Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json)
Hash identifier: /uxhhE4aWcoEcHu9oUqc4f/gG0oE83kiktq51KJfIkw=
Subject key identifier: 22:AF:61:3E:DC:A5:9E:97:37:7E:FB:80:82:2B:6C:6E:A9:A7:57:EE
Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Certificate issuer: /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Certificate serial: 01976EF4F8407E6ADDD12922A67DEC460CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 15:00:37 +0000
Manifest this update: Sat 14 Jun 2025 15:00:37 +0000
Manifest next update: Sun 15 Jun 2025 15:00:37 +0000
Files and hashes: 1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: 1NPVUtNig2w94nIyuytHZ9vRstPgIr+fmtcmnamDq9c=)
2: lIHvPze8MhW65ATICPZrXtfvWLg.roa (hash: bg+JonT/EML15sUdW/ANznJHTOv/3C3HqVEO6q5ovAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:f8:40:7e:6a:dd:d1:29:22:a6:7d:ec:46:0c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Validity
Not Before: Jun 14 15:00:37 2025 GMT
Not After : Jun 15 15:00:37 2025 GMT
Subject: CN=22af613edca59e97377efb80822b6c6ea9a757ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:a9:c9:75:0e:1b:ee:60:65:71:79:70:4f:
89:5c:a0:6b:0a:55:af:20:e1:b7:c6:02:33:3e:16:
37:03:93:65:b1:c8:f2:16:c9:16:81:f6:24:b7:d6:
32:3c:51:5f:4a:ff:98:56:94:33:86:4e:58:8f:bc:
1d:7a:96:0f:67:64:d7:9d:cc:eb:af:ab:30:bc:0e:
93:25:0f:af:2f:c4:e7:85:7d:97:32:cf:3c:76:04:
93:e9:97:e8:1f:32:1c:12:59:cf:c9:b1:b0:e9:3f:
5e:a5:49:75:56:04:70:af:c4:7b:1d:00:49:a0:51:
fb:6f:1a:ac:1e:17:92:e6:23:ad:45:d7:51:6d:f9:
79:86:3b:e4:70:c0:b2:6b:b0:f2:3a:0a:75:ca:6a:
68:12:b0:a5:24:8e:ad:96:04:6a:e0:ab:e9:7b:e6:
ca:7c:ed:e8:43:54:4e:c3:7c:9e:98:ef:c6:a6:13:
fe:26:6a:f2:81:5d:85:40:19:98:90:3f:78:df:10:
15:83:31:2f:48:26:b5:a2:c6:76:56:58:b0:29:d5:
83:12:ce:c7:84:04:43:02:f8:da:37:1f:06:df:d1:
c8:0e:f3:45:1b:78:dd:9d:29:d1:b9:f2:ff:6c:7d:
24:90:cb:e0:ee:74:f8:d9:a2:92:22:fe:fc:06:9e:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AF:61:3E:DC:A5:9E:97:37:7E:FB:80:82:2B:6C:6E:A9:A7:57:EE
X509v3 Authority Key Identifier:
keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:34:09:43:c3:1d:a4:db:50:ec:b8:c8:1a:c0:99:c7:86:b1:
e6:19:bf:a3:80:97:fc:d1:a7:80:6d:0b:ed:fe:2b:bf:91:d8:
73:c1:85:3b:96:1c:49:b3:7f:b6:59:15:91:91:90:b2:fe:f9:
a5:7e:67:96:f9:66:8f:fc:d9:55:40:fe:a1:05:0a:a4:6c:12:
fa:25:04:e6:38:c9:0e:3d:6b:14:c0:c5:be:b3:dc:fa:46:12:
71:53:fb:1b:56:52:52:ec:98:68:8b:53:73:f7:0e:ef:11:27:
a0:b4:49:5a:7b:ea:29:90:e4:db:66:30:ce:db:3c:a8:13:29:
3c:fa:e1:bf:1e:9e:76:c9:9b:12:d7:ff:f3:57:8c:71:59:b0:
b5:53:29:54:b6:be:c8:c6:fd:1e:06:e2:18:24:55:0c:23:5f:
9e:4d:55:7b:cf:ff:64:01:24:9f:19:f9:1d:5d:05:98:7e:db:
8b:9f:87:fb:20:1a:76:45:54:ae:4f:19:c5:74:a8:95:54:86:
6d:85:fa:b6:2e:2a:59:87:0e:50:2f:ea:a3:87:77:3a:38:a8:
02:ce:43:32:c5:4b:5c:d6:0c:47:23:70:e8:a0:02:38:37:08:
f5:0f:0b:fc:c5:e5:4d:c3:0c:27:07:99:91:1f:5f:b6:c5:b1:
33:13:df:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:05:13 2025 by rpki-client