Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
File: d2pYTSefAHBmo4tesPGOe-22FOs.mft (raw, json)
Hash identifier: pQs33+LRYxXqO4AnlNL77mUqd5mtmRrQa+pLbDrYu9s=
Subject key identifier: 5E:F1:44:FA:52:07:B6:CF:69:E3:6C:32:1C:17:96:6C:1E:E6:C4:10
Authority key identifier: 77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
Certificate issuer: /CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Certificate serial: 01976A05A7CDAD597B81E9F6D0FFA3682DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 16:00:44 +0000
Manifest this update: Fri 13 Jun 2025 16:00:44 +0000
Manifest next update: Sat 14 Jun 2025 16:00:44 +0000
Files and hashes: 1: WUTyK7BrRNi0uHZK_0QCE_Vt8SE.roa (hash: 4x8uT/6JZLvMnikfzpcnGLUs5znzoRWzxY13Odgg+MI=)
2: d2pYTSefAHBmo4tesPGOe-22FOs.crl (hash: yC72bHwOoir3blADaxxQOiTMaxR0IMcxs0QArDx7DkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:a7:cd:ad:59:7b:81:e9:f6:d0:ff:a3:68:2d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776a584d279f007066a38b5eb0f18e7bedb614eb
Validity
Not Before: Jun 13 16:00:44 2025 GMT
Not After : Jun 14 16:00:44 2025 GMT
Subject: CN=5ef144fa5207b6cf69e36c321c17966c1ee6c410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:dc:74:5e:77:66:06:e9:7f:2e:3b:cf:1c:
ea:3b:7c:ae:e0:1a:8d:d0:80:c0:10:a2:66:f2:86:
57:47:01:67:ca:da:93:ef:7c:f8:9a:bd:a8:ad:a8:
2f:c0:d9:1a:71:14:a2:2d:de:30:9c:bc:38:fa:b8:
34:66:86:ce:2a:bc:01:b2:c0:91:ca:f1:16:70:39:
f0:2c:b7:80:21:b4:b9:86:3b:a7:f2:1e:9a:83:4f:
c0:ce:a9:a2:51:f2:1e:c5:09:89:ad:3a:9a:9b:bb:
55:26:d3:64:68:a3:65:a1:41:3e:20:33:ab:d4:05:
31:fa:58:37:ab:ed:32:f0:9d:d7:5b:7d:fa:1c:22:
25:78:2e:d7:1e:03:2b:7a:3f:f8:e9:2b:f5:3f:c8:
96:98:d0:46:55:8d:6f:d7:57:0a:c5:68:27:c1:c0:
86:2f:7a:69:24:3c:ad:80:5c:9d:13:16:5a:8e:47:
94:cc:e5:03:3d:5a:a2:c3:0f:5b:33:5d:39:4b:19:
19:af:39:d4:93:15:10:ee:00:c2:cf:85:7f:39:0b:
a4:51:95:c0:5e:79:87:5d:13:d3:5b:c2:6d:b8:51:
bd:d4:3d:09:83:f6:20:6e:67:c5:c7:0e:40:1a:7c:
8c:5c:54:4a:34:c5:c0:8a:96:0b:43:88:8e:5c:9d:
92:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F1:44:FA:52:07:B6:CF:69:E3:6C:32:1C:17:96:6C:1E:E6:C4:10
X509v3 Authority Key Identifier:
keyid:77:6A:58:4D:27:9F:00:70:66:A3:8B:5E:B0:F1:8E:7B:ED:B6:14:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2pYTSefAHBmo4tesPGOe-22FOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7e8848-1065-4386-8156-387c6c4d8f02/1/d2pYTSefAHBmo4tesPGOe-22FOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:24:cb:d5:ce:bb:20:20:25:b3:08:f8:7e:7d:13:38:c5:c8:
01:94:1e:6f:90:a0:db:b4:0c:17:bf:c4:2a:e6:ea:53:a9:39:
ea:3c:b2:cd:6a:0c:8b:6b:a4:3b:b2:43:42:ea:08:93:7a:20:
b6:78:0e:3e:48:75:20:94:b5:20:79:39:40:01:aa:49:a0:3b:
98:79:40:40:d4:72:7e:b3:b2:c6:30:e0:77:7c:00:10:42:ee:
9e:41:1d:ec:d9:ed:9a:49:f7:3b:56:bb:94:8b:ba:94:c7:fb:
15:a3:28:8b:98:6d:7d:cc:03:55:6b:fd:46:71:83:0c:89:ff:
f3:c7:1f:87:4b:8f:c5:3a:c4:60:67:6f:4c:d7:5c:9d:ce:6a:
fb:72:90:bd:1e:82:6d:45:6e:1c:dc:6b:b0:dc:fb:fa:c3:03:
7c:1c:78:7f:59:5f:12:2d:4c:c6:13:b5:cb:84:92:41:1f:97:
ab:4d:9f:35:cc:70:8a:d4:04:e9:25:ec:ab:65:61:52:8d:e0:
83:3e:aa:3e:f1:2b:74:6f:64:1a:4a:f5:9e:bc:10:5f:3e:38:
e6:31:4b:c2:fd:b6:83:3c:ef:75:b9:63:f2:cf:33:a8:39:ca:
80:f8:b3:6b:91:4e:8a:84:3b:75:54:d3:ae:8f:4d:86:5f:1f:
7a:57:c3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:04 2025 by rpki-client