Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: hiyZxAt6BrGKJ1zSuarVVU2+LfASTuGou1EWedw3vXA=
Subject key identifier: C3:50:68:FE:5F:22:18:AD:CE:1C:45:6C:3D:BE:CA:9B:24:16:B7:AB
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 01976885268DFFC08C0A7FD02A2D71CDB863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 09:00:45 +0000
Manifest this update: Fri 13 Jun 2025 09:00:45 +0000
Manifest next update: Sat 14 Jun 2025 09:00:45 +0000
Files and hashes: 1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=)
2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: Iv6qAI4BaFl34b7Kzrfoekn8FnZv8eS7vmVvn1HORig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:26:8d:ff:c0:8c:0a:7f:d0:2a:2d:71:cd:b8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Jun 13 09:00:45 2025 GMT
Not After : Jun 14 09:00:45 2025 GMT
Subject: CN=c35068fe5f2218adce1c456c3dbeca9b2416b7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:11:cb:42:96:46:7d:17:05:21:c2:c0:23:
1f:ea:6d:f2:e2:68:28:b9:29:f0:3e:34:45:e4:ed:
19:58:62:28:45:fd:5c:69:38:ef:c3:7b:3b:1b:a4:
41:ca:9a:fb:67:af:7c:90:25:0d:5d:0c:d7:9b:9a:
63:e2:e8:e2:ab:95:fa:92:d1:17:0f:a7:fe:de:02:
75:cf:3f:0b:f8:ac:fe:03:6b:90:b2:db:53:5d:8e:
d6:41:86:5b:69:9f:54:e0:86:33:0f:8c:0f:d9:fa:
3c:9c:32:d5:fc:97:26:8c:0c:32:12:c4:6b:53:45:
84:57:aa:92:f8:b6:fc:c9:45:d7:a2:2a:5d:6f:ca:
d3:d5:b1:41:f4:c2:e8:8a:37:a7:47:f8:f8:45:14:
89:3d:d8:65:ac:53:19:71:7f:f9:18:ba:4f:50:28:
c3:74:f0:d5:e0:1d:73:cb:c1:b7:b8:d9:44:34:a1:
c4:a8:ee:8f:a0:1c:0e:73:f7:ad:11:18:3d:08:a4:
86:28:b9:e7:85:15:68:83:c3:a0:72:5c:4c:cb:ab:
46:eb:8b:8a:c6:b1:5a:85:e6:50:e3:98:ba:dd:7d:
1f:e6:8d:33:aa:45:91:dd:bc:00:c2:d7:5d:4d:e8:
65:57:4d:2c:10:86:c5:44:0d:0f:5e:fa:1f:14:b8:
bb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:50:68:FE:5F:22:18:AD:CE:1C:45:6C:3D:BE:CA:9B:24:16:B7:AB
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ac:32:d5:61:12:03:26:69:63:3d:87:42:b7:e6:1f:2b:7c:
cc:93:cc:53:5b:8e:05:0e:d6:a5:1c:55:0d:03:d9:8b:d4:8c:
05:c5:88:c2:af:b9:ea:87:05:75:12:44:c9:59:56:81:08:77:
40:68:ed:0c:16:d2:c6:59:1b:ae:4f:76:7e:11:fd:98:77:01:
35:10:08:07:27:c7:47:00:a2:93:b8:68:11:8c:45:6e:a0:27:
c4:23:ac:8d:0a:bb:cd:9b:23:ff:09:4b:ba:1c:64:b9:3b:8f:
5f:0c:c6:59:bc:df:94:e6:03:03:ea:7c:7d:bd:80:ef:ae:9f:
b4:a8:15:9a:ad:88:8f:25:07:cb:4d:57:c3:b2:f5:9f:35:11:
28:a9:74:f4:e2:aa:fe:b1:03:db:53:c3:e2:41:ac:78:ca:3b:
b0:a1:b0:02:8e:3e:01:62:2c:32:d0:63:a8:1f:27:92:7f:5d:
bd:5c:0d:f6:6d:c3:ad:8f:a3:44:e9:52:48:85:a6:cb:d7:35:
fe:e9:bc:7d:02:7f:46:17:68:c3:f9:a5:4f:25:8d:f8:cb:1e:
ec:3c:22:8f:67:08:ee:49:66:73:e3:5d:60:50:6e:76:af:67:
c5:b6:f9:f2:38:e1:98:9e:dd:50:e7:2a:ac:cb:cd:dd:fb:1d:
9a:9a:27:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:53 2025 by rpki-client