Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
File: dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft (raw, json)
Hash identifier: p++BKK7ObiwHnDbi669Vi0OGPquCiLxCITgKZ9HeIO8=
Subject key identifier: 29:72:69:29:D4:B3:96:11:60:46:97:16:45:25:22:24:75:91:E5:F8
Authority key identifier: 74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
Certificate issuer: /CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Certificate serial: 01974779CC6C200C45B0CCA1FEF15FDC3945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 23:00:53 +0000
Manifest this update: Fri 06 Jun 2025 23:00:53 +0000
Manifest next update: Sat 07 Jun 2025 23:00:53 +0000
Files and hashes: 1: NVfSq2DY4cD3_FemKxq3kFWdNbQ.roa (hash: FrMf82dKiOwRXnPTbOvJcW2xGJFytZk+POr0sPYgteE=)
2: dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl (hash: fQj4WhHPsiGGp8frqlGdBzcif/wVmA67vKNYQ66WHcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:cc:6c:20:0c:45:b0:cc:a1:fe:f1:5f:dc:39:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7470dfc0bb5ce06d86df24fe3caa4b4ef34178f4
Validity
Not Before: Jun 6 23:00:53 2025 GMT
Not After : Jun 7 23:00:53 2025 GMT
Subject: CN=29726929d4b3961160469716452522247591e5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:20:14:e7:47:38:b1:71:fe:55:62:36:fa:
fb:f2:53:af:57:50:9c:ad:4b:f0:05:0d:cf:d2:af:
34:a8:78:f4:fa:84:33:70:f8:9b:05:67:54:5f:49:
6e:69:87:bc:ef:bf:a5:f2:83:f4:b4:ed:73:c3:db:
98:b8:99:25:1a:1b:43:53:3c:e4:81:96:a1:9e:33:
7d:65:4f:e5:30:1a:61:31:85:fc:47:4f:a7:f0:39:
7a:c4:75:dc:7d:87:2a:4b:ca:33:68:d6:48:6c:8c:
3c:75:c5:31:2e:11:d0:0d:33:7d:be:5d:2c:82:72:
cf:fe:70:02:6c:aa:a6:09:0d:ca:b8:59:d5:28:38:
c8:7f:13:0d:5d:b2:9a:44:a5:f3:97:3a:47:30:06:
71:e0:a4:db:dc:52:0a:9c:73:19:50:78:15:72:93:
d4:02:f5:42:e5:34:e0:48:b8:69:72:26:ea:e1:30:
d2:6d:44:15:55:3a:99:91:23:f3:e5:19:b2:7b:27:
ea:67:04:ea:42:54:a8:66:55:93:28:b9:dd:e7:4d:
0e:a4:5b:26:3c:a3:37:69:8d:69:58:86:06:26:fa:
f8:0e:e2:67:5f:64:15:87:ec:38:57:3c:e8:be:8d:
26:bb:c6:8d:c7:7e:bf:e4:56:54:6d:9e:be:a7:78:
1c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:72:69:29:D4:B3:96:11:60:46:97:16:45:25:22:24:75:91:E5:F8
X509v3 Authority Key Identifier:
keyid:74:70:DF:C0:BB:5C:E0:6D:86:DF:24:FE:3C:AA:4B:4E:F3:41:78:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHDfwLtc4G2G3yT-PKpLTvNBePQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/0c6111-58f7-4b75-bcab-90bc4624c7b2/1/dHDfwLtc4G2G3yT-PKpLTvNBePQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3e:59:db:0a:3e:fa:53:3f:ef:62:69:13:1e:30:33:0b:e3:
5d:38:77:3a:d8:7a:50:d8:a3:48:44:56:77:2d:e4:97:6b:9b:
3b:50:2d:a2:a0:a6:90:ee:84:74:ae:cc:1e:74:99:d4:bd:28:
9a:ca:b2:fd:56:c4:57:a9:13:8b:3c:57:c9:9b:8c:6a:e8:66:
52:fe:16:8b:35:e5:02:cf:cb:da:b7:87:86:f4:66:77:1b:11:
8f:70:6b:58:2c:f5:80:2f:fc:81:36:ce:64:b3:32:0e:05:82:
9f:a7:05:42:69:be:e7:a3:7d:67:d2:1f:e8:a6:74:32:15:ca:
26:b4:cd:41:51:b8:75:6b:e7:4c:f2:2c:7c:cd:7b:85:0a:3e:
53:81:af:bf:34:96:2a:90:6f:77:15:88:8f:0e:79:68:97:95:
f0:19:a2:89:ac:db:23:7a:cb:c5:f0:da:f0:27:d4:94:be:df:
22:a7:a7:83:52:22:0a:b5:62:a9:90:7b:19:43:86:1f:7c:9a:
44:c2:58:96:b4:ec:ad:fe:b4:00:74:c8:3b:6c:04:7c:c2:62:
d8:9b:f2:d1:bc:87:62:d3:69:e4:68:ce:7d:b2:c6:9a:74:da:
1d:e2:05:22:e0:98:bf:5a:19:b0:60:2a:3a:72:2b:86:ba:a9:
d8:08:77:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:24:53 2025 by rpki-client