Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json)
Hash identifier: 7Bdj7vl+X5oe2rrU9UkVFOPifaXW1p4BMBlL7u0Pxd8=
Subject key identifier: 38:C9:46:C0:0E:52:59:CB:E2:59:2B:B5:8D:53:24:D9:67:C9:1B:42
Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Certificate serial: 01974EC573C88B98F29DE93FB2CB6078B1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 09:00:52 +0000
Manifest this update: Sun 08 Jun 2025 09:00:52 +0000
Manifest next update: Mon 09 Jun 2025 09:00:52 +0000
Files and hashes: 1: GSYjq6iczyoVzYDlz3HGUFSrIQ4.roa (hash: XbCa3j6XTEyeRnElswqHZbpKZmfxYHeYOgSyLa4zvQM=)
2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: KsWDlMjCtsI5PM2Fa0K7a6z3jV+Ek2nFubfB/tH42zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:73:c8:8b:98:f2:9d:e9:3f:b2:cb:60:78:b1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c
Validity
Not Before: Jun 8 09:00:52 2025 GMT
Not After : Jun 9 09:00:52 2025 GMT
Subject: CN=38c946c00e5259cbe2592bb58d5324d967c91b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ad:16:3e:33:5b:01:f6:ff:6a:06:9a:0f:85:
34:5b:60:28:66:31:3b:70:92:ea:da:8d:7b:89:a0:
1c:a0:d7:ff:ed:e2:8b:95:04:54:83:cc:41:f9:de:
5e:86:cc:ee:54:99:e7:3c:d1:e4:3a:fe:2d:8e:d1:
d6:72:d4:f9:fa:4c:25:16:1b:30:05:68:b4:b3:8a:
17:47:89:3f:f4:60:4c:e0:2a:30:8b:44:93:54:47:
3c:06:b1:d1:c0:51:a6:00:83:d8:15:75:e4:4d:d4:
df:be:dd:a1:de:86:c7:46:1b:62:0f:d8:bf:cc:de:
6c:b5:f6:89:2b:7d:d6:6b:54:dc:88:96:21:5f:44:
10:03:78:71:13:e6:6d:39:e4:a1:df:f5:26:f5:af:
e2:4e:d8:93:8d:27:8c:01:08:fb:3a:f8:5e:5b:92:
0d:78:1f:ab:f2:b0:b7:a7:eb:1f:55:b9:11:f8:8b:
82:09:37:c8:25:d0:e5:50:8c:e8:20:e3:13:01:d0:
54:43:2b:44:a9:c4:e6:6e:66:a5:85:67:ab:88:f1:
59:35:cb:fa:39:cc:78:2e:61:bd:d1:74:55:61:09:
a5:84:9c:fb:7e:79:fb:dc:78:d3:15:3a:bf:91:26:
ef:34:70:d1:f5:33:74:72:02:a0:aa:9c:9a:fe:36:
e8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C9:46:C0:0E:52:59:CB:E2:59:2B:B5:8D:53:24:D9:67:C9:1B:42
X509v3 Authority Key Identifier:
keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:77:9e:8b:95:17:47:a2:7b:6a:90:23:0c:24:05:a9:20:85:
83:08:fd:4e:14:1c:5b:d5:fb:37:0d:91:2d:8f:30:32:51:6b:
77:b5:55:b9:0f:e0:a3:02:66:18:f9:6f:a2:97:ad:86:ca:27:
80:b5:e5:b8:c6:dd:ae:44:1b:88:0c:58:43:b8:d2:ed:3a:44:
85:d1:07:f4:a1:6a:a5:dd:0e:80:3c:55:22:cd:92:51:3f:2e:
83:6a:28:f4:ef:43:a7:12:b9:2a:5f:04:6d:11:08:cb:bc:8c:
81:ac:20:87:0f:29:09:81:58:ef:6b:15:26:aa:be:95:85:be:
2e:f2:7a:25:5c:ab:11:da:38:38:27:83:38:df:0e:c5:3c:11:
da:cb:78:96:c8:a9:7a:58:f0:fc:50:e4:32:dd:c8:94:47:19:
c4:15:d1:8a:f8:fa:54:3d:70:5f:8b:70:0b:66:43:35:af:4d:
ac:e8:dd:b1:38:3a:d4:86:b9:14:8d:85:d5:af:4a:e3:28:bd:
36:e9:98:15:e7:27:b2:c0:90:1f:1a:44:bf:cd:11:de:dc:3e:
4a:66:08:bd:a3:56:fc:68:13:51:be:0d:e0:1f:7b:57:17:c3:
d5:73:f6:b5:ee:c6:39:6e:40:c5:62:ee:49:33:c5:11:a9:df:
58:c7:2d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:49:15 2025 by rpki-client