Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
File: r7oQsKZ20-H6tWUoQw-siRoINlI.mft (raw, json)
Hash identifier: MiUqtL9kdzg9h8bw4iLNtN7g8MFsWRx0Z5PNqswciAY=
Subject key identifier: 4D:C7:FD:40:22:FB:52:3C:46:75:81:C6:ED:51:71:6E:D1:7F:0B:D2
Authority key identifier: AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
Certificate issuer: /CN=afba10b0a676d3e1fab56528430fac891a083652
Certificate serial: 01974A7A730F3AC2A9B5CCA250BFC040C0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 13:00:28 +0000
Manifest this update: Sat 07 Jun 2025 13:00:28 +0000
Manifest next update: Sun 08 Jun 2025 13:00:28 +0000
Files and hashes: 1: KrPbG6M_7Mm1PtcHhZI4wknQI1M.roa (hash: tjtqRRJLnNhIS/xM5FVWwtZTtirmBRvu7piQDYGy3mE=)
2: r7oQsKZ20-H6tWUoQw-siRoINlI.crl (hash: lf2/BH2lVyJcgL8gAw8hcXW48KuQyQ6BDW0nemvTdmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:73:0f:3a:c2:a9:b5:cc:a2:50:bf:c0:40:c0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afba10b0a676d3e1fab56528430fac891a083652
Validity
Not Before: Jun 7 13:00:28 2025 GMT
Not After : Jun 8 13:00:28 2025 GMT
Subject: CN=4dc7fd4022fb523c467581c6ed51716ed17f0bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:3c:7a:16:42:aa:4b:68:79:30:7a:52:4a:
83:3f:95:d9:ae:6e:b3:ce:91:1f:c8:12:2c:be:77:
40:74:1b:b4:b6:74:a7:13:a5:b1:45:98:4c:e8:7c:
d1:28:c7:35:90:aa:20:a8:aa:09:9a:3f:fc:2e:d5:
cd:e6:ef:03:df:92:d5:36:f8:3e:a5:ec:ce:74:c4:
6e:0f:34:af:44:4d:20:6f:b0:4b:48:de:91:1b:25:
54:d4:b9:05:81:9c:13:76:c9:88:90:12:78:77:39:
a4:fa:a6:b3:0f:0a:bd:8c:fb:70:d4:84:a5:0e:e1:
f3:be:f7:3f:cc:14:05:09:fd:ed:6c:71:ca:3e:fc:
2d:05:00:19:e4:59:ba:fd:df:00:74:39:41:c6:f2:
90:46:0c:63:ba:54:8a:de:e8:1f:13:5a:a7:37:d0:
4f:ef:7a:bd:1a:46:18:85:f2:c2:a4:9d:25:4b:be:
50:51:b9:b2:38:05:80:9f:68:b7:e4:78:a8:97:b1:
ac:17:c7:02:3d:9a:f5:ed:be:bf:02:6a:11:bd:af:
b2:a8:53:8c:a9:cd:24:72:e3:3b:c2:5f:4f:6e:35:
ec:09:bc:8d:80:dd:65:7c:13:fc:8a:1b:15:19:34:
30:6e:ec:04:03:e8:7d:8b:e0:56:37:68:85:46:37:
42:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C7:FD:40:22:FB:52:3C:46:75:81:C6:ED:51:71:6E:D1:7F:0B:D2
X509v3 Authority Key Identifier:
keyid:AF:BA:10:B0:A6:76:D3:E1:FA:B5:65:28:43:0F:AC:89:1A:08:36:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7oQsKZ20-H6tWUoQw-siRoINlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1a9c9f-0c07-4776-ae65-e027dcb1d186/1/r7oQsKZ20-H6tWUoQw-siRoINlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c2:f0:4a:86:0c:ba:d3:bf:3a:71:85:49:86:49:6b:69:18:
c4:22:15:a1:fe:f7:e4:06:b7:d1:70:d8:11:57:c5:db:e1:5f:
a7:bf:a2:04:6a:1a:62:ed:e8:9f:f5:ed:c0:61:b7:4d:9e:95:
ad:e6:f3:57:fb:ea:c2:86:89:f2:07:5c:84:73:46:bc:60:76:
e3:cc:ae:e4:74:4e:79:d3:67:0b:91:58:17:62:a4:76:50:bb:
e9:b2:61:5e:7a:49:6c:04:57:83:87:f2:df:89:91:b4:37:41:
56:42:97:51:e2:fb:3b:84:ce:8e:74:97:9f:50:8b:61:89:a8:
2d:b4:60:a4:36:67:f2:29:35:03:e2:c8:7d:e6:4b:1e:2c:f0:
c8:31:2a:86:b5:2e:43:20:b9:92:ce:d3:f2:64:17:de:3d:fe:
f4:45:0d:42:5b:98:7d:5a:d3:f0:67:bf:68:31:a9:6b:a1:45:
d7:c3:2b:f7:32:cd:57:7f:7e:dc:7f:1a:54:f8:2b:8c:cc:98:
3f:38:fe:fd:79:05:90:28:11:6d:ee:b5:f0:1e:c0:8c:ec:0c:
86:ef:f0:52:6a:5f:8c:bf:01:cf:cd:a5:a1:ef:42:06:64:49:
14:31:43:a1:a6:22:e2:22:65:bf:39:c7:19:90:ce:1e:db:60:
70:de:9c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:50:54 2025 by rpki-client