Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: Kru/rEmLpVr7iS8FYUTBpeRuzw6mJR4X0fpQkajduj4=
Subject key identifier: BD:91:83:E7:D9:C8:16:2F:E4:6E:E5:5A:92:63:EF:7D:75:3B:2C:F7
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 01974C69ED4815971D30F6786DB001A261F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 22:01:39 +0000
Manifest this update: Sat 07 Jun 2025 22:01:39 +0000
Manifest next update: Sun 08 Jun 2025 22:01:39 +0000
Files and hashes: 1: J7n-Yd5XTH7n67jouruR47yViJQ.roa (hash: uOcoBZNZsx1gjsqlLawiv97uMdypKgT5mBdaC/TonUs=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: BZkNc6Slvi+hPUwJ7k3AKbxy6HUX1Qntt8QNhtmXQN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 22:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:ed:48:15:97:1d:30:f6:78:6d:b0:01:a2:61:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Jun 7 22:01:39 2025 GMT
Not After : Jun 8 22:01:39 2025 GMT
Subject: CN=bd9183e7d9c8162fe46ee55a9263ef7d753b2cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:34:32:00:56:58:94:43:6b:4f:9d:1d:12:
71:5f:b3:43:fe:2f:de:a1:87:a0:4a:9a:e1:8d:8a:
50:74:2e:dc:0f:11:4b:85:ab:6b:c9:20:02:4a:b6:
ac:70:d5:f3:35:ef:b0:07:36:23:88:6f:a2:e4:d2:
19:ad:5a:0f:c9:f3:c7:e8:18:26:5d:a0:bd:af:66:
1a:e7:66:4d:6f:41:90:81:62:df:38:01:af:76:e2:
d0:20:fa:ca:39:cd:f2:ab:df:03:35:f2:fa:67:1c:
e0:30:f0:37:a3:b6:fd:23:50:86:55:d0:66:24:7e:
05:36:28:3c:3c:70:fa:a5:d3:ff:50:5e:55:30:df:
31:d7:18:cf:15:28:8b:a2:47:01:8f:e5:31:4a:ee:
fd:81:e2:5b:32:e2:1d:a1:7a:3b:bb:52:27:a8:40:
0b:5f:e4:9b:3e:e4:b8:b7:c3:18:82:19:d4:20:69:
d1:c5:37:97:c7:e0:6d:3e:08:a7:1b:92:67:b3:59:
43:e3:c6:f4:c6:d4:97:07:1f:70:56:2a:ba:5d:dd:
51:3a:e3:7a:42:15:3d:ac:d8:45:66:ed:1b:5d:4b:
f9:40:1d:75:ce:06:5a:f6:e5:04:93:f3:bd:c7:62:
dc:af:f1:6a:9f:2a:dd:de:dd:51:6c:2a:69:c8:9f:
8b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:91:83:E7:D9:C8:16:2F:E4:6E:E5:5A:92:63:EF:7D:75:3B:2C:F7
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f8:fd:38:5d:60:10:35:23:4a:81:eb:f4:53:b8:1c:c6:ce:
52:85:55:15:2b:4e:e6:5f:bd:d1:e2:52:12:f4:d9:b3:2c:46:
47:ee:85:ff:f7:48:68:73:7d:c7:4a:b4:19:4d:0f:d9:b0:2b:
79:77:27:0b:57:6c:25:df:ec:7c:e7:45:7a:bf:ae:a4:83:b3:
86:40:02:c2:83:e3:e2:d4:38:3e:33:e3:33:b3:2d:59:81:50:
bd:1e:d3:1b:14:20:71:16:59:fe:7f:5d:65:3b:d0:44:81:13:
f8:a9:a1:41:de:92:21:8d:37:d6:d1:f3:c6:9a:78:d4:dc:d6:
0b:11:8a:04:eb:e3:8e:c9:34:9a:8a:0b:25:c9:b6:f3:79:64:
62:bd:ff:2a:1a:3a:9a:8b:97:b9:04:b9:aa:51:6f:6f:8f:97:
5f:f3:15:e6:8a:51:fe:ee:39:2c:5c:6f:53:ff:cf:98:73:8b:
95:e8:ac:8e:16:cc:e6:b4:72:79:98:c3:9e:d8:2a:d9:f6:93:
53:19:e9:d2:95:6e:1e:d5:09:d4:44:77:07:40:9e:7f:7f:c0:
10:17:cc:06:73:fb:43:6d:00:d9:a7:58:89:60:52:1b:45:ca:
6d:89:55:2f:75:32:bb:20:d0:23:66:24:93:19:b2:f8:d8:f2:
0c:d3:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:36:50 2025 by rpki-client