Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
File: s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json)
Hash identifier: VIq40Mt5RiU+6eiEjCJYZ5b1vNC1CYyi5B+eHCQ3xNA=
Subject key identifier: 9D:70:CC:31:A4:C5:48:99:82:13:B9:9C:8D:DE:0E:39:FA:D2:41:94
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial: 01974A0D0AA391BB4C0846AD736C50F4E30E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 11:00:58 +0000
Manifest this update: Sat 07 Jun 2025 11:00:58 +0000
Manifest next update: Sun 08 Jun 2025 11:00:58 +0000
Files and hashes: 1: JJG6lSZApZVFWCoCMzoaHnqrdjA.roa (hash: /ZXBf7GoIevwDbia6b3jjdIqB98IB5pgV+PKh4AI8CE=)
2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: FVNkxQC58vQg0X4PmGPWlb+6TlotVSYh+5wK68h94a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0d:0a:a3:91:bb:4c:08:46:ad:73:6c:50:f4:e3:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Validity
Not Before: Jun 7 11:00:58 2025 GMT
Not After : Jun 8 11:00:58 2025 GMT
Subject: CN=9d70cc31a4c548998213b99c8dde0e39fad24194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:58:2e:81:68:2c:8b:6d:79:43:3a:a5:b9:
22:c2:da:17:2d:8e:3e:1c:41:a7:1f:63:14:d3:c9:
12:60:d3:44:46:9e:dd:fd:fa:99:41:c8:10:c8:91:
50:68:a9:7b:38:70:3f:5f:64:4c:9d:04:64:fd:0a:
75:07:3d:9f:48:6e:4b:b0:4f:e4:27:73:52:e7:77:
3f:ee:23:f2:e8:8a:92:c2:c0:1e:87:ea:c5:8c:27:
56:d9:f7:b4:e6:a3:ab:05:2b:69:ce:8f:f6:3e:a8:
4c:22:76:40:5c:2b:af:e0:35:3c:6b:02:0d:49:df:
f5:24:48:e6:c8:ed:81:a2:9b:97:2e:cb:48:84:2d:
e0:ee:41:ec:41:f8:e2:4d:98:20:e8:22:3c:86:c1:
fa:9b:9d:51:c6:3d:bf:ae:fa:23:16:13:76:cd:06:
29:a6:7c:d3:44:c5:fd:a6:73:6b:c8:07:7d:72:fe:
f2:fe:17:1d:95:4b:57:b1:dd:4d:d6:66:a9:0f:41:
83:f9:7c:71:57:34:d2:e8:83:9e:b1:cd:76:3a:24:
b8:73:a0:eb:42:c5:46:74:e5:56:c9:b3:9d:46:f4:
9e:7c:7e:df:0f:38:ea:2e:97:00:bb:65:24:9f:c4:
c0:4f:3c:49:3e:0d:5e:44:c1:d6:2e:6d:60:e7:1c:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:70:CC:31:A4:C5:48:99:82:13:B9:9C:8D:DE:0E:39:FA:D2:41:94
X509v3 Authority Key Identifier:
keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:39:ed:27:88:6b:56:6b:92:a2:6f:6f:bd:26:a7:18:6b:86:
75:71:44:49:41:46:fd:3f:1b:05:d8:d7:3a:13:d1:0d:8a:f0:
77:1a:d9:b3:f0:bf:c0:02:97:fa:51:0d:40:3f:b9:ed:2d:ed:
45:83:4a:be:2c:20:20:c5:76:ea:3f:a0:13:15:21:c6:d1:78:
13:c6:63:a3:14:f9:63:2d:71:db:08:ac:c3:75:f7:47:36:1e:
12:8f:0c:10:87:27:3b:0c:cc:56:85:2c:08:f4:6f:75:5b:08:
2f:60:7f:12:8d:93:1c:0e:96:64:6c:45:5f:e4:48:7b:b7:48:
1b:ba:6f:80:b2:98:9d:2d:a5:c7:f0:2a:93:f5:0c:bf:b8:9e:
27:05:12:99:d5:f5:dd:0f:e9:73:ef:8b:84:1e:65:c5:6d:c6:
2e:55:88:fe:74:8f:d0:6d:66:1a:dc:dc:f5:45:b9:9a:53:f9:
3d:a8:99:4f:0c:35:bd:38:3d:60:9a:01:19:af:33:a6:6f:1b:
da:4b:f2:a5:e0:65:80:ea:60:80:01:35:9f:91:a2:f1:44:07:
e4:f2:9f:be:fd:f9:92:03:39:1c:b5:d8:95:74:8c:fc:a7:bc:
6a:e5:fd:d8:a5:0e:49:31:d0:46:e5:88:08:f7:a5:37:7c:c2:
7f:32:ae:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:41 2025 by rpki-client