Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
File: 25nzML4xR7TakNEUo89CBfpFEQM.mft (raw, json)
Hash identifier: XY3V9yZuZImkld3/p6yg8JbxTI8gzKWuXITgTRp8MVI=
Subject key identifier: DB:59:35:87:AE:74:5B:4B:BD:E6:4E:25:4F:AF:00:C6:FE:CF:F2:F6
Authority key identifier: DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
Certificate issuer: /CN=db99f330be3147b4da90d114a3cf4205fa451103
Certificate serial: 01977865DFA96892B61E835B4CF5C7A8E9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
Manifest number: B6
Signing time: Mon 16 Jun 2025 11:00:31 +0000
Manifest this update: Mon 16 Jun 2025 11:00:31 +0000
Manifest next update: Tue 17 Jun 2025 11:00:31 +0000
Files and hashes: 1: 25nzML4xR7TakNEUo89CBfpFEQM.crl (hash: LqGKTQxVcU/F9Hzg6sqIZ+goHgtkfINspQzPLKJ3pqs=)
2: 7Pi7IgYh5vJV-DxhZs-iQBFdIZE.roa (hash: mMqEKg8gbbKcixQMFJ/ANrO4EPfcPD9yGb46gyRhR40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:df:a9:68:92:b6:1e:83:5b:4c:f5:c7:a8:e9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db99f330be3147b4da90d114a3cf4205fa451103
Validity
Not Before: Jun 16 11:00:31 2025 GMT
Not After : Jun 17 11:00:31 2025 GMT
Subject: CN=db593587ae745b4bbde64e254faf00c6fecff2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:ee:94:1d:92:a4:d9:f7:62:f1:dc:37:d7:
39:f4:3e:34:67:b5:74:55:d6:86:a5:c1:fe:92:26:
cb:c3:85:41:3f:87:ca:3f:60:d4:ae:85:e7:1c:dc:
06:19:6d:35:85:11:f3:22:e2:d3:9b:25:8c:4b:0e:
1f:6f:c3:f5:0a:14:68:65:c8:c8:89:99:59:af:de:
aa:c4:78:88:8c:04:63:5a:6f:00:58:99:eb:09:5f:
f1:72:c0:57:be:5a:6f:72:43:f6:2f:e2:d1:4d:4e:
48:e2:b1:74:f6:0d:0f:09:2b:b3:1d:b8:ce:35:3c:
db:34:2b:94:12:fb:ad:05:cc:4b:ba:40:4d:4d:e2:
8a:74:0d:2c:fa:44:e3:20:55:45:23:55:ff:3b:a2:
2f:a3:e5:56:a7:0c:2a:49:58:ef:4e:86:32:a9:f6:
3a:31:98:16:7d:cb:70:24:a7:7c:54:c8:2c:c4:53:
d2:ef:fb:70:d0:cd:df:6b:5b:a2:d3:97:70:2d:03:
1f:1f:fa:fe:49:7b:d4:2a:27:d9:06:06:26:41:8c:
62:75:a8:99:ae:fb:2e:a7:40:d3:71:59:ff:9b:b2:
76:b8:c5:39:26:f5:1f:70:00:f0:d7:91:09:31:38:
ba:3e:f9:86:6d:6e:1f:a3:68:56:4b:ca:1a:da:e8:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:59:35:87:AE:74:5B:4B:BD:E6:4E:25:4F:AF:00:C6:FE:CF:F2:F6
X509v3 Authority Key Identifier:
keyid:DB:99:F3:30:BE:31:47:B4:DA:90:D1:14:A3:CF:42:05:FA:45:11:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25nzML4xR7TakNEUo89CBfpFEQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/308c09-0034-4486-8274-d4dbd5e204f7/1/25nzML4xR7TakNEUo89CBfpFEQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:e7:c3:f6:0d:8b:32:96:ae:7b:6b:11:99:bd:97:d5:5a:2a:
3f:ad:dc:b3:94:c9:c7:45:cb:8e:89:8f:fd:d8:9c:81:de:54:
9b:0a:95:f5:fe:63:f5:28:b2:3c:bd:d0:06:c3:cf:b9:c6:81:
b7:3f:5e:02:85:06:51:e3:1e:9e:2c:e9:17:b7:e8:90:a5:33:
24:7d:35:93:0d:7d:83:9f:2a:8b:f4:3a:b2:8e:a2:b9:08:11:
3f:f2:0a:83:7f:4f:cc:5e:3e:ad:f6:be:6a:88:df:2c:68:4e:
55:13:60:ea:60:7d:fe:28:f5:15:44:fd:f8:93:d4:36:d7:ba:
e6:9b:ef:33:92:0f:da:1c:33:aa:74:37:7d:8d:59:74:d8:f4:
0b:4e:2d:b6:41:6e:60:f9:97:f7:67:a9:6d:79:e5:87:78:3f:
1a:ff:11:95:0d:93:1b:71:84:a6:4d:6d:19:bb:77:fe:c8:b6:
c7:4a:3f:0b:f2:19:d4:c7:fa:ce:fa:9c:b2:91:6f:ac:85:f3:
ca:ef:82:15:fe:78:7a:e8:f1:a1:e6:15:e9:7f:43:d7:36:19:
da:5a:89:00:2e:0c:2a:f0:31:ec:70:6e:98:9b:12:2a:98:9d:
c6:2b:12:e7:57:5e:b5:ce:82:d3:34:ab:5d:4a:51:c8:1a:16:
67:9c:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:40:01 2025 by rpki-client