Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: Aj41PnLLko7+V/DgZmadxUsYyFL8VFOD2qGg778yBMA=
Subject key identifier: E7:59:A3:84:C5:8E:82:BE:AD:4D:1F:4D:BB:9E:BF:B0:B9:DC:7C:09
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 019750EA6835CCB3B1C53EF846154A02567A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 19:00:28 +0000
Manifest this update: Sun 08 Jun 2025 19:00:28 +0000
Manifest next update: Mon 09 Jun 2025 19:00:28 +0000
Files and hashes: 1: jQsHaj5ydFI2fziM46K4sV8khMM.roa (hash: /VZu49ELcVRt0AgBq70u1HUIw5xDpnWHzAN7Dc2pulg=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: LbgYo758rBOwg1K3FW+KyWvqmOOjvtdwtC7OiYMARcA=)
3: tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa (hash: lo7qT/3mV2HNXlaDbWGrnZSKU8gfCipkct2DwMPEdOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:68:35:cc:b3:b1:c5:3e:f8:46:15:4a:02:56:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Jun 8 19:00:28 2025 GMT
Not After : Jun 9 19:00:28 2025 GMT
Subject: CN=e759a384c58e82bead4d1f4dbb9ebfb0b9dc7c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:c3:80:b5:2b:6a:98:0c:4d:ca:90:1f:56:
36:d7:b3:c9:a3:7c:42:25:15:39:b4:4e:af:34:94:
4b:b7:27:14:eb:1c:8d:fd:cf:a8:f5:c7:ae:2a:97:
58:43:05:2a:9e:bd:de:5d:9f:36:71:44:20:5f:9e:
6e:b2:14:7f:c8:b7:73:75:1c:f4:9d:aa:3a:65:30:
4c:12:76:81:99:df:f7:f1:78:cf:63:ed:b0:c4:fb:
21:71:dc:b1:c6:bd:ae:d3:49:81:29:74:4a:a4:88:
80:b7:6c:2d:24:80:c9:0d:72:d8:31:a6:34:19:6e:
4e:18:48:df:69:e4:26:6a:2e:47:01:57:da:30:93:
d6:31:b6:eb:12:0f:0d:c3:97:72:c0:68:03:e6:ad:
51:b9:2b:49:e3:c8:7f:e3:aa:e1:6d:b3:c6:d8:05:
3b:c0:e2:8f:98:7b:bd:bd:54:23:38:5a:af:4c:b1:
65:dd:7a:5e:37:1e:95:85:2e:ee:b7:ff:f5:f3:c5:
de:b9:ca:37:ef:89:53:62:8c:12:b3:d6:8a:8f:09:
c9:67:46:2c:54:0e:69:4c:c8:63:d1:1c:d6:68:56:
96:65:51:4c:eb:1b:a3:11:cb:02:ac:d5:85:45:df:
d6:28:3e:28:92:5f:0a:58:a2:93:e4:87:8e:72:eb:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:59:A3:84:C5:8E:82:BE:AD:4D:1F:4D:BB:9E:BF:B0:B9:DC:7C:09
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:97:4c:15:98:56:23:0c:35:d5:6a:32:e4:cd:19:17:a9:a2:
bb:38:27:c9:71:27:d7:9a:3d:3e:0d:3d:e0:ff:92:82:ac:3f:
ae:ff:b7:ee:94:ad:1a:4d:63:b6:45:fd:ed:c6:f4:fc:c3:e2:
5c:e7:a5:ee:25:cf:d4:f0:9d:82:d2:ae:77:2e:11:6b:51:5b:
8e:93:06:a5:04:bf:4f:8a:3c:01:cf:84:52:f3:32:b7:43:f2:
84:9e:75:a8:20:ae:0e:39:be:be:fd:4e:5a:fc:2f:fc:df:7d:
fd:de:c1:c2:4c:15:8c:0e:3d:0c:0a:47:5b:7d:f2:02:07:af:
19:58:5b:f5:32:1b:2b:8b:07:bb:9c:72:cf:80:44:22:c3:f5:
7e:9e:ed:50:15:15:67:63:13:4e:e3:4d:e6:20:2c:71:cc:96:
e8:e3:6c:99:2e:7c:44:03:4a:59:25:a6:58:0c:a1:f6:20:0b:
4c:71:3c:ec:65:92:3a:ea:50:84:4f:88:f5:80:d2:ef:50:57:
6c:79:db:e6:25:3f:ea:b0:c4:e6:63:9f:b8:bb:57:9a:3a:a4:
6a:29:df:e4:83:ed:ec:3e:10:95:76:e8:da:fb:6b:56:06:85:
16:40:f2:b2:c8:29:57:a0:c9:52:be:1b:79:b7:9b:83:42:e3:
b2:6f:1f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:23:03 2025 by rpki-client