Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json)
Hash identifier: XbZDZptwh8GJUV9B2RPrKP7spTBwjv7eVrgv3Y8EzLU=
Subject key identifier: 75:E1:EE:C7:1C:4D:8F:2A:0D:EE:DB:9A:98:77:7D:26:5E:61:FC:6F
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 01977FE96BE78CDCE4B9041DDF1E9586CE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
Manifest number: 1599
Signing time: Tue 17 Jun 2025 22:01:33 +0000
Manifest this update: Tue 17 Jun 2025 22:01:33 +0000
Manifest next update: Wed 18 Jun 2025 22:01:33 +0000
Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: U1ODLFdiW6vTbzMbCHkjkJgj3qssQ/Kfv3xvHVpQ7F4=)
2: y6zUASqLMYC9vOre4NE5oaCGRIY.roa (hash: nU1xlMhFlcEyY9/vfWFwqCMNEfoKNvZKlYNQ0axw4og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:e9:6b:e7:8c:dc:e4:b9:04:1d:df:1e:95:86:ce:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: Jun 17 22:01:33 2025 GMT
Not After : Jun 18 22:01:33 2025 GMT
Subject: CN=75e1eec71c4d8f2a0deedb9a98777d265e61fc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:99:f6:19:7e:02:16:23:6d:b0:54:f4:2b:
bc:52:56:99:c8:60:a6:80:dd:18:b1:43:ae:06:ee:
41:0a:62:5e:f6:b5:33:f5:2c:ac:68:8a:a1:fa:6f:
ab:2d:04:0b:0a:3e:1b:92:17:d1:0a:ae:f8:b2:fa:
5d:5a:7b:ac:c4:a4:19:00:6e:52:f9:7c:19:ed:56:
ca:58:30:40:22:2e:7c:d5:13:5e:46:0e:5d:78:2c:
03:c9:7b:d7:c4:15:4c:fa:a6:26:1e:3e:69:68:45:
92:80:6f:28:cd:75:93:2f:38:08:b0:e6:6f:90:98:
f4:f6:c4:10:8b:65:dc:97:7e:c5:11:62:89:43:4f:
9d:4f:4c:b9:84:9b:82:8b:93:b7:37:f4:27:81:d7:
be:cb:db:c5:22:6e:f0:b7:4d:6a:1b:22:ea:34:8f:
39:aa:59:35:75:f4:88:d8:c7:ec:bf:1d:4d:98:a4:
d0:fd:a2:67:7f:5f:1b:b1:e4:14:02:69:93:b2:37:
e2:9b:02:6e:d3:fe:ef:ee:e9:8e:3b:66:d9:43:39:
63:90:88:a8:bc:15:b3:c2:26:c8:da:b8:5e:95:00:
3a:d5:b0:ef:10:39:4e:2d:97:03:f5:dd:f8:3c:21:
59:35:29:b9:e3:4e:e0:5c:ba:2b:1b:d7:61:fd:1b:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E1:EE:C7:1C:4D:8F:2A:0D:EE:DB:9A:98:77:7D:26:5E:61:FC:6F
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d2:86:b8:2d:af:e9:8d:f4:c9:37:50:de:8f:65:2a:7e:44:
36:f6:7d:f2:c4:90:76:b2:51:64:36:4e:7a:4f:1b:69:36:93:
fa:c1:fb:fc:7e:5e:4f:11:b4:5f:f7:11:9d:41:96:b4:28:7a:
43:c8:30:9c:76:88:94:a7:50:25:70:8f:1c:00:87:cb:76:de:
16:31:46:90:bf:7b:4d:12:64:08:af:09:38:52:91:1f:e2:3f:
1a:66:94:00:68:b7:23:4d:bd:dc:82:c8:aa:fb:eb:3f:3c:cb:
b8:ba:82:75:60:cb:01:73:b0:54:28:b8:d2:b1:40:3a:52:29:
cf:9c:0a:e9:f9:98:8a:82:5e:b5:4a:bc:89:59:b0:17:41:d0:
c8:a0:3e:43:60:15:01:70:03:23:6b:56:08:04:06:31:e3:41:
b3:90:d7:92:8f:d9:84:4c:94:a9:22:d5:9c:29:64:73:14:62:
89:de:42:93:60:4a:7d:f5:f0:8e:73:e9:0a:c9:64:a3:fd:62:
37:f9:6b:2a:1a:a1:fe:2f:59:27:50:26:1c:b6:c0:2e:3e:41:
2c:f4:6a:fc:8e:91:f6:46:38:39:63:3c:52:06:75:4b:9e:d0:
56:99:75:db:41:84:e8:f1:0e:14:46:6a:81:22:15:99:2a:09:
77:d2:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:17:36 2025 by rpki-client