Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File: d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier: FBThLMBvyfnk19jzBByUryvQaHL/3SEYuut02yH55OA=
Subject key identifier: 60:FA:AD:B6:65:A4:D2:5B:BD:8D:97:F1:51:DA:3F:B3:4C:8B:E0:6A
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer: /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial: 01976C2B641D68A129E51FB358A925CE9FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 02:01:12 +0000
Manifest this update: Sat 14 Jun 2025 02:01:12 +0000
Manifest next update: Sun 15 Jun 2025 02:01:12 +0000
Files and hashes: 1: GAo7ZduAV60PzhY9o_GDH21ot64.roa (hash: L65aKQ/diSXQMwJ1Sh2UT0BCtlwKc371uG33rtI8OVw=)
2: YnJ26bGDXX1huMvr8EfEnzAcB78.roa (hash: k0PljRyemCupKRxSVAifU5D7QGL/CooV0WFr/NbUXsk=)
3: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: s42ViyEyBEgcDeRnSt5t+srzCOxrTkAttt4TxKZTK08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:64:1d:68:a1:29:e5:1f:b3:58:a9:25:ce:9f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
Validity
Not Before: Jun 14 02:01:12 2025 GMT
Not After : Jun 15 02:01:12 2025 GMT
Subject: CN=60faadb665a4d25bbd8d97f151da3fb34c8be06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:43:c7:13:5d:ba:15:e8:dc:c7:6b:55:c3:
69:49:96:c9:1a:bf:45:ba:ae:92:1b:2b:23:9b:bf:
f4:b7:b1:e8:fe:4e:38:7d:19:62:a4:bd:c4:50:e5:
2a:f2:a6:15:0d:8d:67:c4:99:f2:fd:db:bd:b1:bb:
5c:96:83:87:78:7d:d9:b5:76:0f:7d:fb:d5:ea:9f:
d9:8d:6b:88:e0:86:02:af:9e:7c:e4:36:34:4f:25:
3f:a4:08:b3:c0:33:42:a7:23:b4:09:81:df:12:ef:
a6:aa:ab:16:5f:c2:07:17:72:d1:b2:7d:47:57:5b:
e9:5a:44:96:6a:8f:dc:6c:dd:8e:30:cf:2a:e4:87:
42:fa:ac:41:51:78:ea:ac:8b:e6:ad:d2:07:0e:c8:
8e:2f:8b:33:41:ca:96:14:32:30:ee:43:ef:a0:ed:
5e:87:73:32:2d:50:7d:43:1d:1c:1e:4c:3d:0c:bd:
25:2b:e4:6d:c6:3a:be:c7:f8:69:1a:15:8b:f9:9e:
42:56:f0:cd:28:70:5a:bb:02:3c:d2:97:ae:8a:ea:
36:f8:ac:58:13:2f:90:32:7d:b9:d6:4f:2c:a0:8a:
61:59:54:a3:00:ff:d3:ec:02:28:72:94:ae:97:c6:
94:fc:db:e6:f1:62:0f:da:bc:9f:c5:28:b7:e7:73:
3b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:AD:B6:65:A4:D2:5B:BD:8D:97:F1:51:DA:3F:B3:4C:8B:E0:6A
X509v3 Authority Key Identifier:
keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ac:95:3e:fc:88:9a:91:9b:4d:c3:15:56:aa:b8:24:85:d5:
fa:4b:6c:19:7c:78:6d:26:71:65:e4:22:ce:8c:7b:cd:a9:3a:
fb:ef:35:b8:d9:63:c1:f2:4e:86:38:26:da:b6:e6:ba:95:ec:
f3:0b:95:ae:30:8e:06:f6:fc:c7:f1:67:1e:f3:ab:5e:04:34:
30:09:0d:6c:95:7e:0e:63:a5:37:34:34:b5:d1:4b:4a:8f:b2:
0e:d0:64:dc:f8:08:0d:ce:17:8e:69:c9:a2:6d:66:53:9d:29:
c5:2c:53:90:c8:71:d2:f3:66:c2:b0:51:dd:bc:99:1a:a3:b9:
86:5d:fd:73:50:59:69:76:3e:2d:40:9e:86:db:2c:13:0b:b7:
fe:12:94:ef:ca:e8:34:0e:7e:ec:5a:f0:18:f7:e9:c5:26:88:
86:77:87:16:b3:0a:98:b4:d6:45:cf:7d:2b:c6:96:e4:ca:04:
50:32:2d:18:8c:1e:d3:d9:03:a4:6b:9d:d8:8e:94:df:76:e2:
34:f7:67:e5:18:78:2b:12:0b:b6:fc:36:46:8d:e5:8a:6b:47:
c4:a3:72:b5:9d:cf:df:b3:39:ba:14:62:27:c3:76:61:55:02:
e5:7d:09:2b:c1:27:9e:ec:7c:a6:9b:b0:b2:ed:9e:3b:af:81:
61:99:10:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:28:25 2025 by rpki-client