
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File: pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier: TZc6henPejPvqvgPffXxntxNo5NGNnadzszVvsk6keE=
Subject key identifier: 89:6C:F4:FB:49:F6:50:BB:33:BB:89:F4:7E:DE:4C:EB:3C:18:1A:2C
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer: /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial: 01974AE8F30D4D5EBE9F83AF73394E15D4BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 15:01:09 +0000
Manifest this update: Sat 07 Jun 2025 15:01:09 +0000
Manifest next update: Sun 08 Jun 2025 15:01:09 +0000
Files and hashes: 1: 9Y_dJTvHqJ6_O2HDQsdb4YPQOPM.roa (hash: C4dGnq5v0d5/X1v0Ow3x2iZJ1sOJLLWISEpoXWZpLas=)
2: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: tozbqQhqJuqDS9I7vwnM+Pf4yEmwsPKA2yLKajfcLe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:f3:0d:4d:5e:be:9f:83:af:73:39:4e:15:d4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
Validity
Not Before: Jun 7 15:01:09 2025 GMT
Not After : Jun 8 15:01:09 2025 GMT
Subject: CN=896cf4fb49f650bb33bb89f47ede4ceb3c181a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:b1:d6:77:e9:e2:99:e5:37:1d:72:8a:80:
ec:f8:0c:a4:98:bb:89:29:16:43:03:48:3f:dd:3d:
ac:2b:d3:e3:da:d4:db:88:d7:83:12:9c:b0:7c:9b:
17:93:14:38:b8:6e:97:9d:1b:db:10:e7:31:db:29:
25:ae:84:b1:27:aa:4d:18:81:f1:eb:7c:0e:d0:f0:
44:0d:94:6d:31:41:7e:a9:54:6a:99:5e:31:78:6b:
79:26:ad:08:fa:16:97:12:12:3c:76:b7:87:32:fd:
8d:83:6e:50:34:79:52:12:96:bb:02:c5:9e:6b:9a:
d5:ae:9a:e8:21:2c:80:45:7c:ed:e5:30:a7:2b:43:
1d:4b:1a:b0:15:02:ec:a6:f7:2a:45:1a:62:a4:b4:
53:24:40:1a:77:53:53:f5:f8:e7:7a:c6:45:4d:77:
3b:7c:d9:55:f5:52:6a:ab:c9:c7:c2:f7:f1:ae:20:
82:28:93:84:7f:89:16:eb:41:8b:98:57:d6:0e:72:
d5:9c:83:3c:2f:e5:e2:dd:75:33:00:36:0d:49:d0:
6a:e1:f9:3a:c2:e4:c8:ae:a1:b4:19:61:1f:29:d8:
5f:0d:47:4d:66:89:1f:ea:c6:7c:69:52:61:a9:ab:
6d:11:60:ba:68:6a:4c:28:39:cd:6f:91:a7:b3:44:
5b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6C:F4:FB:49:F6:50:BB:33:BB:89:F4:7E:DE:4C:EB:3C:18:1A:2C
X509v3 Authority Key Identifier:
keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a3:eb:77:b7:a6:7c:6f:5a:e5:c8:d2:82:a4:98:a7:bd:46:
df:77:db:12:06:cb:a0:5c:50:e1:ea:a3:24:bc:1d:02:f4:b1:
8e:99:3d:ad:32:c5:fb:b1:85:00:4c:3f:82:ef:9e:0a:a7:57:
df:81:03:f0:9c:a6:4d:1e:2e:35:41:a8:99:05:aa:06:2f:fa:
97:4d:f2:38:c1:35:aa:5d:cd:81:b5:6d:ad:26:97:4c:23:68:
b5:3f:b0:32:a2:ab:49:5d:10:8d:ef:df:e6:10:83:81:a5:c2:
1e:c3:08:83:8e:24:fd:55:4e:28:d7:34:a8:a7:6e:25:4c:b1:
14:d6:ed:2a:ca:0d:25:5c:80:ea:06:ce:1f:3d:d5:68:cb:ba:
d8:b8:5f:ec:59:bc:5a:95:23:7c:3c:e9:c2:31:c2:51:76:ac:
72:d6:53:fc:54:3d:2e:cb:6c:e7:6f:05:3b:d5:ca:d2:c1:6e:
7e:5f:89:17:e1:d6:4f:22:14:b6:ff:5d:42:55:11:6d:4d:49:
44:ca:9e:5b:a7:98:fe:21:f9:b4:02:de:ce:66:b5:e0:5a:a4:
f9:4f:2e:44:2d:31:03:e0:6e:08:31:4d:df:13:9a:b2:41:39:
5d:87:29:8f:92:38:0b:1e:16:a8:c4:f2:49:c3:20:1e:0c:f4:
ec:50:fb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:06:42 2025 by rpki-client