Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
File: sUq6i2B0k5NHjoPDYObL110Vb4k.mft (raw, json)
Hash identifier: uRbD0N99UwDfROVlxpZadoKo29cPeykWXc8Ka1VlOfY=
Subject key identifier: F9:43:FC:45:8C:44:EF:2A:C0:F7:05:3D:D8:56:9E:53:49:4E:55:41
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 01976D3DC91D995BF90A1B81179E2D9CA4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
Manifest number: 159D
Signing time: Sat 14 Jun 2025 07:00:55 +0000
Manifest this update: Sat 14 Jun 2025 07:00:55 +0000
Manifest next update: Sun 15 Jun 2025 07:00:55 +0000
Files and hashes: 1: AtRByS0zJPDiOgR2GmP-us653x0.roa (hash: FxQtASMxynUngBeMPqWpgsQ0Eb/Ckc7wV64mAxHzC3U=)
2: COiOJlNhkw7oyE7_CjG4wzI_Has.roa (hash: 8/lIfM84EcdzcDMM/2GUz4VN/PyuQhy9fYkjMmQOIDI=)
3: Lsu4SS6ThyYeppRYu6PmZ-042nc.roa (hash: uXqaykBNjJacbWPSq8V/QHVwNjfPRIGaAOgab5oa/hs=)
4: YELUwe4nammHucxrbZyOcSXhQAs.roa (hash: F7evvDSLJ4aaJnnTjKcdJcahJaI+uHzuDY+hV5o5tME=)
5: hsH-e4sppViS3iNq4F4kEU0ep0g.roa (hash: dqKnOJjGSqIH7LzL8ZBxcWScroq9fSiiauAsWgvwoYw=)
6: lAQuczRYGnewQpXm-9DH2Aa2FJM.roa (hash: cpxHeGSggctdEQY5QxkgjLkTiuh9nHgtIGZfv1ijkMo=)
7: sUq6i2B0k5NHjoPDYObL110Vb4k.crl (hash: gRW8kDjGmWz1J/0ZDmtAalRiIWLeJTmqELLVV/KfSFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:c9:1d:99:5b:f9:0a:1b:81:17:9e:2d:9c:a4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Jun 14 07:00:55 2025 GMT
Not After : Jun 15 07:00:55 2025 GMT
Subject: CN=f943fc458c44ef2ac0f7053dd8569e53494e5541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b6:01:a7:00:5a:6a:44:3e:3b:58:ac:5a:7e:
eb:4a:35:1b:7b:30:44:d2:fc:43:29:d6:a6:bb:f6:
c3:1a:9c:0f:83:02:dd:18:52:5b:b1:4e:8e:9e:d2:
e6:87:c0:93:a2:bd:67:14:2a:cd:00:3d:66:24:0a:
e9:ba:7f:a7:c8:95:58:45:b2:78:dd:ef:4c:d5:c2:
36:ef:6a:81:11:38:88:26:c3:68:a5:28:a2:23:84:
59:fc:4d:49:a7:a8:65:e5:9d:79:7e:b9:fe:26:d6:
65:fa:32:72:8a:3a:e5:44:cf:e3:01:4c:0c:43:43:
8a:b7:6e:da:cc:5d:1b:da:1a:df:f4:e3:68:cd:cd:
19:3f:32:80:d9:6c:8f:4c:e4:65:ef:ce:2a:a0:4e:
85:9f:ef:1b:cf:cb:ce:6b:a6:ca:b7:c8:8c:44:d7:
87:7a:47:00:c5:08:4f:3e:63:3f:c3:88:06:d8:1a:
c6:68:34:a3:d2:86:62:d2:79:dc:15:6e:8c:57:db:
4c:4c:fc:0c:43:60:f8:92:c0:5a:22:7b:6c:75:4b:
47:98:18:91:49:3e:29:f3:db:1d:54:2e:a5:37:ab:
a7:b2:f6:c3:21:d3:75:7c:ac:5a:38:10:a4:b6:ba:
ea:6b:8a:a5:89:70:5e:88:a4:b4:70:7e:4a:0b:a9:
8a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:43:FC:45:8C:44:EF:2A:C0:F7:05:3D:D8:56:9E:53:49:4E:55:41
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d1:6e:86:83:43:c1:e0:d7:bc:c5:ff:fa:05:4b:2a:da:9c:
8b:7d:90:d3:ee:68:ed:0e:2c:e0:be:f8:7b:bf:5b:03:55:4f:
4b:11:5e:1a:77:3e:dd:1d:9f:4c:ee:98:25:86:2f:71:7d:4c:
d2:de:aa:8a:0c:42:1c:36:10:e0:e6:bd:ce:31:df:51:8e:91:
6f:41:1a:f6:c5:0d:35:3d:b9:ec:d0:29:4f:de:a0:b8:df:8c:
d5:09:3a:07:8d:9a:b5:75:4c:24:f3:d4:4a:40:9b:7d:34:e5:
f8:cb:db:bc:fc:18:5f:1f:ca:12:de:89:c4:f6:d9:ae:1c:18:
a0:11:79:d8:4c:b8:c7:56:bf:d6:31:4d:9c:ca:0b:46:42:00:
34:99:7d:ee:78:11:3d:f9:f1:9b:d7:6c:3d:f6:26:e5:7d:ba:
47:8a:6c:e0:be:47:0a:a6:16:5b:7a:8b:5f:f2:c2:48:94:77:
e3:92:09:fd:f4:43:9d:2b:00:13:06:94:db:e5:cf:61:62:f7:
50:74:49:23:e0:c1:b3:f7:a6:bf:b0:55:15:b0:8d:66:e5:26:
f9:99:ff:e1:7a:85:47:7e:a9:84:a6:19:a3:53:a0:6c:c1:d2:
dd:cf:ed:d3:84:6f:81:97:7a:d6:00:7f:f1:7f:4a:66:e2:ef:
aa:a1:ad:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:05:18 2025 by rpki-client