Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
File: i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft (raw, json)
Hash identifier: 2CvJ232uSBfzSxLHJgGCPBoL8dGxMh0y/vCSKxp0fes=
Subject key identifier: 32:24:29:05:5B:91:2B:50:D4:7B:72:EB:49:8E:ED:D7:D4:6E:37:CA
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 01974A7BA3B8E1B07CBC4ABCCFB3C81C75E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 13:01:46 +0000
Manifest this update: Sat 07 Jun 2025 13:01:46 +0000
Manifest next update: Sun 08 Jun 2025 13:01:46 +0000
Files and hashes: 1: fv5YNECYQOScxqIs8CQ4Mfvo6r4.roa (hash: 1dbsSquUR6918Zz6dymdjZNTTgaYfI6MWJh2pSzjXy4=)
2: fweRbovLWdF9pH6rb4wkNI7Qa5A.roa (hash: Ij1i47Q8RIaDs08CnmY/mVxyR0aEzscrR4GtWWkDV3Q=)
3: i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl (hash: TqI+0YoNHQNgRhpIcUwQ+SA1dGnjB4q/rb8Ran9aKRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:a3:b8:e1:b0:7c:bc:4a:bc:cf:b3:c8:1c:75:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Jun 7 13:01:46 2025 GMT
Not After : Jun 8 13:01:46 2025 GMT
Subject: CN=322429055b912b50d47b72eb498eedd7d46e37ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:a4:26:f6:99:0d:ce:f8:73:b0:77:3a:08:
1a:59:57:0f:e3:ab:73:34:5e:2d:d0:15:44:e6:e6:
f4:08:67:61:b7:e9:f5:3f:92:bc:2d:65:95:71:f2:
cf:4b:c0:63:17:6a:43:41:12:4e:44:48:30:21:84:
b4:ac:4b:ff:41:45:bc:d2:a6:35:bc:5e:a8:3b:67:
e6:d3:92:2f:cb:c3:c9:21:f5:8b:8c:c9:93:18:3c:
80:47:22:de:41:ec:4c:99:0e:5b:ba:da:99:d0:37:
62:8e:2d:73:80:53:d0:25:8e:da:30:a6:a8:fc:9d:
c6:b0:b8:2c:f8:a0:7e:f8:7e:ac:58:ac:dd:64:8d:
15:d7:fd:5f:19:3c:86:8c:f4:41:6e:0b:70:a9:82:
df:fa:be:bf:85:18:05:59:78:a7:62:d6:03:ee:ad:
b1:1a:4b:72:0f:b9:2d:f2:d8:7d:04:e8:27:08:cb:
da:71:a3:2d:5d:8e:b7:de:2a:29:ef:af:c1:c3:11:
c9:db:e9:26:10:21:7c:b7:20:00:ce:c6:04:52:7d:
c7:a6:7a:e1:0a:1c:f4:3e:eb:8b:8b:4e:02:00:c1:
9f:3f:fc:ff:62:00:31:61:79:8a:6d:91:51:d1:20:
95:8d:ca:0c:3e:dd:85:e5:18:d9:df:03:0d:34:bf:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:24:29:05:5B:91:2B:50:D4:7B:72:EB:49:8E:ED:D7:D4:6E:37:CA
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1f:e7:23:37:d3:89:5f:48:2f:d1:58:2a:6c:4e:3a:bc:7e:
98:de:50:bb:66:c4:d4:95:e0:f2:d0:97:69:a7:82:03:7c:76:
50:55:d3:97:da:dd:04:f5:04:56:2b:00:26:b6:34:f8:df:39:
4d:c2:4d:7c:3a:bf:af:c5:b0:9f:da:eb:5a:89:16:66:a4:55:
3d:88:87:18:d5:fa:4f:88:3f:ed:82:df:87:31:fa:a9:f5:c1:
3c:09:f2:a0:75:a8:70:59:0f:5a:1a:26:a0:f7:b8:6f:a5:46:
cd:e0:87:2d:ac:e1:8e:ed:e5:eb:69:22:16:f2:4b:90:82:f2:
a2:81:b6:ba:17:f0:60:27:7f:4b:4b:53:16:c5:b8:77:6f:42:
53:65:dc:56:a4:f3:61:bd:78:f9:67:e0:91:52:2d:4d:92:e9:
eb:8f:57:d2:81:86:11:49:75:31:a9:89:f2:a5:df:d6:66:3f:
c6:fe:50:2e:cf:82:b4:c9:1a:41:c9:c3:3e:de:2b:c8:b6:69:
76:b1:68:b6:57:b4:d5:e9:d8:f6:f9:ca:0f:60:aa:c6:ef:a8:
89:82:cb:97:8a:dc:64:18:ae:db:3d:f5:c9:f1:47:4f:63:b5:
ea:e1:95:ab:db:6b:e4:c6:38:1f:04:75:f4:e5:0c:2d:55:c0:
5b:d8:81:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:39:58 2025 by rpki-client