Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
File: RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft (raw, json)
Hash identifier: 332oOmsKghB9116yXgQAACOwjhbWMtzkjIo5mT1Qhp0=
Subject key identifier: 8D:AD:2B:C1:8C:03:41:20:2C:8A:D8:74:E8:55:97:16:79:71:2A:24
Authority key identifier: 44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
Certificate issuer: /CN=448ca39537597cfae60ae0421db8e098b4e26130
Certificate serial: 01974BC414B122E688CADD85C876B205914E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 19:00:30 +0000
Manifest this update: Sat 07 Jun 2025 19:00:30 +0000
Manifest next update: Sun 08 Jun 2025 19:00:30 +0000
Files and hashes: 1: EXivR_Wvv2aOO3jHO658CAON0No.roa (hash: fh34cv2WRgihe99oCLRpx5puteDZpUePtPBBSbNg/Qg=)
2: RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl (hash: M2YQDEhXkgTZ08Yg1Gn9R62lih/pKtROQBujPf2kV5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:14:b1:22:e6:88:ca:dd:85:c8:76:b2:05:91:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448ca39537597cfae60ae0421db8e098b4e26130
Validity
Not Before: Jun 7 19:00:30 2025 GMT
Not After : Jun 8 19:00:30 2025 GMT
Subject: CN=8dad2bc18c0341202c8ad874e855971679712a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0d:d8:7a:c6:1a:f4:59:95:a6:97:c1:d3:ae:
07:4d:83:56:ce:36:6b:c1:12:81:a8:4a:89:86:10:
2d:35:28:f0:8e:d6:88:59:c3:53:59:6e:56:58:70:
50:63:c1:52:da:d2:35:a1:1f:92:c2:03:9c:f0:0c:
33:f6:5d:06:4b:c7:da:0c:f0:04:75:97:64:7e:12:
2d:70:97:95:c9:c0:c3:a8:48:92:f0:39:75:4a:c9:
a6:54:84:24:b0:89:1c:7c:a7:58:76:60:0c:a9:c3:
69:9e:e4:a9:b7:5d:b8:d8:fc:99:3a:a5:c9:2f:5d:
0f:da:33:fd:88:a3:45:af:59:ec:49:17:a9:d6:0f:
a8:ae:43:97:45:49:f1:a6:da:94:3c:e0:34:39:45:
28:1b:87:64:dd:8d:9c:30:47:cb:3e:c6:2c:f1:c6:
90:5e:61:fe:17:1c:84:c8:79:70:9a:96:2b:a3:a4:
80:7c:d5:3e:ad:c0:c5:39:51:5d:82:b6:90:b7:e2:
75:ea:68:65:8f:a3:45:2f:39:4d:67:7f:79:ae:e5:
5f:43:40:d6:13:fe:3e:59:58:69:24:42:62:d2:70:
b5:4a:10:ee:27:c4:e5:74:f9:35:8e:46:37:6a:0e:
95:ad:69:f5:8c:93:69:bc:7d:ce:92:06:74:a6:3c:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AD:2B:C1:8C:03:41:20:2C:8A:D8:74:E8:55:97:16:79:71:2A:24
X509v3 Authority Key Identifier:
keyid:44:8C:A3:95:37:59:7C:FA:E6:0A:E0:42:1D:B8:E0:98:B4:E2:61:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIyjlTdZfPrmCuBCHbjgmLTiYTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db0519-4e5a-4b75-88fd-bbc239e897eb/1/RIyjlTdZfPrmCuBCHbjgmLTiYTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:98:d4:d7:46:ce:94:f3:1e:72:e4:fe:2d:5b:14:da:56:b7:
7d:74:b9:2f:56:20:40:b3:a2:b4:b0:0c:37:d4:30:81:20:d2:
3e:48:18:ae:1e:9b:a1:cd:1e:8e:81:49:96:b5:03:9c:3b:94:
10:60:15:88:1f:e5:62:a6:61:b1:a0:b9:cf:6b:d8:8d:2a:3e:
07:92:e0:70:a5:19:aa:9c:19:a8:3f:2e:e4:c1:90:8f:6d:7b:
ed:52:cb:4f:bf:53:50:81:fc:f7:d3:4c:ad:fb:fc:47:1b:ee:
9d:cf:bd:d0:f9:f5:50:cb:ff:29:1f:03:0f:f2:ea:c5:f1:72:
34:b0:51:d3:6f:4a:28:68:ef:44:03:21:c3:79:ce:55:e1:8a:
7f:4d:5f:8a:59:43:aa:c2:f3:b9:1b:41:53:ad:57:db:82:ba:
2a:d8:ec:1d:eb:d8:b2:9f:e7:30:e0:ae:4f:33:e4:8d:a6:55:
3a:ce:fb:c5:13:02:b9:bc:58:a7:82:3c:17:f5:e9:85:3e:d1:
8d:32:90:2c:9b:89:f1:35:d8:dd:f3:54:5a:68:d5:22:b5:0a:
6a:20:fc:73:8d:0c:66:72:34:ce:79:62:55:58:88:14:d5:b5:
1f:df:a3:c9:87:40:07:c6:e5:64:fb:78:89:9e:22:32:af:87:
98:cb:4b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:43:23 2025 by rpki-client