Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File: geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier: k1AIjROEHQeS6Hwh3wddPOIDg9GqCPUTwirOuRIDftU=
Subject key identifier: 73:6D:51:7A:06:4E:8B:2F:D2:C0:3E:49:85:F1:4C:F5:71:B6:C0:F1
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial: 01976A060329EE00544CF63584564474316F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 16:01:08 +0000
Manifest this update: Fri 13 Jun 2025 16:01:08 +0000
Manifest next update: Sat 14 Jun 2025 16:01:08 +0000
Files and hashes: 1: dBbI1Z81Mloa7W2OzhoKXchOrRQ.roa (hash: cFMz5yq3xJCpOCH1TXFzmCMMTxw6N/8cLdoB9ZDvza0=)
2: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: Il0m6BJXUVamtosdPFcbEImMLyl1zLoK+vAXpIwO3OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:03:29:ee:00:54:4c:f6:35:84:56:44:74:31:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Validity
Not Before: Jun 13 16:01:08 2025 GMT
Not After : Jun 14 16:01:08 2025 GMT
Subject: CN=736d517a064e8b2fd2c03e4985f14cf571b6c0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:55:e3:3f:e5:a5:78:a0:24:03:cf:08:5a:
48:0b:3b:32:10:0a:33:a3:ee:41:6d:23:44:cc:ba:
8f:99:04:99:d9:9a:f3:26:16:17:b6:9b:ab:d8:31:
12:d4:dc:8a:c1:94:f2:5e:df:54:48:df:55:05:1e:
08:ee:a2:2a:63:59:6e:c6:dd:4d:7d:c1:f9:e5:11:
c4:00:70:4f:e2:14:4f:9d:46:42:94:f4:f0:a6:d7:
a5:4c:94:79:71:5e:52:55:f1:0b:1c:a8:71:38:1d:
4f:8e:c5:be:ee:fe:1f:53:b4:ca:20:e4:67:fb:ff:
42:aa:66:e8:66:bd:7c:fa:99:5a:90:fe:51:2d:00:
57:f3:5c:b4:e9:4d:0e:4e:9e:0d:b3:26:a1:f4:f6:
ec:2a:62:c6:ae:0e:bf:21:3f:60:99:bc:ef:50:99:
e8:87:bb:84:9e:ae:21:5e:6e:4c:7d:1d:40:a8:df:
1a:0e:2b:dd:e4:24:26:7e:34:68:78:3e:7c:e0:72:
f7:02:a8:cd:ad:70:62:9a:ab:bc:ed:f7:a6:c3:b7:
18:19:99:16:0e:0b:3b:83:3c:10:b8:01:fc:f7:08:
27:88:ff:56:89:c0:b3:f1:39:c9:af:05:e3:f9:d9:
96:e6:9a:0b:a7:f6:35:67:73:4c:51:8d:3c:60:86:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6D:51:7A:06:4E:8B:2F:D2:C0:3E:49:85:F1:4C:F5:71:B6:C0:F1
X509v3 Authority Key Identifier:
keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a3:f4:35:5f:6c:e1:49:1d:4b:63:80:8e:c5:08:f2:af:20:
69:ab:62:7c:27:93:45:56:ce:37:e2:1f:5f:f2:2b:31:08:36:
4e:6d:6d:fb:73:8b:db:87:1a:21:b5:4d:4c:f0:c8:f2:8c:c4:
2f:6b:3f:71:20:ea:50:bd:39:8b:03:34:73:86:c3:77:56:28:
dc:6b:bb:15:cb:af:35:ec:21:6c:cb:c8:c3:b7:73:b5:ab:5f:
ed:ee:ce:c4:be:47:13:4f:93:43:4d:09:e6:cf:10:f7:97:7c:
59:9b:6f:41:f0:50:15:7d:6a:e0:72:9f:94:e6:39:3b:66:0e:
02:b1:36:7f:7f:d1:49:20:98:25:44:86:70:af:a5:5b:4e:da:
f0:32:3d:e9:8c:a9:b2:1a:a8:2b:f5:43:03:c4:50:12:d8:75:
b2:a8:eb:ed:e1:2a:8e:af:c9:21:47:d6:4e:c8:e5:0d:a4:4c:
26:1b:8e:29:cd:3e:af:a2:9e:ad:7b:a0:90:67:38:35:ac:1e:
79:f2:1a:c3:6b:d1:b4:56:0a:ab:30:16:18:3d:04:37:8a:93:
b9:c8:a7:90:ba:42:0e:d3:85:9d:f4:3c:cb:6c:b9:b3:3a:b8:
77:4c:ad:66:c9:6e:47:b4:67:4b:3f:bd:9e:d9:e3:73:34:45:
be:60:07:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:00:56 2025 by rpki-client