Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
File: PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft (raw, json)
Hash identifier: sglJ9mJREMg29y7ccYByLFJm80R7Co74glVl6jKwaFA=
Subject key identifier: 5D:B5:5E:1B:C1:09:35:D9:F9:CF:95:41:67:EA:63:5D:C3:67:01:78
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial: 019778D4F165C42FA614D8B596D5F2647718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
Manifest number: 159F
Signing time: Mon 16 Jun 2025 13:01:50 +0000
Manifest this update: Mon 16 Jun 2025 13:01:50 +0000
Manifest next update: Tue 17 Jun 2025 13:01:50 +0000
Files and hashes: 1: 97b_DOZexsMsbNq0jd1_KnrCkGw.roa (hash: Zsql+k4AO5wopmLFKXiIANICmsUjbHpn09FeXgUdFls=)
2: PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl (hash: Y1N6AIoD2gpu8RW2jMMiopK6hkAcpFeeY54Nk9EuF8k=)
3: vFJBXwiLiT0SV6hpYm9T1KH_3Sw.roa (hash: iZ/rALDyZJ1JAyWAtw5uSLsZV8Z+UzVJnNgd7eGfu2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:f1:65:c4:2f:a6:14:d8:b5:96:d5:f2:64:77:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
Validity
Not Before: Jun 16 13:01:50 2025 GMT
Not After : Jun 17 13:01:50 2025 GMT
Subject: CN=5db55e1bc10935d9f9cf954167ea635dc3670178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:1d:8f:ab:f2:5c:ea:64:20:3a:b2:ba:c9:
83:d7:b2:4a:48:5a:54:20:3a:32:12:85:56:ee:e0:
63:fe:c9:e8:54:5c:03:03:d9:d8:74:0e:1c:64:d7:
d5:90:89:a7:66:c4:2a:36:63:b2:61:8c:79:c7:c7:
1e:bb:cd:67:0e:77:de:e4:9a:eb:49:83:79:35:fc:
56:0b:e8:a2:4a:c2:06:fd:aa:c9:e5:06:2b:a8:4a:
3e:4e:8a:df:52:74:d1:09:2e:fe:27:dd:57:07:3c:
88:28:6b:06:a6:42:f0:a8:07:bf:be:13:85:a9:cd:
13:8f:88:fd:02:e2:7a:84:0e:45:4b:9a:e4:94:b8:
5b:82:0c:7d:a4:9c:43:c0:85:80:c3:3c:e1:01:e6:
82:db:e6:80:c5:96:05:73:15:84:c6:03:3c:f6:38:
81:1d:c0:5b:89:c7:0c:3e:06:e5:cd:bf:93:3b:72:
b7:a7:79:25:e3:a0:64:cb:31:70:fd:d5:1a:f0:60:
84:d0:14:84:06:cb:66:c1:17:75:8f:83:c4:d8:cd:
07:19:7a:ac:9c:52:f3:e1:f2:9b:31:0f:fa:67:3f:
12:c8:a1:e7:19:bf:a6:4f:50:43:68:75:42:ee:95:
b6:f2:58:a4:fd:5c:68:4a:4a:f0:ef:ce:da:17:9a:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:5E:1B:C1:09:35:D9:F9:CF:95:41:67:EA:63:5D:C3:67:01:78
X509v3 Authority Key Identifier:
keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:f3:1d:c2:42:fe:2b:3b:04:0e:f4:29:b5:4b:27:d3:5e:f6:
52:8c:56:5a:1f:1c:bd:56:78:ed:c2:bf:e9:9c:1e:70:9b:41:
11:bf:e1:db:36:91:a9:4d:80:ca:5b:08:b9:07:31:cb:62:19:
5b:58:f4:fb:bb:38:09:13:6c:41:85:4d:40:cd:47:af:18:c3:
a6:44:5e:c5:2a:ae:de:a4:df:d0:a2:2e:bf:39:cb:8e:d1:f6:
3f:7d:b7:2c:d7:c5:4b:43:d2:ca:51:db:33:81:46:74:e2:18:
a0:fa:47:7b:57:05:0a:95:89:77:0c:ff:0c:2d:fd:59:04:a7:
29:b6:fe:34:b8:f9:45:59:b7:65:06:0d:d8:a8:2f:0f:04:87:
ff:13:26:17:ea:87:7d:73:0d:fe:95:d3:06:98:21:67:63:3e:
05:e1:ba:1d:df:f0:07:5c:bf:83:c2:f6:26:59:55:c4:fc:de:
60:7b:94:0d:e1:5c:c2:79:cc:94:25:11:f8:da:08:25:2b:c5:
c4:b3:28:bd:a7:46:73:78:ef:88:69:a0:34:71:90:d3:38:26:
d3:7c:1b:31:38:2f:38:3d:8f:05:94:9d:30:e1:53:ef:e7:db:
94:eb:53:e3:01:2d:52:8e:7c:04:d1:99:36:0f:fb:b1:46:6b:
3d:5a:ce:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:44:52 2025 by rpki-client