Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
File: FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft (raw, json)
Hash identifier: TwjZDA5+2nLY0m9+GV4vcOkVhGFklO2k1hqp60QuFWc=
Subject key identifier: 5A:63:E2:56:35:52:14:08:3D:F6:EE:BC:A8:04:89:C9:95:F4:0B:9E
Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
Certificate issuer: /CN=167782bea46fd271768ff46d9b45c057a9df5481
Certificate serial: 01976A059DC123AD77AC25E0520D4227EF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 16:00:42 +0000
Manifest this update: Fri 13 Jun 2025 16:00:42 +0000
Manifest next update: Sat 14 Jun 2025 16:00:42 +0000
Files and hashes: 1: 86pmQhR3tumm6aKpKa5tR6sKn2Y.roa (hash: y1UamkXET5HMaJBK7pe7q3lox6X+V75MRSuUUTK6f04=)
2: FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl (hash: QHoZdACTnQQYJWlaUq7+8LiS3KX10J5SV0rlhGEDfp0=)
3: Zg3SfPJqyJJ2sN5UVgE8M6UTOjo.roa (hash: vyUE4iE6P3VunHQn7CBSp04IcceuNcHP3wF8npQ/Nvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:9d:c1:23:ad:77:ac:25:e0:52:0d:42:27:ef:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481
Validity
Not Before: Jun 13 16:00:42 2025 GMT
Not After : Jun 14 16:00:42 2025 GMT
Subject: CN=5a63e256355214083df6eebca80489c995f40b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a1:67:d6:83:a3:cb:0c:52:3b:b6:30:90:a2:
08:b6:85:ec:6b:4b:5d:80:f9:df:df:82:85:be:e9:
7b:18:2b:eb:b3:51:10:ab:f1:c6:d0:2e:04:8d:b9:
6c:60:d1:1a:e9:bd:05:7e:7b:0e:81:08:06:1b:3a:
36:83:b9:11:2b:57:e3:95:1f:aa:ba:5c:5d:99:08:
2c:90:35:17:c8:88:29:64:25:15:5f:41:b3:75:31:
02:ec:a9:cc:97:8e:ac:b9:f6:d3:3b:10:af:41:fa:
4b:f2:a3:f4:af:40:89:4c:2f:dd:9f:a8:55:38:76:
64:1a:69:85:ab:7f:ae:20:90:34:a5:ce:db:a5:de:
e8:6b:34:4c:70:f1:21:a0:c5:c0:97:d3:f8:e1:1a:
35:5b:8f:1c:8b:7f:35:a7:44:e0:7c:e1:01:25:51:
87:3e:b4:75:a1:2c:de:bc:46:0a:9b:24:28:52:a8:
83:af:68:0b:75:c7:95:dd:ba:96:f6:b6:56:c4:4f:
63:c0:ec:24:fa:34:54:cb:60:8b:95:7a:cb:55:80:
93:28:82:68:ad:cb:3b:3e:0c:15:bb:dc:9e:60:ba:
58:a1:40:b3:46:13:52:42:12:66:88:98:dc:a8:18:
7e:f6:cd:15:90:c7:5f:44:6c:6c:78:45:71:3e:d9:
69:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:63:E2:56:35:52:14:08:3D:F6:EE:BC:A8:04:89:C9:95:F4:0B:9E
X509v3 Authority Key Identifier:
keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ee:c5:8a:73:cd:ae:af:84:6f:e1:a3:f3:1f:74:76:13:eb:
68:3c:23:8a:92:4d:73:0c:f6:4a:2b:de:21:54:06:4a:fb:d3:
65:3a:2e:62:91:96:5f:de:33:48:06:04:0e:ff:22:05:98:c6:
a0:60:34:e7:53:90:7c:b6:07:56:ce:ee:7d:87:20:5e:58:e2:
68:65:50:8e:86:22:bb:bf:11:fc:09:8f:b5:51:49:41:8d:d9:
42:3a:7e:02:c4:25:b8:4e:cb:3c:7a:23:e2:b2:8c:3e:f0:ac:
73:ac:ba:74:74:c2:dd:cb:f6:e0:41:d2:d4:bf:a8:6b:2c:13:
bf:89:17:01:23:72:e5:b4:00:f9:9e:25:69:b4:a0:f4:30:a7:
72:d3:50:72:6d:df:eb:45:47:67:e1:db:67:d1:79:f9:5d:88:
92:4d:8a:90:bf:aa:eb:fd:5c:73:46:14:08:9f:21:f5:df:5e:
a3:c1:c0:fd:8e:fe:6c:97:e1:b2:8e:38:2e:2a:94:21:e7:4c:
a7:61:10:d5:7e:7f:95:45:f9:1e:d1:b0:bd:19:0a:6b:28:2d:
55:3c:31:e1:24:ea:13:86:4d:fd:e7:3d:92:52:07:a7:31:ed:
c7:b5:8b:96:dc:8e:ee:d0:f8:aa:e8:c1:13:37:e5:9d:9b:d4:
f6:0f:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:16 2025 by rpki-client