Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File: 758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier: i/M6SBhVAI4XCg86ImtWDyAF7/CCLfcold4SUfyVr90=
Subject key identifier: CB:14:0E:33:54:E9:44:3E:EC:88:F0:EE:EE:BE:96:14:47:7C:3D:F0
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial: 01974DE9DD65BAE91423D6E59542D8E1E226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 05:01:01 +0000
Manifest this update: Sun 08 Jun 2025 05:01:01 +0000
Manifest next update: Mon 09 Jun 2025 05:01:01 +0000
Files and hashes: 1: 1bEC89myvydEqo_ZPjw-OQX0Qi0.roa (hash: ZmacESfVCLkopUwGADnqjPbJ5MKyVKen61NApT+t8VM=)
2: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: byZQ28E1QLkdKEmpfYk3mpSBficu46oQYtWqhywd2u8=)
3: iZ1aijGSpYaJ5lT694iv07s9IFw.roa (hash: epj7jnXUcZqcIR0Iu/H9+s0OqjsBdFMaftQUUMbM+4c=)
4: ksWoUId71Ta6zaKYKbekW8SN22U.roa (hash: tv73AIHBejtA7MQn113/2vhoh+psXUpDGtwp+NxnLcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:dd:65:ba:e9:14:23:d6:e5:95:42:d8:e1:e2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Validity
Not Before: Jun 8 05:01:01 2025 GMT
Not After : Jun 9 05:01:01 2025 GMT
Subject: CN=cb140e3354e9443eec88f0eeeebe9614477c3df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e8:f3:09:27:51:ef:14:66:9a:33:97:c4:e8:
fb:ec:c8:4d:21:1a:7f:24:92:21:99:8c:66:01:94:
13:f0:f3:15:c1:c6:42:56:fc:c9:ad:f9:b0:bb:e8:
39:ad:82:80:2f:26:79:4d:41:0b:46:4c:ad:4e:6e:
56:a2:28:17:45:44:23:4e:1e:35:32:26:83:5b:de:
ce:ae:5c:c6:9f:9e:bf:62:bf:3c:1f:d1:fd:c2:37:
d0:34:bb:68:67:d8:68:88:cc:55:36:4d:21:e5:d9:
12:ca:7f:37:f7:6f:7e:6b:b6:ea:e3:f6:d4:57:34:
89:13:f5:a6:26:5e:25:ad:a8:f7:50:99:2a:e8:9d:
b1:25:ef:26:40:0d:d4:c7:4f:f5:c8:3d:a5:4b:f5:
7c:59:02:e9:73:95:d5:1a:32:77:76:1c:2b:61:12:
8b:b5:a8:47:1b:39:90:f9:d5:af:20:57:b4:1d:53:
26:4d:f4:b3:b7:31:37:32:94:85:4e:36:5a:b8:94:
55:ad:82:ce:31:b7:f6:9b:a6:07:63:ad:c5:d5:aa:
b3:c3:b3:99:40:65:33:79:e1:5a:ab:b5:59:b9:b4:
f5:ca:b7:12:9b:49:16:ea:07:49:9d:b4:c9:b8:39:
a7:86:4a:98:af:83:03:dc:55:51:d4:99:30:ca:08:
37:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:14:0E:33:54:E9:44:3E:EC:88:F0:EE:EE:BE:96:14:47:7C:3D:F0
X509v3 Authority Key Identifier:
keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:1c:93:64:a0:f6:59:66:2d:1c:2c:d7:61:bb:5b:1c:fb:3d:
20:e8:17:87:5e:3a:fd:e5:f5:41:76:1d:d8:c3:12:df:1f:67:
d6:77:6c:98:c8:6a:c5:98:5c:2c:f3:78:b5:30:ca:b0:36:1e:
60:c4:34:b1:cb:b8:6d:a5:4b:75:89:2b:37:2a:c0:47:8a:63:
05:c2:f6:4f:5d:a9:72:2c:df:92:20:fb:9e:b8:f2:88:d9:e6:
aa:be:b8:b7:dc:a9:7b:38:df:77:fd:e1:37:86:91:e2:c6:08:
b7:6e:6e:15:6b:dd:e7:94:45:40:03:b9:ec:6b:bd:e0:c0:d4:
b7:88:db:7a:1c:2c:f8:c5:1f:ec:13:9b:46:8c:51:72:02:aa:
2c:d3:b0:5d:86:ad:77:20:6f:03:a9:3c:ec:32:e4:af:45:0e:
37:60:c1:f2:e1:79:0b:66:79:14:72:06:52:af:49:83:a1:62:
9f:83:51:68:3f:82:97:e9:15:ee:ac:5e:41:19:b2:01:3e:04:
4e:31:d3:22:8f:30:51:6a:7d:ec:56:9e:13:ea:93:ca:d1:7d:
c7:dd:ab:8f:d0:ac:d9:72:eb:e3:e3:27:56:c1:84:29:c3:82:
d2:8e:e0:4b:69:03:c1:c9:e7:13:7f:f0:0c:89:90:49:a2:e3:
b3:ff:6e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:54:54 2025 by rpki-client