Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: ymhbViIirxWkDBip1hxRiddoU75NZeQvCavZ1NmbHkw=
Subject key identifier: 08:51:2A:BA:07:BD:95:9E:60:F4:E0:6B:C2:09:25:66:D0:F9:EA:DC
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 0197499F4B98838AE75F4E38A2136D198DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 150F
Signing time: Sat 07 Jun 2025 09:01:05 +0000
Manifest this update: Sat 07 Jun 2025 09:01:05 +0000
Manifest next update: Sun 08 Jun 2025 09:01:05 +0000
Files and hashes: 1: TveYMpv43ads8kL3tJIaF2Lq5Pc.roa (hash: ejisx3Wb0866dp+ZOEjX4YrYq2/QpbZKuvGuyNEFbcQ=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: cFw5iE6qV2/OZiEIn94aWEz9O3ShQrMv7y1jLU+5b88=)
3: i8p3sKDUMyTMnXunF78cOCp8z50.roa (hash: B+LPh5Y0LpN6D/zkvt6qpLxNFEw2L77BjweCvws2PRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:4b:98:83:8a:e7:5f:4e:38:a2:13:6d:19:8d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Jun 7 09:01:05 2025 GMT
Not After : Jun 8 09:01:05 2025 GMT
Subject: CN=08512aba07bd959e60f4e06bc2092566d0f9eadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:b3:6b:d1:c0:c0:ec:79:c2:20:31:29:af:
d0:73:fb:8e:79:b2:54:77:18:ee:e5:e7:21:c0:df:
7b:45:27:75:23:b2:7f:08:ef:cc:d5:a7:f3:4b:df:
3d:6b:3b:64:2b:f5:21:c8:4c:05:7d:14:b8:51:f8:
f6:ff:89:a0:a2:09:d8:72:26:0e:73:19:a2:94:38:
7e:6d:ec:7c:72:91:5f:af:12:fe:c4:6a:50:1c:9c:
a9:df:4e:ab:43:e4:ec:64:da:49:09:73:f6:f4:87:
27:a7:cc:4b:d2:83:6f:47:9f:d1:da:a6:e1:07:d8:
72:33:64:61:30:f5:80:a3:14:cb:a9:27:15:54:7d:
4a:14:02:4b:bc:5a:1c:82:ec:0e:3f:8e:d9:26:01:
69:06:36:a3:3e:6d:71:10:df:63:41:98:cb:ae:83:
b0:99:79:0f:1c:aa:48:48:a7:21:91:32:a7:0c:3a:
9a:18:22:30:68:a2:56:05:6b:05:fc:95:ca:c0:28:
62:ac:18:54:63:51:46:6a:a7:21:a9:3d:b2:12:19:
f0:f0:29:b2:56:7d:2c:73:5d:61:e9:fa:b7:28:70:
1d:79:90:54:76:c2:52:d6:9a:73:18:33:03:4e:60:
82:87:66:f6:43:5c:78:a4:ae:1e:3d:7a:6d:c7:69:
c0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:51:2A:BA:07:BD:95:9E:60:F4:E0:6B:C2:09:25:66:D0:F9:EA:DC
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:25:0c:03:53:c5:d4:6f:2d:a7:04:c3:3e:1b:97:85:7f:24:
bb:eb:00:66:3b:99:e6:84:5e:e8:3d:50:f4:ab:92:23:72:3a:
20:e6:d1:bd:84:b7:db:83:37:32:c7:0d:b9:2e:31:8a:71:2d:
6e:36:49:23:f3:1f:cc:f8:e2:85:53:e6:5c:4e:30:68:f4:f6:
9a:bf:b6:e2:f1:3a:a5:48:c9:3b:09:fa:93:b2:29:35:8b:d2:
ac:55:6c:7b:ef:5d:82:22:7b:ea:3a:f1:54:e9:67:d9:4d:cf:
82:6b:27:7d:9c:fd:95:d3:3e:5a:82:6e:aa:db:f2:9f:99:68:
04:ff:c4:e8:0d:04:61:66:34:a9:ff:8f:57:d5:25:d3:48:94:
0c:b4:95:44:00:68:82:51:45:3d:99:e9:8f:27:14:81:bb:f4:
14:e1:c9:d0:b2:90:a9:e9:bc:1c:d2:24:09:4d:9a:d5:bc:f0:
b9:61:50:b9:44:5b:e1:f1:98:91:93:43:57:f6:5c:c2:66:77:
00:57:a7:eb:cb:d7:57:e8:c7:40:a5:e8:93:72:8a:76:cd:b8:
3e:57:5b:ec:06:48:f9:b2:b0:3a:4e:f4:c2:04:59:e8:fe:a2:
04:46:25:f5:86:5b:6e:4e:1f:c0:8e:59:1c:f7:cb:73:8f:47:
05:f7:8a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:30:17 2025 by rpki-client