Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
File: g_W9I77F0GOYM6kUGYXMV1OIbhY.mft (raw, json)
Hash identifier: U4qBVoSeSnZnREume6d2AC5UsYbEcMPI1Y6UYp9rVa0=
Subject key identifier: 49:6E:2A:6D:D1:DF:A8:66:5B:D8:47:8F:34:B4:C0:FF:1D:61:A7:64
Authority key identifier: 83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
Certificate issuer: /CN=83f5bd23bec5d0639833a9141985cc5753886e16
Certificate serial: 01974A7B1D607F87E7A5A32B9F6FD74163C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:01:11 +0000
Manifest this update: Sat 07 Jun 2025 13:01:11 +0000
Manifest next update: Sun 08 Jun 2025 13:01:11 +0000
Files and hashes: 1: 1H2Y74rOLQCMhy2O3X9ouFiEkFY.roa (hash: fzT1x1Cd9KzjMSBAyqcBMyBoif3guu8C9asSN6fBGTo=)
2: g_W9I77F0GOYM6kUGYXMV1OIbhY.crl (hash: x++0hHQkTZ9CMftCRjFuWkdOh16CwummLmDTbztyL9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:1d:60:7f:87:e7:a5:a3:2b:9f:6f:d7:41:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f5bd23bec5d0639833a9141985cc5753886e16
Validity
Not Before: Jun 7 13:01:11 2025 GMT
Not After : Jun 8 13:01:11 2025 GMT
Subject: CN=496e2a6dd1dfa8665bd8478f34b4c0ff1d61a764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:4e:eb:a0:52:f6:cc:a0:c9:4e:71:e2:ad:
2e:df:71:b1:5b:4e:45:0c:fd:b0:af:6e:95:12:2a:
91:26:6b:ca:83:ab:43:fa:4d:98:01:47:6e:d5:a3:
0e:fc:4c:64:16:e1:a5:4c:68:85:6d:8a:d7:0e:5a:
cc:df:91:3d:39:a4:17:2b:31:77:7e:1d:e8:75:55:
ea:1f:c4:04:4d:6c:72:22:1e:8e:74:42:30:19:36:
ec:41:3c:0b:80:93:bd:fd:38:65:93:bf:88:ce:d8:
a5:30:77:ee:d0:7e:24:e9:99:c8:24:e8:0a:3d:d8:
ca:7a:f8:98:b8:36:e1:6d:95:ca:d7:4b:a0:eb:ac:
2f:a5:8c:36:57:28:62:b7:24:db:0b:78:4e:65:9b:
a3:11:b4:04:33:06:6b:80:3e:5d:2b:e6:87:07:e2:
57:4b:e6:e6:e1:9a:1d:45:ed:5b:16:1f:be:a2:3b:
39:1e:8f:a7:8d:6c:ac:0e:91:aa:4a:e2:d6:4e:17:
a0:06:eb:81:f3:ad:5b:93:ee:ae:7d:bb:26:f9:41:
ef:24:58:a5:4e:47:c7:4a:9e:d2:50:58:4e:4b:30:
ed:f8:ed:37:77:b2:e0:6c:a1:42:e8:50:cf:d7:16:
14:cb:da:14:03:d6:3c:fb:f9:93:85:6b:d5:c0:63:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:2A:6D:D1:DF:A8:66:5B:D8:47:8F:34:B4:C0:FF:1D:61:A7:64
X509v3 Authority Key Identifier:
keyid:83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:12:9a:bf:99:d9:2d:a7:55:f0:64:3c:35:d9:43:fc:db:ce:
5e:f1:25:5b:68:8a:fc:b7:51:33:03:a4:66:64:6f:67:0b:5e:
dc:84:b3:f8:2a:67:ce:e4:b5:71:a1:ca:fc:97:f3:16:73:88:
37:a1:e6:1e:68:bb:7b:8b:21:ae:28:13:11:b1:4c:bc:a6:65:
75:14:21:40:cd:cd:82:49:29:05:99:b3:0e:33:ff:1a:50:37:
8e:55:78:5d:c4:03:94:73:01:a0:60:ef:97:04:66:80:74:c9:
f7:53:f2:98:7c:ad:e8:03:7e:0e:a2:54:f6:57:e8:6e:9f:61:
17:6d:e5:a3:c8:fa:ed:9a:95:64:cf:77:75:0c:a1:1f:1f:0f:
87:35:c1:34:fd:6d:26:4b:a3:0f:ff:78:7a:43:04:56:01:b4:
94:8f:9a:4c:fd:49:56:6e:4f:e5:f0:e5:2a:b2:e6:d9:ce:05:
23:58:29:1b:ec:38:d2:39:99:e2:43:f9:d2:72:1a:b3:57:e3:
03:b5:dd:98:ed:ca:8d:1c:b4:9d:55:8b:b6:f0:00:c6:7d:9d:
9e:04:98:e4:44:ac:3b:39:5b:6f:f0:9e:e9:63:55:fe:2b:bc:
4c:a2:1c:9e:8a:81:75:1e:51:b7:3e:60:a2:5f:1c:f5:41:ab:
8c:12:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:38 2025 by rpki-client