Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
File: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft (raw, json)
Hash identifier: +pvZ0VUwS8DAwXAPLs92hlX1wNYb5AHOgIKzPbsrElA=
Subject key identifier: 1C:24:E0:A7:2B:C1:25:03:73:E9:9E:94:8B:0D:C4:E0:9C:9E:C7:6C
Authority key identifier: B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
Certificate issuer: /CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Certificate serial: 01976B8636848331E360F3E851F4D9580C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 23:00:47 +0000
Manifest this update: Fri 13 Jun 2025 23:00:47 +0000
Manifest next update: Sat 14 Jun 2025 23:00:47 +0000
Files and hashes: 1: 3y9VMN9BUcZB2fmchyviGBmGtxw.roa (hash: WvArAvEQlUAHpEjB63U5q0z8PqLe+6GgRYCWBvbd2yM=)
2: sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl (hash: Tz1qTjFJBwGiQgIRhD2Rf1E4NNtYgzG73XYiEF5Si3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:36:84:83:31:e3:60:f3:e8:51:f4:d9:58:0c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afd0cb9775ff478f185f8f980d5b1d92d4be4f
Validity
Not Before: Jun 13 23:00:47 2025 GMT
Not After : Jun 14 23:00:47 2025 GMT
Subject: CN=1c24e0a72bc1250373e99e948b0dc4e09c9ec76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:21:40:ae:86:87:15:dc:35:4a:8f:67:4c:
84:89:59:e9:73:f0:c2:e8:a6:ee:7e:d1:2d:15:b3:
a0:5f:36:30:5d:df:c5:58:4c:fc:8c:14:d0:56:6c:
b9:05:04:f8:36:db:dd:63:f7:03:2a:ef:f8:07:2f:
a4:23:27:ef:c5:02:7e:d2:57:51:d6:0d:9e:c3:f0:
e0:ae:da:7a:2a:a0:77:ee:2b:23:db:ec:39:c5:e8:
cc:c8:a2:b9:27:cf:34:7e:dd:8e:77:ae:0e:b6:63:
08:3b:88:4a:55:82:ce:6d:0c:30:0f:56:59:f3:cc:
19:9f:36:6a:72:67:bb:41:9d:da:88:50:9d:52:fa:
ca:07:35:2d:f3:0c:4b:ea:e8:37:46:a4:14:07:44:
14:88:b9:8d:b2:72:fd:53:37:bf:5a:ec:7d:65:75:
17:11:58:0b:a9:15:16:89:9a:85:36:61:b3:32:d4:
0b:a5:47:39:90:3f:69:96:0a:4a:ce:5f:5a:23:36:
0c:62:56:c2:15:71:04:51:9c:77:ac:39:74:b1:0f:
7f:eb:62:20:e9:38:38:ce:cc:e3:87:c7:10:56:99:
28:a8:25:d1:8a:32:f4:6d:10:e3:61:52:56:95:16:
78:7d:33:e4:e3:d6:9d:eb:fe:3b:2b:15:e2:23:1a:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:24:E0:A7:2B:C1:25:03:73:E9:9E:94:8B:0D:C4:E0:9C:9E:C7:6C
X509v3 Authority Key Identifier:
keyid:B0:AF:D0:CB:97:75:FF:47:8F:18:5F:8F:98:0D:5B:1D:92:D4:BE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/800ffd-c53b-4646-b26e-6ef5c4735e8a/1/sK_Qy5d1_0ePGF-PmA1bHZLUvk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a9:cd:57:cf:76:b7:5a:d4:eb:f6:d2:a7:28:84:51:ad:d2:
f6:66:4f:ab:29:59:94:e8:4d:fc:51:ca:83:e0:70:d4:64:a8:
e9:dd:7f:60:f8:0f:28:ef:74:b9:fb:62:e6:b1:63:91:cc:f4:
85:cd:3b:c2:b3:ef:26:36:07:2b:62:7c:ce:39:e4:6a:8b:bd:
bf:84:98:8f:49:5f:62:8c:6c:5b:fa:9a:2b:18:02:46:f7:a3:
48:a1:b0:c9:c7:c8:7b:3f:71:76:40:11:51:b3:9b:b6:31:e0:
73:03:b2:25:9c:3b:57:e7:ba:1c:98:34:87:40:a2:84:90:97:
b2:57:2f:b9:b0:04:80:b7:b9:4a:a7:17:b9:e0:9b:ae:d1:b0:
50:09:91:c5:70:dd:e9:74:15:71:79:13:3e:bd:54:54:39:b1:
e0:3d:f1:2f:d3:6b:55:ac:51:1c:de:37:81:ee:3a:e0:7f:7d:
bc:35:b3:74:55:31:43:4b:af:02:e5:9a:8e:0a:c1:44:57:cb:
18:1a:a8:c6:9f:c3:55:d8:f0:f7:87:d0:2f:52:90:9a:8b:3c:
68:9c:e9:fc:79:80:76:0e:99:68:3d:22:e3:95:23:b3:4f:87:
8f:78:bd:21:eb:44:4c:ee:e4:77:54:ef:e9:d0:1b:6b:d3:e9:
f5:ae:dd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:23:02 2025 by rpki-client