Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
File: D8T3CpLUasAsjf5_l1vkir1i56Q.mft (raw, json)
Hash identifier: mkiJ0anMMcBh7LIaLLNCUpR0citi8u9TutNSUiuB/dA=
Subject key identifier: 24:A1:A4:94:A8:8E:6B:10:1B:56:D0:C4:88:5E:27:D0:A9:9A:DF:4C
Authority key identifier: 0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
Certificate issuer: /CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Certificate serial: 01976A05CC6BF281547DE81CABE400530B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 16:00:54 +0000
Manifest this update: Fri 13 Jun 2025 16:00:54 +0000
Manifest next update: Sat 14 Jun 2025 16:00:54 +0000
Files and hashes: 1: D8T3CpLUasAsjf5_l1vkir1i56Q.crl (hash: Yhh5lO3oZeh8YhTj9C+Ih2zxi3V979N1JsOIa1tiSt0=)
2: KV7Ah7ECaAsyXag5Rq5pooWC9JA.roa (hash: VgR4uMVD7rCZUo7Z3bX/mNyr94Jdnu1Q2sOy20+13Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:cc:6b:f2:81:54:7d:e8:1c:ab:e4:00:53:0b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fc4f70a92d46ac02c8dfe7f975be48abd62e7a4
Validity
Not Before: Jun 13 16:00:54 2025 GMT
Not After : Jun 14 16:00:54 2025 GMT
Subject: CN=24a1a494a88e6b101b56d0c4885e27d0a99adf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:80:13:dc:96:0c:51:d3:69:7d:3f:1e:47:0c:
28:dc:bb:d5:72:51:66:a8:cb:aa:67:04:8f:6b:87:
06:08:27:cb:3c:ba:ae:e2:fb:cd:ce:f4:79:fa:31:
27:ca:f8:8e:0e:bf:d3:1d:30:da:02:50:59:e5:da:
7c:d2:0f:ca:71:6a:84:05:ea:05:cd:f3:e9:fb:c0:
2d:7b:04:9c:98:64:51:95:64:ba:e6:ce:34:06:49:
50:8e:de:51:e1:08:ec:1f:16:b8:ae:70:fa:02:ba:
03:26:03:1e:17:62:99:d4:a2:ea:d5:76:6a:b9:f1:
ae:be:ae:98:de:47:72:b8:ed:da:39:c8:2e:0c:db:
37:80:31:24:94:4f:79:cc:d9:e0:74:03:82:e0:bd:
40:73:16:2b:79:5e:e0:cd:aa:8b:bd:49:25:2f:9a:
ae:28:bb:c5:05:0e:75:85:99:c5:57:e5:25:2c:1e:
da:f0:f4:30:17:1b:bf:0a:97:fd:65:fb:00:5e:9f:
03:84:a9:26:70:63:7b:fe:7b:3f:ca:48:ba:06:01:
2b:da:34:f1:e7:ec:c3:6d:b7:3d:c0:e1:73:b6:c0:
5b:bb:e8:20:53:24:5b:aa:98:c9:5e:c0:43:5c:3f:
cb:9b:d4:ee:3b:23:d6:5d:21:df:79:f4:75:f7:ff:
e1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A1:A4:94:A8:8E:6B:10:1B:56:D0:C4:88:5E:27:D0:A9:9A:DF:4C
X509v3 Authority Key Identifier:
keyid:0F:C4:F7:0A:92:D4:6A:C0:2C:8D:FE:7F:97:5B:E4:8A:BD:62:E7:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8T3CpLUasAsjf5_l1vkir1i56Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/46e400-87fa-49e9-9198-65b86a035a08/1/D8T3CpLUasAsjf5_l1vkir1i56Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:65:9a:76:5f:96:df:1c:7a:d3:44:02:08:13:bc:20:2f:89:
e8:57:c3:a8:62:5a:f4:4e:e8:ae:52:b6:1e:d0:d5:cc:09:5e:
33:2c:49:ab:30:5b:18:fb:13:f1:60:95:24:dd:ea:d0:99:ec:
e5:87:2b:25:ee:51:90:73:3b:4b:b9:ba:84:15:0e:a6:e8:14:
1b:12:21:ff:15:89:c6:55:85:42:1d:ce:7c:55:28:82:1d:51:
c9:bc:65:15:7a:6a:0c:a1:99:48:af:1d:6d:07:66:1f:16:33:
41:b7:1b:d4:aa:ee:4c:81:ed:56:7e:e4:49:ad:43:12:fb:6a:
29:22:82:00:dd:41:f8:2a:f8:5b:3b:6f:28:81:cd:03:84:eb:
3e:98:02:29:cc:9d:d3:ed:4d:25:70:7d:d9:25:77:29:a8:54:
dc:b7:0b:64:5c:7f:26:34:6b:b6:64:0a:64:f6:2b:83:6b:c6:
f7:06:42:d7:d0:a7:fe:cf:88:e0:b0:da:ea:72:24:6a:39:e7:
29:4e:6c:69:89:a2:b7:81:0f:90:8e:a4:0b:1f:3d:71:fd:0a:
3f:b1:b4:44:dc:c5:44:dd:c3:31:32:4e:4d:69:10:d7:1b:82:
68:62:30:17:96:dd:2e:ec:35:74:67:fc:25:b0:e4:26:66:3c:
02:08:a5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:14:43 2025 by rpki-client