Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
File: G6UWeIg5f_nKqET1VP-DfP2_lyI.mft (raw, json)
Hash identifier: /NPgEVcGmvehNQzII/980MDXPSyQqa8NVSpVp8K2nmE=
Subject key identifier: 49:25:7B:43:CB:9A:2E:CE:E8:FF:97:C1:79:F9:A2:88:BF:30:B5:76
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Certificate issuer: /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial: 01974B1F1BAF9E1C61C3770D54C07B36BB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
Manifest number: 14D4
Signing time: Sat 07 Jun 2025 16:00:19 +0000
Manifest this update: Sat 07 Jun 2025 16:00:19 +0000
Manifest next update: Sun 08 Jun 2025 16:00:19 +0000
Files and hashes: 1: 6AZTajZMqZoSwaR7hhqu_H7CdE0.roa (hash: xxeWZ0X7ua9pg1fHVRPX6E4scyCZRjZl/DRkbbQExWc=)
2: Be_FrvCQzJEE8AcZD48fTBBydhc.roa (hash: vmCJB59VLswrUqU073qVTINZ2vimvwz+QJwA8ddtgvQ=)
3: G6UWeIg5f_nKqET1VP-DfP2_lyI.crl (hash: q57GJbmih9B3guFLjYHLscrpvWAI/b9axZohI+p0jWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:1b:af:9e:1c:61:c3:77:0d:54:c0:7b:36:bb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Validity
Not Before: Jun 7 16:00:19 2025 GMT
Not After : Jun 8 16:00:19 2025 GMT
Subject: CN=49257b43cb9a2ecee8ff97c179f9a288bf30b576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:f0:8d:27:90:01:e6:f5:57:95:77:35:63:
c3:ec:71:54:2a:d5:1b:0d:20:d4:8d:35:6f:e5:ec:
24:40:ef:42:28:09:5e:b8:31:a1:50:05:a6:fd:24:
db:37:04:b3:2b:ea:c7:62:0b:37:f2:ad:87:7b:c8:
9a:12:fb:79:e7:f6:62:37:f2:4d:7b:f2:d5:6c:e7:
af:e5:31:08:0c:fd:48:df:a0:92:45:ef:ce:81:f6:
f7:1a:35:d2:88:69:cd:42:56:99:75:cd:f7:33:63:
d6:b5:42:74:f3:75:75:ee:62:fe:62:60:f5:2f:b1:
05:c6:27:b7:d5:be:cd:43:d4:59:dd:2c:40:ab:75:
76:09:17:ef:86:61:72:99:65:96:35:3c:ec:fc:a1:
40:7f:1c:b3:5b:51:3a:ae:89:e7:e5:c0:7e:c2:77:
3a:9d:8b:c3:1e:b6:a1:6e:43:9c:35:24:8d:5e:ba:
53:26:ba:bc:67:e1:1d:09:bc:19:5b:8f:e4:76:fd:
16:7d:8d:55:08:fa:89:ec:23:7a:df:f6:e6:6a:cc:
a1:94:1b:6c:10:c3:82:4d:b5:75:c6:d3:7b:f6:66:
57:be:f7:f1:51:37:3c:74:c3:db:ba:16:57:e0:c1:
ed:f5:e5:e7:dd:71:6c:d3:62:6f:7b:2d:bf:88:da:
f6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:25:7B:43:CB:9A:2E:CE:E8:FF:97:C1:79:F9:A2:88:BF:30:B5:76
X509v3 Authority Key Identifier:
keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7b:2c:22:48:37:ed:43:80:80:f6:08:d4:6b:cf:06:ed:6f:
65:cf:6a:4f:5b:de:ad:53:62:61:bf:fe:2f:cd:87:a6:fc:b1:
b8:b4:bc:f5:b3:f7:08:e1:14:6c:e2:b6:57:2e:ef:28:c6:38:
7d:f9:92:9e:32:53:07:a1:04:c7:27:63:15:28:e6:02:7d:41:
5e:e9:01:93:66:21:b8:f3:b7:79:3b:87:74:8a:3b:72:ab:c8:
e2:95:15:db:6f:ba:ea:23:03:b2:50:4e:7e:15:66:8e:8e:4f:
52:fa:34:98:54:c6:83:6b:85:5d:4d:78:b3:e5:41:bb:d7:da:
c9:4f:12:aa:4b:28:6d:de:43:b5:d4:c7:52:38:e8:76:bd:fc:
de:5a:07:10:3c:ff:42:95:58:d5:61:b8:e2:93:1d:4a:ba:b0:
4f:09:ec:84:cd:7e:65:84:c2:05:4c:2c:d8:91:84:2c:7e:31:
02:aa:d4:e3:4c:93:9b:b5:dc:cc:9a:79:fc:65:c5:c1:ff:19:
6f:dd:8c:9c:f6:cd:f9:4a:1a:93:9a:b7:03:29:34:5a:dc:c4:
3b:ca:23:5f:cd:fd:3d:e8:f2:ae:38:64:b7:3d:61:5c:24:66:
4c:54:0e:2f:e8:f6:ac:f2:6f:61:e3:65:c4:00:a7:55:76:f8:
3e:50:24:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:36 2025 by rpki-client