Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier: pDF6mU7P7ELFrSPWpLnqD0355sJwoguNQGdEJTlt5uw=
Subject key identifier: E0:65:AA:E5:19:84:A9:D6:57:10:A2:15:A0:F3:77:F5:85:9E:80:2E
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 01975FEFCE491DCC049C28930B4C1F93A85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number: 158B
Signing time: Wed 11 Jun 2025 17:00:40 +0000
Manifest this update: Wed 11 Jun 2025 17:00:40 +0000
Manifest next update: Thu 12 Jun 2025 17:00:40 +0000
Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: eyqUOvJwe+vc46MxrJECeEUhlhonvyiBtr6Whhqopzs=)
2: 4nvw-vuKd4xbAsLFpMpHNcTWnXs.roa (hash: RzWsKcP3ZrmE9DFmaSid+Il5QAh34zpxbDO2n3tduPk=)
3: JVknch6YZZVKoQtj5e3RXowAaKo.roa (hash: 0evMSGPWXwkbSZxIuzVj+D6VQiAtq0P8zjXnrm8+ExM=)
4: TPdcZLcH_YATAX6AnH-DrKOIyW4.roa (hash: 7Q4klUwlKvLOmsqK9in2FaKGpBVinFLluA+jbJEiVAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:ef:ce:49:1d:cc:04:9c:28:93:0b:4c:1f:93:a8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Jun 11 17:00:40 2025 GMT
Not After : Jun 12 17:00:40 2025 GMT
Subject: CN=e065aae51984a9d65710a215a0f377f5859e802e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:62:64:e5:ec:26:07:df:d8:24:94:3c:d3:
53:d6:23:67:3d:3e:10:44:3b:25:5d:fb:82:c2:4a:
2d:a7:94:43:04:23:f9:24:d6:2a:14:09:55:e9:1b:
d2:4e:d0:88:cb:21:20:d7:34:ef:59:f5:bd:5c:84:
ba:cc:ab:d2:40:9e:83:4a:a4:ea:ba:07:5d:c2:e1:
d4:6c:57:68:cf:50:ee:84:c0:40:f7:87:57:ad:a8:
89:1b:b2:65:ef:4c:df:ba:81:15:a5:fb:ad:c5:52:
e1:3d:6c:38:36:8a:a4:b4:89:4f:09:f9:d8:4f:f4:
62:8f:9f:46:18:65:ec:f8:e1:72:92:41:7b:50:bd:
6e:a2:c9:9d:9a:bb:23:c1:18:a0:fa:ba:06:87:dd:
07:87:bb:52:02:c2:5f:88:7c:52:9d:c2:8e:26:93:
93:3e:30:71:34:1c:19:86:5a:62:24:0c:4a:3b:dd:
8d:f2:f8:e6:ec:58:6b:c3:7d:9a:b0:13:83:20:c2:
c3:43:b5:55:8e:29:02:cc:6d:0b:86:2d:db:4b:ea:
3e:3a:1f:f2:ab:43:25:d4:14:f7:29:d3:85:14:e2:
60:66:2a:c7:73:25:f8:f6:36:73:68:b8:f3:f7:e3:
21:53:85:79:6c:f6:ca:66:cb:a2:72:24:92:e7:25:
19:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:65:AA:E5:19:84:A9:D6:57:10:A2:15:A0:F3:77:F5:85:9E:80:2E
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:70:9f:5b:07:9a:cf:2c:6b:4c:9b:c5:40:9f:cd:9d:5a:75:
cd:31:e9:91:9c:76:04:79:20:98:cc:97:6b:13:47:57:3a:f6:
56:3b:42:4e:92:72:2d:51:47:cb:3a:e0:ac:ed:e1:83:4d:5e:
44:be:fa:0d:4a:f2:f9:39:62:79:42:34:1e:d9:33:16:a5:a9:
21:ac:d6:5f:d2:98:f7:53:c3:fe:fd:9d:25:6a:56:51:b0:97:
17:a1:8a:e3:a5:d0:60:51:53:89:46:68:99:e1:7f:eb:a3:7c:
60:c4:50:42:84:7d:27:ca:e7:19:d7:47:78:41:48:9e:8b:13:
cf:4d:16:9b:b4:77:02:3a:74:b0:af:1a:7d:8e:10:b9:8f:2d:
11:e9:7f:11:c7:d6:24:3c:2e:5a:2e:12:44:7b:4c:7d:9f:14:
80:5b:ae:85:12:b4:29:6f:eb:5b:94:48:e6:2c:f6:b9:ce:f4:
35:7c:c8:5d:42:45:d6:aa:15:c9:88:ac:3d:44:03:13:ed:76:
41:77:a0:f6:de:06:cf:25:ad:99:f1:a7:96:1e:cf:11:87:7a:
cc:3e:b1:0c:6b:be:5e:20:9b:bb:9c:0b:77:10:ba:93:ca:2b:
c9:bf:07:1f:7b:13:69:28:5f:18:ab:b2:50:94:30:0b:93:9c:
1a:2a:53:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:32:05 2025 by rpki-client