Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
File: sDHiyoJMqNVWJAanAhrjwToUJdg.mft (raw, json)
Hash identifier: z67cH5mytE+rQTpmOX/6vRMUjRSIE56XlZczUUMkXYs=
Subject key identifier: 61:E1:BE:12:01:F8:BE:4F:95:3E:7D:B6:13:40:7A:CB:0F:5E:25:14
Authority key identifier: B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
Certificate issuer: /CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Certificate serial: 01977007AB54DD58BB50D173A0C83930C16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 20:00:39 +0000
Manifest this update: Sat 14 Jun 2025 20:00:39 +0000
Manifest next update: Sun 15 Jun 2025 20:00:39 +0000
Files and hashes: 1: 81hKxEsM-ATIhZx0nVrrb8xV2ZM.roa (hash: WpRdHBqETycwQ96u5D62eZXgBmAeqYPLVw7BxsplSoc=)
2: YJ0hIC0g4jRwPT2ffsWDri3U1BY.roa (hash: aRSOvWay4BgtDjCfPmINM1fcXP7qlHTJkbgxSvqFhJc=)
3: sDHiyoJMqNVWJAanAhrjwToUJdg.crl (hash: 9ktu6q/jNDKzqlcqzZGwSj46gSTVBfYUWRcKBIIKE84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:ab:54:dd:58:bb:50:d1:73:a0:c8:39:30:c1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031e2ca824ca8d5562406a7021ae3c13a1425d8
Validity
Not Before: Jun 14 20:00:39 2025 GMT
Not After : Jun 15 20:00:39 2025 GMT
Subject: CN=61e1be1201f8be4f953e7db613407acb0f5e2514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:87:ee:9c:be:3e:94:a7:cf:ff:50:17:67:
a9:f5:f5:0b:69:7f:34:97:a7:c3:a2:55:30:94:f3:
1a:69:f5:aa:a1:4e:15:4a:28:16:9a:53:ba:7f:4e:
77:50:e1:e9:cb:62:c3:a4:3c:f4:a2:46:81:1d:0f:
12:61:99:7e:2b:7b:9f:60:bb:3f:7a:2a:1e:65:b3:
2f:0f:19:79:dc:7c:29:e4:99:a0:4f:76:d8:91:3b:
5f:70:ea:ec:6a:83:0c:bf:bc:8b:08:c3:d1:e2:ba:
05:a3:cc:10:ee:d9:b2:4c:3f:4b:f9:31:51:6c:2e:
86:a9:9a:ac:81:c8:22:83:c5:48:8c:63:5b:d3:01:
4a:37:f3:ec:b2:10:55:23:fb:8e:56:74:40:d2:45:
16:b6:16:9e:ca:50:9e:61:92:08:0d:c0:96:58:78:
24:57:fd:ae:bf:85:a7:02:12:a9:f5:bd:e5:a1:d5:
f4:6c:a4:a7:b5:36:9b:ba:60:9f:3f:3e:2b:96:79:
81:31:79:9d:23:99:4b:5c:e8:a3:7c:12:e1:f1:13:
7f:26:76:d8:86:75:8f:bd:e1:d1:67:04:2a:45:36:
0d:eb:87:5a:52:2e:fa:a2:5e:0b:db:da:9b:f8:99:
f8:f4:3a:8c:51:57:a2:32:57:d5:71:88:82:da:38:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E1:BE:12:01:F8:BE:4F:95:3E:7D:B6:13:40:7A:CB:0F:5E:25:14
X509v3 Authority Key Identifier:
keyid:B0:31:E2:CA:82:4C:A8:D5:56:24:06:A7:02:1A:E3:C1:3A:14:25:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDHiyoJMqNVWJAanAhrjwToUJdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/sDHiyoJMqNVWJAanAhrjwToUJdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:da:33:93:1a:39:15:d4:bf:eb:68:40:a8:7d:d8:f8:82:47:
c6:9d:87:06:ba:56:f8:12:8c:3f:4b:2a:15:b5:5e:7a:ef:ce:
82:e4:a0:93:81:54:c7:16:66:99:f9:6c:2f:e8:09:33:32:e6:
45:44:ef:f0:34:6f:ff:a2:68:ad:c8:6b:76:b6:31:63:b4:43:
73:36:b2:f3:67:54:1f:63:8c:8a:bf:36:67:96:83:9e:ca:2b:
5b:e0:3d:4e:2a:9b:f9:f1:74:12:42:12:32:e1:c7:99:91:7f:
0a:4e:81:7f:0a:82:a3:7e:b4:74:39:f7:67:bd:7b:8e:dd:b3:
91:3a:3b:af:18:b6:79:46:da:e0:6e:d5:83:56:4c:dc:a4:9b:
16:bc:e6:b5:1b:ef:98:14:6b:1a:e6:28:67:9d:ce:a0:1c:b8:
dc:f7:ee:f1:d0:f3:b0:c8:99:30:e9:c1:a8:7c:5e:a6:1c:a8:
a7:a0:0b:8d:ba:97:d6:50:ce:32:9b:a9:f7:9e:c8:f7:01:ea:
d6:f1:73:02:7b:70:01:6e:65:d1:dd:bf:17:13:6a:ae:30:13:
b1:39:68:c9:71:37:e6:1c:69:d8:bf:c8:bd:4f:8c:9a:77:b1:
a8:f5:a3:6e:2f:f0:79:27:bb:cb:f1:7b:a8:14:81:b7:68:99:
64:ce:e6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:59:10 2025 by rpki-client