
54:fe:dc:a1:1a:bd:b7:d9:e7:bd:1a:d6:e6:ad:55:6d:98:e0:
08:0b:91:cd:ce:43:ad:66:86:78:01:b4:43:ff:78:50:37:76:
54:89:90:34:bd:cb:96:12:e2:c5:30:9e:d0:df:8f:03:27:ed:
40:1c:18:fa:32:29:84:9a:bd:0f:70:d7:5d:dc:71:ad:c2:d4:
79:9b:a9:9a:82:c3:8c:ba:76:e5:e0:2f:e8:eb:9c:55:07:41:
f8:00:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:57:21 2025 by rpki-client