
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
File: Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft (raw, json)
Hash identifier: gv1Zdk2F+W/EE0EiKKZUx6ClQTcyyy/FnyRyv6nPfaU=
Subject key identifier: 8E:10:04:F9:58:BC:A4:0E:BE:A0:0F:F8:E9:6A:2F:D4:DA:4F:53:2B
Authority key identifier: 32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19
Certificate issuer: /CN=323e300a7b63ad4fefbae671f51abc24f1128719
Certificate serial: 01976BBD4C59A833E998B5B34D3030F7A323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 00:00:57 +0000
Manifest this update: Sat 14 Jun 2025 00:00:57 +0000
Manifest next update: Sun 15 Jun 2025 00:00:57 +0000
Files and hashes: 1: Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl (hash: hzX14c4RbE0IGiRvF2k6/lZeB8kpdqquTBpnfmAUmss=)
2: nG0u5JVbsOz2NWyBPT2f0id55qg.roa (hash: rcOcuJUXRrdjca7vuzAqSL0w9cdWcN3PeqOknKKlStg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:4c:59:a8:33:e9:98:b5:b3:4d:30:30:f7:a3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323e300a7b63ad4fefbae671f51abc24f1128719
Validity
Not Before: Jun 14 00:00:57 2025 GMT
Not After : Jun 15 00:00:57 2025 GMT
Subject: CN=8e1004f958bca40ebea00ff8e96a2fd4da4f532b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:1b:5e:0d:05:52:38:92:6f:d6:24:7f:15:
78:46:f0:b9:e9:49:69:98:b5:fc:53:15:94:39:41:
60:6e:1b:de:54:ed:66:9a:f2:ce:19:b0:7d:db:74:
e0:d8:2a:fb:19:83:95:60:5c:3d:b2:0d:b5:2b:d9:
af:24:57:6c:91:a5:c7:87:87:7f:47:f8:b5:eb:91:
f0:e0:67:f1:a0:68:8c:a9:6a:a8:0a:9d:fb:f7:9c:
6a:88:6c:e8:7d:4b:36:78:f5:2f:0f:c6:75:25:e4:
24:2f:1f:26:af:83:ad:a0:0d:7a:3e:f3:2e:ba:7e:
7c:33:55:69:b4:af:09:e2:5c:a6:c5:f8:46:b8:d6:
37:18:a9:3e:25:31:7b:3f:01:8a:3d:d8:33:d0:b3:
41:b0:65:9b:8d:e3:5e:28:ed:71:d7:d0:e3:95:68:
65:ac:5b:0b:68:7a:ce:9e:12:5a:3f:ef:b3:f6:f7:
28:09:77:48:98:64:24:56:f9:71:99:34:f5:ad:29:
db:55:01:ca:73:eb:83:35:d2:dc:91:e2:11:a7:8f:
61:6e:84:cf:b7:6f:3f:ea:bf:d5:c6:27:e2:cd:d6:
1c:c1:a5:1d:2a:f6:94:d5:e1:66:d9:9b:d5:53:d6:
70:ea:78:f6:51:80:dc:7d:73:5f:ba:2e:4e:8f:81:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:10:04:F9:58:BC:A4:0E:BE:A0:0F:F8:E9:6A:2F:D4:DA:4F:53:2B
X509v3 Authority Key Identifier:
keyid:32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ac:45:6a:2e:ad:17:98:4c:14:07:5d:c1:01:7c:51:14:8c:
83:53:2e:9c:35:44:df:23:ef:6f:78:18:cb:b9:43:7e:a1:35:
54:66:a6:53:0d:e8:6b:b9:3c:5b:f0:c1:12:c0:f5:89:5f:4f:
17:4e:f7:85:76:db:fc:7b:d5:b7:bb:4a:a8:ce:4d:3c:f3:2c:
d7:cb:42:52:bc:34:8f:97:51:29:74:af:94:b9:54:47:ee:88:
e6:f0:c1:8f:96:86:4a:8f:98:6f:a0:cd:45:05:99:23:17:c3:
68:a5:f0:bb:0e:93:53:83:da:74:2e:17:10:6a:75:1f:fb:54:
cc:63:dc:eb:35:bf:28:51:a5:d8:e2:e9:3c:72:24:4e:69:20:
ff:17:48:86:d1:fe:9e:a5:19:e5:30:25:31:69:44:a5:0a:d8:
64:05:6a:59:21:0d:40:4d:a1:cd:29:cc:3e:37:a3:47:1c:f3:
4a:fb:b3:c2:93:4e:be:f3:c5:43:c3:e7:68:a3:05:e9:16:e6:
d3:42:5e:4c:dd:2a:82:2e:85:3f:4c:2c:eb:20:5b:d3:f0:7b:
e8:be:db:31:fd:e1:4a:dd:3c:78:85:13:68:3a:a4:f6:80:04:
51:72:4a:34:40:0e:32:64:49:ee:a1:e7:a1:55:25:5d:d6:0a:
ec:3d:74:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:32:21 2025 by rpki-client