Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: er8YddkyAFW72WlcydfaTDhtlAhA5hGOXHXcyvIGA0Q=
Subject key identifier: 1B:A3:24:EB:8E:2D:2B:1B:BD:46:7D:AC:96:2C:BB:1F:6A:F6:36:2C
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 01977C4272CF75824AC778A6F3B770FFBC68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 159C
Signing time: Tue 17 Jun 2025 05:00:18 +0000
Manifest this update: Tue 17 Jun 2025 05:00:18 +0000
Manifest next update: Wed 18 Jun 2025 05:00:18 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: uW5UUfUsa12RD5SputWdNBt5S375Ae32/cTvXq+93M4=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:42:72:cf:75:82:4a:c7:78:a6:f3:b7:70:ff:bc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Jun 17 05:00:18 2025 GMT
Not After : Jun 18 05:00:18 2025 GMT
Subject: CN=1ba324eb8e2d2b1bbd467dac962cbb1f6af6362c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:1c:bc:50:bb:7f:2b:0b:28:45:e3:3f:3e:
a0:1f:20:7d:d3:36:47:fe:ea:b8:97:30:c2:10:05:
c6:06:0f:e4:1d:6a:49:64:56:12:1d:72:b3:09:3a:
d6:8b:e7:ba:40:47:36:8b:09:85:74:1e:a9:70:74:
52:44:01:ce:a0:57:65:91:35:ee:3a:fb:91:5e:53:
6b:3f:78:c3:c2:8d:51:e8:22:87:b0:1c:1f:00:00:
10:10:f2:09:fb:73:0b:42:33:29:b2:ba:4b:5e:87:
5b:fb:64:83:5e:25:78:85:5d:cd:ac:1d:70:fa:9d:
56:43:6d:2b:aa:9c:36:74:54:af:48:f1:80:05:79:
c6:92:63:87:8d:61:04:75:02:c2:7c:88:a3:3c:90:
9a:17:09:30:f7:87:c0:20:15:b8:4e:c9:dd:7a:ab:
13:83:9b:c0:0a:c2:20:fd:5f:b8:b6:38:0a:fd:9a:
18:82:e0:2e:d1:c9:da:3b:b8:47:c0:bb:48:c0:0d:
0c:9f:6b:d8:65:af:43:fa:d9:d5:92:53:84:59:f5:
44:99:65:31:df:28:7b:99:d3:97:0f:56:0e:78:af:
42:a4:9b:9c:e2:48:28:b5:5f:27:ce:c2:c8:82:46:
f9:95:ce:52:88:6d:7c:fa:95:54:8e:87:9c:d8:7c:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A3:24:EB:8E:2D:2B:1B:BD:46:7D:AC:96:2C:BB:1F:6A:F6:36:2C
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:21:81:38:b3:bf:1c:e5:09:46:05:67:7e:1d:9f:0e:fd:8d:
fc:3b:bc:99:93:77:db:36:dc:15:ad:28:9e:bc:c2:18:92:86:
25:71:01:1c:58:fe:af:df:39:28:4f:cc:83:6a:0c:b6:4a:ed:
b3:3a:ea:68:c4:8c:54:8c:72:40:84:cb:3f:61:83:34:94:64:
9d:fb:99:f2:61:e2:21:27:e2:64:4f:74:21:66:53:cc:67:b0:
29:05:3c:8b:08:9f:2b:7c:5e:c6:3a:e9:34:4d:04:1e:95:2e:
53:0e:ca:06:d0:90:e7:43:6b:29:02:f3:00:bc:4a:17:31:41:
84:33:81:ba:04:ae:12:6d:d1:33:8b:a6:34:00:6a:93:72:ea:
42:c8:94:b5:7d:b4:14:d6:25:07:da:b7:66:04:06:41:33:51:
e2:b9:ed:54:14:98:4a:4e:8b:9d:04:20:53:8f:30:c2:09:17:
a3:5a:05:17:74:ef:e3:eb:fa:de:70:03:df:32:ca:78:0a:9d:
a3:3c:f7:e9:67:37:38:4f:ae:d2:4c:6b:63:b3:c0:20:d8:8b:
36:77:9a:21:ba:b7:69:03:e3:38:3e:95:b2:95:62:05:52:1e:
83:c2:d7:23:a4:a7:fc:60:ba:c1:25:0c:ae:95:59:53:29:fd:
bb:71:95:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:11:47 2025 by rpki-client