Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: t0XJQYm14uZUVd87IME0f9uz/S3fcP4fVwXmBpGIcWQ=
Subject key identifier: C5:25:64:F6:08:CC:84:85:41:8F:D9:2F:7E:97:F2:DD:CE:92:12:21
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 01976F631897FFA074FA83D67E9431814D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 17:00:54 +0000
Manifest this update: Sat 14 Jun 2025 17:00:54 +0000
Manifest next update: Sun 15 Jun 2025 17:00:54 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: +52DD2i43lyLvwmsr1T0Mg5mLkSww+I5i4dBzCiN3vQ=)
2: G2qBYse5oGAPa5xfzo8tHGuDcqo.roa (hash: mPibjHFH8adYSb6G95eGzgbjvN5yGYvqGie41fvkWHY=)
3: YI8wZlD-HEfeT6xqGwFmZ1QdD6k.roa (hash: w7eB/hHlmGKQgAjYLk+eJl1NQTaGD79bb/QVrN64Cf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:18:97:ff:a0:74:fa:83:d6:7e:94:31:81:4d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Jun 14 17:00:54 2025 GMT
Not After : Jun 15 17:00:54 2025 GMT
Subject: CN=c52564f608cc8485418fd92f7e97f2ddce921221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:69:c8:8c:9f:1f:9b:42:90:2e:de:0e:f7:
60:80:9d:a1:d7:55:b8:40:14:fa:45:30:aa:96:10:
bc:5a:db:b1:b6:8e:f0:bc:f9:30:2c:96:40:d6:b1:
4a:7a:e5:a0:d6:68:01:98:0a:37:05:d4:9a:18:14:
80:1f:50:67:6a:08:3e:9a:32:6c:cd:17:c6:9a:30:
bf:af:e3:f1:c2:da:af:5c:5e:79:c0:c0:8f:dd:6a:
e9:03:37:ae:23:76:89:f0:8c:35:50:56:99:93:2d:
50:8e:27:c9:cf:ec:07:03:32:db:95:8c:bb:2e:f3:
b6:ad:63:22:75:5e:0b:6a:fe:ee:8b:98:41:b3:23:
8f:51:cc:56:93:a1:1a:e8:fb:92:bb:87:9e:62:d9:
cb:31:7a:6e:bd:8c:6d:93:fb:3a:09:a1:b5:19:c0:
eb:41:16:9d:1f:f9:2c:f8:23:24:4b:6b:35:37:7d:
8e:7a:e9:c1:0f:a7:f4:a6:df:9b:d9:67:90:92:b0:
e9:69:44:45:82:ba:7c:b3:20:36:5b:84:3b:99:23:
98:18:49:86:d1:1e:04:bf:2c:83:91:f4:38:a1:f6:
6c:20:8a:c8:c7:fe:10:ca:2c:48:7d:49:8d:e4:4e:
e4:09:8a:ee:76:b2:e6:86:ec:43:d1:86:c2:2d:c2:
bf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:25:64:F6:08:CC:84:85:41:8F:D9:2F:7E:97:F2:DD:CE:92:12:21
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c9:30:d6:c0:a0:c2:fd:4b:5b:65:8b:e9:59:59:7c:74:0f:
c4:6d:6a:9d:73:ab:b2:31:09:ea:49:7d:10:b2:fc:40:48:34:
52:2a:6a:cc:1b:5b:ee:7e:c9:27:d2:b3:13:44:3c:c2:45:e5:
17:c0:6c:09:4d:77:05:81:af:7f:cc:13:dc:00:b8:a3:9b:d3:
6b:a0:0e:86:22:08:e1:6d:00:7e:39:49:b8:9c:55:f6:46:ba:
7a:56:1d:25:f1:8e:19:fa:e0:3c:2d:1f:c3:0b:1a:15:53:84:
3e:9b:42:a7:ba:bc:b0:c2:a2:97:0d:78:07:04:95:c6:84:47:
64:fd:ae:b4:54:93:09:bb:0f:d7:9a:c3:ee:43:e5:b3:6c:f5:
a8:d4:de:2d:b9:a4:1f:c1:73:f1:95:2c:60:51:91:73:f2:19:
21:22:bd:99:f2:23:7f:8d:45:d7:de:42:b4:7f:78:0d:68:f2:
d3:19:02:13:06:a6:77:85:17:15:37:c4:fa:15:41:a8:2d:4a:
8c:d8:70:2a:58:2e:7c:6e:ae:e4:2a:05:f0:76:ba:45:72:df:
6d:c1:05:e0:29:af:27:1b:4e:ca:11:0d:d9:4d:d9:0c:e8:72:
3c:4c:6a:5a:eb:a3:0e:a5:45:b0:08:00:85:bc:87:44:7b:66:
2b:62:c1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:00:50 2025 by rpki-client