Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json)
Hash identifier: AGpuqcSf2PynNfcFqQdJsahCxl4d8y3m+N3abwwyLjg=
Subject key identifier: 51:B5:FA:B6:F4:7C:10:2C:C6:F7:B5:A4:A1:01:4D:BD:54:46:6C:70
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial: 019749D633BFC4021664A41F34ECEAC46D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
Manifest number: 068D
Signing time: Sat 07 Jun 2025 10:01:03 +0000
Manifest this update: Sat 07 Jun 2025 10:01:03 +0000
Manifest next update: Sun 08 Jun 2025 10:01:03 +0000
Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: AaiEuQ1Y5PmHOHYMmiLwmoFsJLq5AyWFL9S1VKeGzU8=)
2: K7A7C17ACPryQjif4dPHFWCYnmw.roa (hash: yO751NJRBOSn6gMdo40XzsiJt+C4xy6LseVpnpZi3tM=)
3: nkm_AqdgrcdDszFPZGQsvTeQ99w.roa (hash: tWZj3SfE+CRbF9Ic1OICFS30cFtSOef9JMakRYCQj78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:33:bf:c4:02:16:64:a4:1f:34:ec:ea:c4:6d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
Validity
Not Before: Jun 7 10:01:03 2025 GMT
Not After : Jun 8 10:01:03 2025 GMT
Subject: CN=51b5fab6f47c102cc6f7b5a4a1014dbd54466c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:61:46:e9:58:d5:5d:29:06:2c:ea:b5:5f:
56:62:72:6b:35:99:c9:ae:c0:06:d3:42:bb:be:bb:
8b:43:57:de:72:de:2a:a6:1e:1e:83:d0:87:ca:d2:
33:dc:03:87:0b:5b:64:6c:cd:27:d4:4f:28:72:d2:
fe:1b:a1:17:25:dc:3d:d6:b8:73:bb:69:91:0a:a7:
26:65:b3:d2:8f:5c:16:61:36:0a:3b:89:d4:17:d4:
5a:2c:0d:b1:81:fd:be:b8:82:9f:31:c6:62:4d:32:
4b:2c:cc:40:2d:16:5a:60:85:0f:6b:19:15:95:8b:
0b:32:3a:8f:da:be:a7:a6:53:6d:f6:f2:42:80:63:
90:d8:1f:d5:5d:9d:10:f3:d2:1b:c2:d1:37:73:22:
55:55:86:c9:8e:64:45:89:c6:08:38:e8:37:b4:c7:
be:a3:66:91:bd:9c:d0:d8:05:2d:b2:08:de:3a:cd:
96:ce:04:30:2e:85:94:3f:17:c6:ef:f0:99:33:d6:
b2:a8:70:ba:04:5b:26:3d:75:0c:13:05:39:94:43:
02:6f:32:3a:3c:77:a9:39:a9:b4:43:5d:a8:39:30:
a1:12:e3:fa:1e:02:42:d3:7c:f4:fe:9b:17:b3:60:
fa:43:16:99:01:b2:53:ed:3e:50:a2:9a:26:4d:a5:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B5:FA:B6:F4:7C:10:2C:C6:F7:B5:A4:A1:01:4D:BD:54:46:6C:70
X509v3 Authority Key Identifier:
keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:77:a0:9d:b9:9e:9b:45:bd:b4:78:91:c2:f1:91:41:b2:34:
84:40:8b:1c:38:67:ed:cf:4f:6b:73:2f:4d:31:24:30:ee:e6:
85:1d:6b:7e:f0:69:c8:7b:25:97:6e:f9:3a:a3:e8:e9:d1:3e:
e1:a1:b5:22:cd:c2:66:e3:57:02:6e:1d:24:24:9a:f9:17:08:
6f:a6:52:cf:d8:21:af:14:e9:f0:3c:6b:e9:80:a2:ed:cc:db:
6a:41:76:69:1b:d8:e8:0a:00:80:5b:6d:a8:c8:f9:fb:4f:40:
01:46:27:84:fb:08:58:a2:a8:6d:9a:21:0f:a7:0b:c7:6b:22:
50:3e:8a:01:fa:1a:0a:32:2e:6e:2d:f7:87:1b:e7:1a:26:69:
56:05:9b:c0:b8:1d:b2:49:d1:68:3b:09:fd:3e:57:21:42:9f:
85:18:ff:42:8c:9e:95:d8:46:ae:9b:e6:01:f4:63:6b:f7:e0:
d0:ee:4c:fb:11:0a:c8:41:46:af:62:e6:47:71:14:c0:02:1e:
a6:23:ca:3e:be:a6:55:06:5d:bb:e6:34:38:c2:77:4c:98:2a:
e2:af:08:56:52:c2:02:cb:97:14:42:c9:2b:97:3a:e4:bc:a7:
e0:78:a7:21:50:7e:54:b4:4f:30:1b:84:84:91:cc:9a:df:8b:
29:30:5a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:10 2025 by rpki-client