Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: Q9cwE2olC0IluuIRnLpQVyceb4eq4klpT3HqjHmveCM=
Subject key identifier: 15:5A:B4:F2:32:EC:C7:F0:B6:1B:15:8E:B5:7A:E1:D6:94:1D:D6:D8
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 01976D3DE71D40538521F391D8A062001CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 1596
Signing time: Sat 14 Jun 2025 07:01:02 +0000
Manifest this update: Sat 14 Jun 2025 07:01:02 +0000
Manifest next update: Sun 15 Jun 2025 07:01:02 +0000
Files and hashes: 1: iMT6U9mtu2u4ZrZg6QFZA1PI4b4.roa (hash: gM1ZjnX5a45F3g+DHFf4ROLZzbrv4Z9zB/pBieJvcD0=)
2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: RUu42xaA1KueCqZkxEcBzuFe2EWYuqJbmc+iiVtGjpQ=)
3: uSjPkHVrQGEYzySpy8LO3vhOhQk.roa (hash: 7CsfbkRbBqND0q0gdzh2M/F8+y9Oj0uA6RZKZkPuiPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:e7:1d:40:53:85:21:f3:91:d8:a0:62:00:1c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Jun 14 07:01:02 2025 GMT
Not After : Jun 15 07:01:02 2025 GMT
Subject: CN=155ab4f232ecc7f0b61b158eb57ae1d6941dd6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:34:38:2c:3e:55:9c:43:30:91:db:a8:33:
1f:8a:72:e1:08:7a:0f:c2:8a:5a:25:35:9d:d2:5f:
0c:22:57:20:f9:13:fa:5b:64:8b:50:36:ec:71:7e:
4c:52:e2:45:1e:64:aa:d4:bd:f3:af:20:b6:72:80:
4b:ab:12:61:1e:8c:ae:76:b7:4d:60:b8:f2:9b:4a:
6c:57:60:e1:cd:61:10:6f:5a:bd:02:ac:d4:16:21:
96:28:89:50:87:d4:c2:e7:36:5d:94:fd:a7:14:25:
1d:32:d1:bb:be:91:5a:68:ce:c2:3f:10:59:e8:e6:
76:ec:e8:87:a1:cc:4e:2b:0a:e8:60:ba:9e:9f:93:
b9:25:d1:63:de:3e:66:f5:2e:8a:a3:3c:0f:dd:19:
a9:75:26:80:b0:ac:b3:17:f4:0d:68:e7:0a:8a:93:
ac:7c:e4:57:04:e5:03:ba:54:d7:66:91:f2:bd:ca:
49:0a:f6:e3:ab:68:91:a8:48:c5:f8:07:db:b7:98:
ac:cf:78:ad:d6:3c:28:d8:0f:56:cd:83:a7:5a:e8:
b4:f5:7d:67:22:f7:48:7b:99:f1:f4:6e:fa:2a:b1:
8b:4e:36:91:1e:89:99:db:73:f8:ec:7d:1b:5f:2d:
c4:19:dd:c4:1e:a1:a2:7b:cc:72:dc:5f:d8:cc:7c:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5A:B4:F2:32:EC:C7:F0:B6:1B:15:8E:B5:7A:E1:D6:94:1D:D6:D8
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:af:2a:20:08:7b:ad:92:87:20:39:e1:23:ac:b3:ca:fe:7d:
1e:0e:c6:5b:e1:6b:d6:1b:8a:43:62:75:0a:0d:63:e6:6b:a1:
c5:e3:1d:a9:6a:95:73:2c:f6:76:9c:f3:7f:a2:ba:d6:e5:3d:
ce:cd:79:6f:a9:c1:89:ab:55:3d:5d:02:3d:a7:c8:3b:a5:f9:
12:d3:ee:47:fc:d3:cc:a8:5e:06:79:36:9c:98:d7:9c:b5:07:
e5:ac:8e:2e:3d:2b:02:0e:66:e8:cc:ff:3b:18:ea:5f:52:b9:
e3:2e:5b:79:52:44:89:31:41:3f:76:99:aa:59:00:68:eb:4f:
58:1e:3b:13:0a:93:4b:79:03:84:73:d2:ff:d0:ab:83:9f:e6:
56:d1:78:fa:04:1d:59:f7:97:3f:6e:c0:79:93:d5:3c:57:ce:
f9:d5:91:fa:3f:f9:91:2d:a3:69:16:d6:e3:76:40:da:ba:8b:
01:2d:f8:a1:65:d9:a5:d2:e2:c8:5e:b3:71:be:c2:41:84:ec:
53:ba:d0:92:c8:06:2b:fd:87:72:ed:7a:e8:4f:21:f5:1a:3a:
4f:b0:9a:92:da:70:df:df:a4:80:4a:e0:b7:65:3a:b4:00:6f:
48:f2:bc:19:e2:bc:1d:40:e3:4c:2e:78:78:3a:fd:17:31:bf:
b8:38:a2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:26:52 2025 by rpki-client