Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: kFflpkwPnmStZYLXFxq7UD1MYthQWVGUFdHO8zM0pBQ=
Subject key identifier: D7:43:21:4E:F2:CC:7F:B7:30:96:0F:07:20:93:44:DA:DE:3A:26:95
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 01976C2B53E64A8E23065A7A8488A7F945BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 159D
Signing time: Sat 14 Jun 2025 02:01:08 +0000
Manifest this update: Sat 14 Jun 2025 02:01:08 +0000
Manifest next update: Sun 15 Jun 2025 02:01:08 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: EfZWUPz5IzDFrJKIUGZf+ZGh8alCjHqVYJmJOqlCpsA=)
2: qGuTXxX3KPPGE7gornZUmtCgXus.roa (hash: hoxbUVU+eahUxnAmZd8qLyauIUnjncf8aJqcwbWkeXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:53:e6:4a:8e:23:06:5a:7a:84:88:a7:f9:45:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Jun 14 02:01:08 2025 GMT
Not After : Jun 15 02:01:08 2025 GMT
Subject: CN=d743214ef2cc7fb730960f07209344dade3a2695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:03:69:94:a1:da:fa:6e:a0:2b:a8:46:4c:
3a:50:61:dd:3a:6f:e2:80:99:37:d0:75:d8:70:aa:
0b:6e:40:d6:75:75:7c:8f:07:a1:0d:68:25:be:05:
51:57:0d:1d:f1:a6:04:2e:ac:aa:9d:63:f1:d4:1b:
93:49:1d:a1:95:c2:3d:15:2e:92:b5:38:58:a0:4a:
4b:44:d5:29:88:0e:56:41:c9:ac:fd:6d:93:74:08:
55:20:ff:85:94:99:00:53:93:8b:b8:0e:07:44:3a:
d0:9f:9b:9e:b2:b9:c7:c1:3a:2f:63:53:8e:b9:97:
aa:15:9e:6d:c2:6c:5b:b8:e4:20:db:d8:c2:f1:dc:
ff:3c:88:fb:3b:66:72:13:d8:f6:d3:4c:67:97:80:
46:7b:dd:08:cc:a7:cb:58:74:0c:bc:c3:ba:15:97:
15:93:d8:76:fd:07:54:6f:e3:ca:17:9d:db:f3:7b:
5c:12:61:18:29:0a:ab:9b:5c:ec:75:d7:54:43:94:
cf:6b:f6:50:88:bf:c1:f8:68:89:c3:82:60:05:13:
a1:50:f4:53:14:e4:e6:49:d2:8b:b1:1f:9a:7e:9a:
98:48:0b:65:64:e5:11:f2:21:90:be:09:f7:70:7a:
e2:c2:a8:10:e1:b5:47:73:50:00:7a:e1:eb:09:f1:
2c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:43:21:4E:F2:CC:7F:B7:30:96:0F:07:20:93:44:DA:DE:3A:26:95
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7a:d1:89:7a:5a:64:59:10:4e:9d:a0:1a:ca:2f:73:94:06:
04:80:bf:32:ec:b9:89:f3:2f:bc:4e:af:6b:51:97:3f:96:8a:
d9:7c:c7:c3:95:8f:1d:06:ae:0c:5f:52:b5:ed:fc:a9:2d:52:
ad:92:90:c5:19:59:f3:62:eb:2f:1c:37:8e:43:6c:b8:a5:16:
48:de:22:3e:03:7b:3c:7a:aa:fd:20:e7:43:b5:1f:f9:22:0c:
ee:dd:66:ad:5b:eb:e5:3c:cd:21:68:93:64:a2:80:59:8f:9c:
18:15:e9:b0:68:0e:f9:38:23:34:fb:95:de:c1:5f:14:98:7d:
59:02:32:ce:83:dd:bf:76:f5:b1:02:80:17:76:7e:d7:75:01:
61:fc:da:f7:7f:1e:4f:d7:1d:2b:4a:eb:c1:d9:58:54:2c:07:
4e:2c:b2:61:15:17:91:88:70:f9:9e:08:7a:6d:10:98:e9:30:
e1:39:82:ce:b6:c9:99:62:0c:e5:8e:52:1f:a6:91:e4:b4:66:
f6:e6:24:08:04:65:50:aa:c4:79:92:c1:7e:f5:94:25:ba:3b:
42:79:4f:3f:a5:74:63:15:5f:20:19:61:7a:e8:7b:ac:52:f3:
ee:c0:f1:bf:06:ea:3c:9f:51:9c:cd:ac:98:46:80:eb:77:d4:
05:fd:7c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:55:48 2025 by rpki-client