Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: orV6LCJtmDrMjMamrJYY3vrNfQ+BlZPWiWjmyQbf1G4=
Subject key identifier: 2F:88:46:6C:62:13:9A:E4:31:46:E9:01:6F:16:4B:B4:85:2E:57:33
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 01976D06B68BE1C8880ECBB1D0F3F5AF8CFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 06:00:45 +0000
Manifest this update: Sat 14 Jun 2025 06:00:45 +0000
Manifest next update: Sun 15 Jun 2025 06:00:45 +0000
Files and hashes: 1: kYc1gtOr0PTFQ2gYPT0GRKJOtNs.roa (hash: Jh3vTnZ3BASMX35rtVJIhlA72LY16bLBZs3GxE20F90=)
2: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: G0cPdF3AxlGN7xczPqQZCLE0pI8po+iUGTu8wbOHtao=)
3: yYPs8r5YH3ZUhnb-tH8hNPFRP3k.roa (hash: oqr96EpWpl0SR82NHdTiNdunGc2ZUGnDoW9Ug/N3aIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:b6:8b:e1:c8:88:0e:cb:b1:d0:f3:f5:af:8c:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Jun 14 06:00:45 2025 GMT
Not After : Jun 15 06:00:45 2025 GMT
Subject: CN=2f88466c62139ae43146e9016f164bb4852e5733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d8:04:ff:82:23:b6:f6:0a:ba:da:b1:5a:a6:
66:cd:45:47:d8:a2:2b:16:9e:b9:fd:f8:ef:ff:2a:
dc:70:61:65:39:2c:d8:d7:e3:d3:ea:3c:6c:77:f6:
2b:da:2b:b8:6c:e8:28:9c:19:b0:5d:48:20:b2:71:
19:cb:5c:ef:94:88:26:99:57:4f:d6:24:6c:65:67:
ab:90:bc:4c:ce:c0:8a:fe:72:de:02:ed:3a:6c:ac:
ee:fe:14:05:94:bc:31:7d:23:87:d4:fc:32:dc:48:
4d:68:c0:67:18:8f:a9:48:6d:31:f3:27:c9:b2:07:
55:d9:f5:66:91:52:99:de:7b:47:7c:bd:db:d1:df:
45:10:13:47:30:6f:f5:09:55:72:50:d3:b1:a2:93:
5c:be:ab:ae:9d:d3:8b:69:ee:e8:d8:47:a1:73:48:
5b:d8:64:a5:60:ed:3c:37:d5:6a:64:8f:59:3a:dd:
fe:0d:ea:b1:f1:0b:94:5f:ae:e2:a0:f4:4f:2d:b5:
7c:e2:06:af:c9:4a:dc:35:3b:d0:80:ca:09:d9:ec:
d6:ab:11:03:72:a9:6d:0f:d9:f7:02:3e:f3:f4:5d:
65:ac:8d:9f:8c:07:29:c9:39:c0:0e:36:7b:2e:63:
b1:40:70:4b:f8:74:a0:e8:4c:82:68:97:42:a4:1c:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:88:46:6C:62:13:9A:E4:31:46:E9:01:6F:16:4B:B4:85:2E:57:33
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b6:06:9d:16:f6:4d:bd:bf:2b:10:77:97:f0:40:7c:6c:6e:
ab:4c:73:61:f1:9f:9e:45:d7:5a:85:db:7c:14:32:2f:92:d7:
5a:a1:dd:70:97:2c:5f:24:48:6a:cb:d1:76:ab:3a:b7:97:b3:
af:12:99:28:cf:1d:7a:c5:5c:51:18:0d:33:70:9c:61:13:12:
76:cd:9a:1f:7d:42:3d:e1:fe:de:c7:5f:b6:3b:90:1b:38:10:
72:29:d3:49:ad:06:cc:ac:12:d0:2d:67:d3:d7:94:63:69:7c:
3c:b8:7e:ba:bd:00:01:48:47:48:2a:1b:0a:4f:a0:48:4b:a5:
8b:eb:72:86:fe:4c:16:d7:23:e5:09:10:2b:20:64:c3:4b:a1:
d1:e8:8b:78:74:f7:17:ea:5d:e9:50:1d:3d:9a:15:12:57:1a:
01:2f:58:9a:56:f7:63:8a:62:8a:3a:ae:fe:9d:bd:60:94:73:
d0:73:8c:16:ec:71:90:b6:35:97:21:2c:1f:b0:e3:5c:bb:3a:
14:19:30:33:d6:fd:d0:df:5a:8a:30:7e:1f:6b:dc:a9:2b:d8:
3c:44:b8:92:1f:92:59:79:ca:3d:08:f8:85:f9:a6:dd:d5:ba:
96:83:fe:89:00:28:3d:11:da:66:d3:08:ee:79:a7:75:29:32:
03:e6:39:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:51:54 2025 by rpki-client