
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: tSJmvwA4k5dEJKzxpXivntBQrA6PtHIL2Psjrzq3xpg=
Subject key identifier: AC:27:43:21:19:04:3D:59:5C:D1:69:68:57:8B:EC:7B:5D:D9:69:37
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 0197696116E1B83C7C930BA8D443ECD65E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 13:00:59 +0000
Manifest this update: Fri 13 Jun 2025 13:00:59 +0000
Manifest next update: Sat 14 Jun 2025 13:00:59 +0000
Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: c2IpnxZwf+oaEXAxgeJspUp+Ucoezdj2TEqISO378JY=)
2: vI1HVKVzSovdfnitP5UZ3coZhWk.roa (hash: cmV3rToD1U+gURWFgpIifqRZJUwIYZppdxx/PgY7lUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:16:e1:b8:3c:7c:93:0b:a8:d4:43:ec:d6:5e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Jun 13 13:00:59 2025 GMT
Not After : Jun 14 13:00:59 2025 GMT
Subject: CN=ac27432119043d595cd16968578bec7b5dd96937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:88:ae:66:71:47:98:91:7d:52:81:fb:1e:
1c:c1:07:ca:92:f5:38:80:99:f3:da:82:af:ef:43:
22:d4:9a:a2:e4:65:66:e5:0e:03:4f:5a:05:53:f1:
d9:9f:64:ed:72:4c:23:9f:fc:54:46:22:b3:fc:cb:
43:b6:56:1c:ce:29:e9:4b:fe:35:56:7f:05:7e:09:
58:f5:ef:f9:aa:33:c7:1e:92:3a:93:c1:63:20:74:
14:b6:8b:c2:9d:d9:e0:27:ef:5c:fd:a5:85:84:50:
fe:29:c3:c3:fd:ea:34:db:7a:71:c2:50:9d:e8:cb:
06:1a:ae:58:47:9f:55:13:e9:b1:b2:a0:9a:71:0c:
b5:80:e7:66:d0:95:d6:a5:07:3b:48:e9:90:45:cd:
d0:c5:aa:95:a3:c7:3a:b1:a9:32:43:aa:99:64:ff:
d6:55:1d:76:cd:86:bf:72:9c:34:96:48:7f:2f:13:
35:93:3b:2e:62:25:98:47:29:2a:6e:b9:b9:6a:fa:
ae:96:62:7c:4d:08:fe:be:b7:32:8e:67:19:2b:6c:
4c:d9:f9:c2:ae:9c:10:8a:1e:87:2f:10:80:98:52:
79:c1:9c:5d:ae:2d:40:2b:66:a2:46:9f:5e:e3:b5:
8a:5a:b7:3c:98:fc:67:9a:f1:f0:92:43:bd:01:69:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:27:43:21:19:04:3D:59:5C:D1:69:68:57:8B:EC:7B:5D:D9:69:37
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:25:55:96:c2:2f:ae:28:82:90:d0:b2:83:75:57:ad:29:e9:
92:d4:09:a2:cc:73:de:ce:d9:21:3f:b0:5d:d3:ee:77:ff:50:
b6:1a:cd:10:4c:a5:3d:14:9c:8d:10:4f:27:2f:25:4e:9a:78:
3a:07:c5:b4:d8:0f:4d:bc:b8:d5:34:6c:ca:46:1f:95:64:e7:
33:e8:58:7b:5c:dc:92:38:a0:8b:df:5c:e3:92:94:ee:1e:19:
67:00:8b:e3:27:c0:5c:d9:4d:68:93:20:a0:c8:7a:24:fc:f3:
ca:41:0b:fe:71:2c:3d:5e:fe:7d:9f:73:37:39:8a:ac:28:0e:
eb:a2:1b:a8:14:33:93:e5:d8:71:26:82:46:c0:45:34:5b:ba:
2c:86:36:fb:63:07:5e:99:83:f0:5c:07:9c:92:de:a0:10:7b:
75:05:bd:a9:22:7e:e1:5a:e6:ae:0c:51:dd:7a:df:c2:34:1d:
82:f3:78:55:df:32:70:a2:25:ed:b8:0b:81:37:85:36:8b:a7:
dd:53:b3:47:88:e9:76:76:aa:fd:ec:7a:9b:d0:46:e2:2b:15:
14:38:87:d2:11:c1:c0:84:41:86:28:02:59:3a:fa:51:94:2f:
48:60:97:80:d6:a3:92:05:85:9a:cf:a6:e5:2b:8d:75:bb:e9:
8e:67:6f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:32 2025 by rpki-client