Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
File: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft (raw, json)
Hash identifier: Zb78Hm/DBaBTB2TXgFsBTVWDgzUO9BRLTZWFcItnino=
Subject key identifier: 4B:D7:7F:C0:11:82:D4:EC:EA:DF:9F:C6:AD:DC:20:65:C0:C7:17:74
Authority key identifier: A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
Certificate issuer: /CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Certificate serial: 01977007C576EAC794ECB0111BD93041FB2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
Manifest number: 1294
Signing time: Sat 14 Jun 2025 20:00:46 +0000
Manifest this update: Sat 14 Jun 2025 20:00:46 +0000
Manifest next update: Sun 15 Jun 2025 20:00:46 +0000
Files and hashes: 1: 6nka26L-7vbT-huqQ7zH80Ad2_Q.roa (hash: bi36P0sQvSkI3t0S3Th1jO23VxQKQmTqbcjBaO1g00A=)
2: p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl (hash: 5Ic7Z82I7dd0upmUHALEfkqq9/AugoYLTUryIkqB+DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:c5:76:ea:c7:94:ec:b0:11:1b:d9:30:41:fb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7967d76c2d46720d4cfac0459fa3c3d22005044
Validity
Not Before: Jun 14 20:00:46 2025 GMT
Not After : Jun 15 20:00:46 2025 GMT
Subject: CN=4bd77fc01182d4eceadf9fc6addc2065c0c71774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:6d:63:e2:4c:e6:26:08:70:d7:4e:91:eb:
44:9c:93:89:0b:6a:5e:6b:fb:3d:74:0a:64:50:15:
5c:25:fa:9d:e0:24:79:52:ce:3b:03:00:63:01:e4:
75:19:a7:59:7a:47:ff:96:98:07:52:70:66:ed:cd:
bb:ed:9c:8b:38:7a:88:21:37:0c:3a:f9:9f:43:40:
0d:af:86:b9:72:70:92:35:b9:78:e2:db:2a:f8:f1:
57:1e:47:ec:94:4b:6c:4e:ef:c1:66:b6:57:9a:42:
bd:1e:7f:96:cd:00:e3:50:24:8d:a4:50:5c:01:f1:
0f:42:bb:d1:48:1c:14:8f:8e:6e:d9:56:72:b8:2d:
60:0f:19:f8:9f:c5:24:35:ee:43:56:25:3c:99:f7:
c9:ed:13:db:28:68:7f:8d:dd:52:3c:79:78:8c:3e:
cf:2b:70:84:6a:0f:98:65:8c:0b:1e:74:09:00:90:
57:9e:a4:53:45:c9:24:65:b8:76:11:e0:af:ec:d3:
17:7e:ee:51:85:c0:fa:02:e7:33:1f:c6:3a:8d:c3:
8d:68:79:ac:af:ec:8a:10:4a:5e:f3:7a:5e:d4:ee:
8a:b7:05:4d:4a:5b:27:88:0d:99:85:ca:ea:80:85:
c1:2c:0b:56:43:0e:9d:4e:37:2d:04:ca:98:4c:fe:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D7:7F:C0:11:82:D4:EC:EA:DF:9F:C6:AD:DC:20:65:C0:C7:17:74
X509v3 Authority Key Identifier:
keyid:A7:96:7D:76:C2:D4:67:20:D4:CF:AC:04:59:FA:3C:3D:22:00:50:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/87b768-1545-494a-84f9-1cf50a536026/1/p5Z9dsLUZyDUz6wEWfo8PSIAUEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cc:ad:0d:dc:fd:9e:1a:bd:54:53:6a:2f:18:a2:e7:25:84:
27:67:43:27:3a:4a:10:00:9f:34:08:b6:8a:3a:ec:97:b3:a3:
d1:a4:0b:ef:f8:f6:76:9e:b5:d6:2c:16:9e:fa:ed:7a:d9:d4:
73:33:53:40:db:0e:98:59:bd:ab:32:3b:e6:d4:88:9f:3f:85:
a6:c3:3e:7c:3f:06:0f:cb:7b:2c:d1:9f:5f:71:ae:91:76:31:
4f:2b:43:57:ac:6d:1d:bd:83:dc:79:e6:96:bf:05:23:97:49:
d3:78:25:6f:fa:98:b9:dc:80:85:ef:9a:09:4c:18:2a:e8:0e:
79:53:7e:ce:d0:e6:c1:4e:18:d7:a1:b6:f2:ca:03:bd:b8:78:
21:13:7f:fa:d9:1d:db:30:14:56:82:d0:ce:9f:be:a1:33:07:
5c:f6:d8:1d:ac:03:a1:58:4c:77:62:f9:77:d2:09:ef:e1:89:
eb:71:a1:aa:74:1d:47:d2:13:4c:af:e8:0a:aa:18:ca:d7:66:
b3:f6:7c:2a:91:0d:ac:ff:60:b8:12:19:2d:32:78:08:f6:b3:
b6:3b:13:be:e4:26:b1:8f:a3:ab:30:7e:a3:f6:ac:f8:a4:5e:
08:08:ec:3b:44:ff:87:8d:a2:94:8f:d0:21:ec:23:1e:fd:0b:
c9:00:a2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:10:32 2025 by rpki-client