Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: Tjeqo+/YO+du9+QsfL42oTRWJgRQG+mfU684H5MYGdI=
Subject key identifier: 3E:40:B9:74:BD:C0:2F:4E:65:A0:06:DA:42:DF:F8:BB:F0:72:D1:32
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 0197868F7F27D79B77A55F97F10F508F4599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 159E
Signing time: Thu 19 Jun 2025 05:00:40 +0000
Manifest this update: Thu 19 Jun 2025 05:00:40 +0000
Manifest next update: Fri 20 Jun 2025 05:00:40 +0000
Files and hashes: 1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=)
2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: BjxWshOWq+UYE0EprKTrtNy8A3nv1Ma+3zy/wW5uhZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:8f:7f:27:d7:9b:77:a5:5f:97:f1:0f:50:8f:45:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Jun 19 05:00:40 2025 GMT
Not After : Jun 20 05:00:40 2025 GMT
Subject: CN=3e40b974bdc02f4e65a006da42dff8bbf072d132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d5:c5:e8:1f:81:0f:0f:11:3f:db:86:eb:61:
64:14:39:17:81:f6:77:fc:2c:e5:ea:c1:92:e3:2c:
ce:31:77:1a:dd:1a:1f:65:9a:30:e2:e5:80:91:cf:
68:ca:f6:24:4b:e3:2c:a7:df:62:5b:85:f4:6d:51:
b9:6a:f6:12:f1:44:3b:c6:2f:d4:79:84:95:52:5b:
3f:3e:41:be:ac:be:7d:d3:fc:1e:6c:bf:40:4c:af:
ec:7d:48:ac:25:fe:d6:66:ba:ec:6e:69:c1:27:e4:
2e:c5:1c:e6:7f:b1:e0:f5:a1:fd:0f:b4:ea:be:2f:
7f:27:ac:45:05:5b:e3:67:82:ea:59:b1:3d:b8:a0:
97:dd:28:08:d6:05:b1:bb:7e:2a:7a:a9:04:4f:17:
68:40:49:d3:88:80:b0:5f:3b:b8:e3:8c:2d:2a:e3:
8f:ba:72:b9:86:fa:07:ce:02:aa:7b:43:93:3a:34:
92:1f:4b:4f:7a:17:08:f0:f9:87:26:f8:8b:67:04:
b6:bc:99:1f:56:ea:a1:fa:6c:0b:95:01:2a:38:d6:
c5:db:38:fe:90:ff:b9:8b:c6:e5:93:a4:d0:3e:6a:
d8:e3:bd:44:84:bf:62:01:b0:7e:0a:b3:66:eb:9e:
a4:e1:a9:23:f1:bd:4d:a3:76:5d:da:13:d0:29:09:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:40:B9:74:BD:C0:2F:4E:65:A0:06:DA:42:DF:F8:BB:F0:72:D1:32
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:62:7b:ec:0c:97:03:70:0d:f1:b0:7b:62:43:da:f6:3d:a8:
87:46:66:00:7a:43:88:65:c5:80:b4:34:1a:39:0f:37:13:27:
53:17:a9:c3:c2:f8:ce:3e:a2:1b:b4:58:6b:59:0e:18:e3:40:
2f:93:c1:0a:ac:55:21:9f:83:02:6a:a8:65:9c:81:7a:c6:1c:
87:a5:c9:a8:00:29:d6:27:1d:48:2a:d2:2a:0e:7c:b3:ac:1d:
d6:35:88:20:51:3e:bc:ef:f9:f9:0f:d2:74:24:f7:8b:8e:f0:
91:5a:29:23:1a:71:e3:3f:b2:68:7d:cf:d2:f8:d2:f8:d2:bb:
cc:32:d0:45:0b:fa:81:fd:5d:ea:e7:ba:cf:67:73:d9:fb:3b:
f0:bd:7c:a5:be:2d:c7:e2:05:f3:cd:17:5d:67:30:04:3f:2b:
75:5d:c2:04:db:13:83:bb:d0:1c:a7:49:e2:d7:67:3f:56:e8:
5b:5f:5f:dc:6c:ad:25:a1:1a:bc:6d:f7:09:5b:a7:ec:08:05:
2a:8e:b2:db:97:c6:9b:1d:5c:38:59:aa:83:6f:79:67:f2:1c:
56:6c:c8:c5:13:20:c4:b0:52:9d:9d:db:8e:30:77:ce:42:93:
eb:0d:1a:fe:e6:16:c7:92:8f:72:91:51:53:22:0b:4d:c9:69:
21:0b:0a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:19:49 2025 by rpki-client