Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
File: m1WmQjec5XjznsDRBgPc-oP2404.mft (raw, json)
Hash identifier: vc5ey3arqXtSh+Jg4pUA1EgVYa9uM6ghUvRUdAXTDQA=
Subject key identifier: A6:E8:30:7E:C4:21:D2:54:57:6C:A0:36:49:EA:2B:D8:15:5C:0D:04
Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
Certificate issuer: /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Certificate serial: 01976EBDD901EC5443093D4F56DE847FBB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
Manifest number: 1171
Signing time: Sat 14 Jun 2025 14:00:24 +0000
Manifest this update: Sat 14 Jun 2025 14:00:24 +0000
Manifest next update: Sun 15 Jun 2025 14:00:24 +0000
Files and hashes: 1: m1WmQjec5XjznsDRBgPc-oP2404.crl (hash: ZDsyaMPGeySxz68uBMHL36PFJh0mKt1sw+P2iIfs350=)
2: rKHwl3Cc8x5jyJG1zE_2bLEuudU.roa (hash: R8KRd6bkmQYX+rv1TKmwJFyYawaIUtq89ucsqsJ+aXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:d9:01:ec:54:43:09:3d:4f:56:de:84:7f:bb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Validity
Not Before: Jun 14 14:00:24 2025 GMT
Not After : Jun 15 14:00:24 2025 GMT
Subject: CN=a6e8307ec421d254576ca03649ea2bd8155c0d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:68:b0:0a:b4:c6:76:28:45:04:8b:94:4e:
5c:f9:05:9e:20:27:7c:7d:94:77:99:cb:7b:27:09:
93:13:22:0d:8d:91:3e:0e:45:04:bd:38:df:3d:40:
43:f0:7b:37:e5:b5:48:14:f3:91:22:c8:f2:cb:a0:
07:ee:7e:38:36:fd:0c:5d:a7:cf:64:8a:aa:43:10:
9f:f7:dd:64:06:ae:45:ca:95:1f:59:7f:42:be:b9:
a7:e1:a9:d6:fb:60:26:dc:e8:14:70:c2:fc:59:6e:
76:58:be:c4:58:7e:33:dc:c1:5e:73:e2:ea:23:cf:
e8:ea:22:ce:40:70:5e:03:be:de:6d:fc:ad:32:19:
f0:3e:81:c4:6b:31:c2:0b:83:e4:a7:17:cb:5c:dd:
58:14:50:c9:b2:3d:0e:ef:05:9b:e4:37:32:9b:90:
c4:60:4e:e2:1d:69:37:26:a1:4c:9d:e9:ff:be:ee:
54:76:39:8d:f8:e7:2a:16:fe:c8:01:b4:07:a8:ff:
1b:51:9f:19:5d:22:5c:98:83:d6:28:3c:d9:76:67:
60:f0:96:ea:b4:82:7b:37:fe:bf:f5:c1:fd:dd:60:
9c:8b:3e:84:2f:25:55:0d:0c:8a:c8:b8:10:3d:db:
28:c9:ef:43:15:96:7f:2c:7b:36:fc:96:cb:37:d8:
18:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E8:30:7E:C4:21:D2:54:57:6C:A0:36:49:EA:2B:D8:15:5C:0D:04
X509v3 Authority Key Identifier:
keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7b:42:69:82:e8:52:c4:d4:51:07:84:8d:80:27:ce:b2:00:
8a:64:b3:3c:3c:b3:0a:d2:9f:b9:a6:5e:c2:8b:ef:22:21:18:
44:b9:6d:b3:80:7e:b9:12:c0:85:34:ee:05:26:07:9c:32:5c:
f3:fc:63:b5:79:db:05:6b:55:4a:12:02:6d:2f:07:0a:a1:26:
79:0e:28:d0:4f:fd:42:59:c9:a9:45:56:df:78:2d:d8:25:d2:
01:fe:5b:1a:9e:34:fd:10:86:cb:5c:a7:a2:0c:f2:73:9b:df:
9e:44:1b:9f:f1:3a:39:9f:7f:19:56:f2:71:98:59:37:72:d4:
35:1e:4f:d5:20:97:b4:75:3a:f0:8a:9d:6a:71:0f:80:6f:96:
9b:ff:77:1e:75:f9:28:03:02:5a:11:f7:dc:8a:b9:6c:0e:9c:
85:11:00:65:1b:90:96:eb:92:a5:c0:a0:f9:1e:a3:7e:10:c8:
53:74:49:96:a0:f7:3f:14:31:d9:c0:83:13:75:4d:95:38:48:
2b:9d:20:02:c9:6e:7f:30:9c:2b:81:ca:2a:f1:99:ad:d1:5b:
fa:82:cd:38:8c:7c:68:bb:50:05:dd:b6:51:5b:70:d1:57:73:
1e:e1:5d:4b:28:07:dd:94:1c:72:69:a3:6c:2b:30:3f:12:fb:
df:cf:47:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:26:06 2025 by rpki-client