Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier: tDJ/mynL4+Jmcd5bBEyrctboyp8jYsejk28lH+TV2Ns=
Subject key identifier: 35:35:C7:1B:D0:5A:30:04:AD:3C:E1:83:41:AF:87:E2:9F:75:BD:1E
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 01975A24C7BAD4E5C978C9C9763D1977F344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number: 1588
Signing time: Tue 10 Jun 2025 14:00:49 +0000
Manifest this update: Tue 10 Jun 2025 14:00:49 +0000
Manifest next update: Wed 11 Jun 2025 14:00:49 +0000
Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: 9lxIRDm6eGkf3aKWWbXQ7OiRbVfTgbMnh7++KKHlBsU=)
2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=)
3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=)
4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:24:c7:ba:d4:e5:c9:78:c9:c9:76:3d:19:77:f3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Jun 10 14:00:49 2025 GMT
Not After : Jun 11 14:00:49 2025 GMT
Subject: CN=3535c71bd05a3004ad3ce18341af87e29f75bd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:62:c2:99:da:22:f9:19:4e:18:51:a3:c1:5c:
1b:ff:02:ca:bf:35:32:b4:a2:5b:f4:5e:c7:3d:71:
66:8c:01:3f:12:91:5e:48:08:8f:a3:ff:4b:c5:1c:
eb:3a:27:23:36:c8:c4:8d:3c:49:08:fe:9b:57:cd:
41:2d:9a:00:04:4a:b9:31:6c:e9:17:ad:3f:0e:96:
39:01:3a:dc:28:eb:73:1b:d9:07:35:52:d5:07:2a:
69:bf:c8:0b:f6:1c:d9:f1:1d:97:1b:f2:78:1b:61:
59:be:19:f4:f2:5d:c9:8b:ac:8c:48:81:aa:53:44:
9d:db:77:9d:d4:35:b3:79:f7:50:92:38:52:e9:31:
fb:e6:75:4a:e3:fb:a4:c2:f3:80:d4:cc:01:cc:9c:
83:ff:4d:64:40:86:73:58:b9:6e:2a:dc:c6:8a:ca:
d9:71:b0:54:82:65:5b:f9:1a:4d:4d:60:c0:94:31:
84:40:3b:85:83:54:11:c6:4c:1b:20:cc:d2:a0:fb:
cb:c3:51:68:07:f2:9d:ef:e9:9a:c7:10:fc:6a:f0:
57:7f:29:15:15:29:7f:64:6f:32:a6:6d:d3:c5:f6:
f2:27:d8:64:96:fb:f4:b8:0b:6f:36:7d:e6:c6:57:
8a:1d:76:f4:a1:29:67:70:a4:fb:74:f5:f4:41:6d:
a5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:35:C7:1B:D0:5A:30:04:AD:3C:E1:83:41:AF:87:E2:9F:75:BD:1E
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:31:8e:d0:29:12:2f:a4:3e:62:2f:ff:9d:12:13:23:af:8b:
a7:a9:79:13:a9:f7:a0:50:2a:68:6f:a7:c3:37:e0:a6:f2:a6:
8d:de:c9:4e:84:4c:a9:1e:aa:ee:e6:2f:2e:b7:f4:e2:b6:63:
49:1b:07:45:3d:1b:e7:0b:38:56:f8:cd:43:f3:ab:23:b0:6e:
39:db:c4:d8:ed:54:b2:12:a3:31:46:91:cd:08:e9:47:32:bb:
1e:27:46:b0:e6:6c:93:d3:4a:1a:14:3c:da:49:d7:31:a8:9e:
77:86:68:ba:ab:3d:23:00:9b:82:21:cc:b1:cf:9f:c9:4b:6a:
1b:4c:b3:cf:7e:97:bd:15:75:8f:e8:24:71:59:86:bf:1d:92:
22:24:eb:38:20:26:40:9a:c9:48:f6:fb:64:cd:e4:d3:e4:63:
57:01:c0:96:f3:7f:93:85:2c:2d:fc:2b:b5:ac:da:c8:f2:9f:
e1:fc:69:8d:25:bc:af:e0:ed:9f:c9:5a:64:3e:98:1a:17:88:
9c:53:20:39:fb:7d:e4:2f:44:b7:13:51:ab:25:d1:4b:1f:7f:
ab:c2:85:4b:7e:15:66:9b:c4:eb:53:79:9a:1e:02:20:d9:9e:
7a:dc:5a:37:90:2c:56:12:38:b7:9a:90:22:11:55:35:07:24:
ef:46:0a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:14:55 2025 by rpki-client