Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
File: 9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json)
Hash identifier: MVnRYxb/DdAkBDFgzTt/VH5VPJMBO1v/kCSLhXxLZoo=
Subject key identifier: 05:8B:45:BC:AA:46:8F:C8:57:DD:72:F0:3F:4A:DD:40:2A:EE:48:4B
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 01974DB2C4423499CDF7836921D0A117F82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 04:00:50 +0000
Manifest this update: Sun 08 Jun 2025 04:00:50 +0000
Manifest next update: Mon 09 Jun 2025 04:00:50 +0000
Files and hashes: 1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: qRhbI0yOSArEr/kZZ7+ypz/wRtWe19XJ7ZHX7s2IEBU=)
2: FAJKZDo6nLNipexAJT8L9FAGXrE.roa (hash: NVIidy7uobZX7hs2QRQ052g+pZeZGSMOgKQJmZ0nDuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:c4:42:34:99:cd:f7:83:69:21:d0:a1:17:f8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: Jun 8 04:00:50 2025 GMT
Not After : Jun 9 04:00:50 2025 GMT
Subject: CN=058b45bcaa468fc857dd72f03f4add402aee484b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:43:62:f1:f3:dc:d4:67:5e:34:31:78:60:
a6:14:82:62:30:01:ab:a2:ff:30:d0:cf:69:4b:ca:
ee:da:41:89:5b:65:6d:d9:1f:af:1b:e6:cb:61:97:
36:bd:03:fd:3c:5d:4c:27:3e:c3:16:a2:cb:28:6a:
4a:e1:fd:0d:c8:91:94:97:42:e3:4e:35:e4:7e:6d:
83:43:82:c3:8b:0c:6c:3b:d8:45:c7:48:c7:ea:9b:
e7:49:f1:0f:b2:45:b2:60:c9:96:ac:a7:9b:61:4e:
b9:1a:fa:2d:da:1b:76:bc:fb:f0:cb:63:a7:32:af:
ad:16:74:84:4c:de:e5:2d:ac:3b:c4:73:2a:8b:f3:
b7:fe:5e:27:77:eb:d0:78:94:3c:f1:3f:0d:f4:44:
f6:87:63:9b:7e:ca:c2:49:3c:ad:07:cc:5e:08:5b:
98:6a:69:c3:9d:96:75:02:9b:fc:69:cb:35:f3:2d:
72:de:26:6b:32:51:01:66:bb:38:c3:36:73:98:99:
7f:e3:82:68:49:a0:c6:2f:87:5c:55:60:92:b5:ba:
97:08:a8:d8:62:65:77:05:72:8f:11:9d:d3:81:30:
4e:97:8b:ec:32:5f:45:d4:b2:37:50:53:29:18:b3:
6d:c2:f3:62:13:0c:57:b6:b6:5b:3f:88:19:87:89:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8B:45:BC:AA:46:8F:C8:57:DD:72:F0:3F:4A:DD:40:2A:EE:48:4B
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b9:2a:1e:fb:12:99:7a:e8:18:8f:30:56:4f:a9:ef:cc:48:
1a:8e:14:99:23:57:70:6a:66:e8:f2:59:ee:a3:bc:60:65:5d:
9e:d7:15:a6:9c:f2:8a:28:85:1d:00:53:39:05:af:6c:61:89:
b1:c6:6a:ca:8d:3c:e8:68:8b:12:48:bc:54:01:bd:c5:28:14:
13:c6:b0:88:b2:65:33:ed:ce:a3:24:15:cf:9a:56:ea:e9:6d:
5d:07:db:e3:50:d2:e3:5d:3b:a7:43:81:a0:6c:b0:14:62:26:
05:5c:76:cc:d8:d6:df:d1:46:06:ea:d7:80:c2:54:b2:7e:53:
4a:d0:9e:b9:3e:9d:57:40:52:98:e4:c9:03:13:95:16:ff:a3:
8c:b8:7a:2f:dc:1b:07:bb:02:35:08:7c:1c:fb:34:a7:fd:a7:
ec:a0:f2:ce:86:b6:75:d1:f2:c2:72:23:27:3c:e0:64:cc:37:
26:ab:9b:9f:78:94:7c:1d:fc:5a:a3:5c:c8:9a:a4:32:4b:9d:
d6:87:51:e7:b7:25:64:bd:4e:83:02:07:bd:3d:51:45:48:c4:
df:3a:78:fd:df:ed:37:be:c9:b2:30:39:6a:59:a4:88:82:d4:
e6:04:9e:51:89:de:f9:ec:d9:77:b5:09:32:9c:bc:d5:cf:f9:
2d:26:76:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:55 2025 by rpki-client