Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
File: fM1t7GewiC0V4yglJpgKFntCCLc.mft (raw, json)
Hash identifier: um2Ko9UgcC4te8AIn3xAoaZ2+ediXWY4shRSnYhbEQM=
Subject key identifier: 5D:11:14:32:BC:C8:8D:2A:BA:51:1A:DB:21:8E:EB:5A:4A:71:DA:6F
Authority key identifier: 7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
Certificate issuer: /CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Certificate serial: 01976D068C43965D7B595884E929F0F9F11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
Manifest number: 123A
Signing time: Sat 14 Jun 2025 06:00:34 +0000
Manifest this update: Sat 14 Jun 2025 06:00:34 +0000
Manifest next update: Sun 15 Jun 2025 06:00:34 +0000
Files and hashes: 1: SSnanM1-AOhB6jazpGw2Wx5qtsA.roa (hash: PJm2LHbdL6q86F0ojR19eAq4coi3I/A843rYXRGwOLE=)
2: fM1t7GewiC0V4yglJpgKFntCCLc.crl (hash: VPkXF2PopWJJhOVVP6708U8tD+kI42NdBnBEEf8gN7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:8c:43:96:5d:7b:59:58:84:e9:29:f0:f9:f1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd6dec67b0882d15e3282526980a167b4208b7
Validity
Not Before: Jun 14 06:00:34 2025 GMT
Not After : Jun 15 06:00:34 2025 GMT
Subject: CN=5d111432bcc88d2aba511adb218eeb5a4a71da6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:57:91:96:5c:f0:9d:8d:82:87:67:26:5d:3a:
5c:74:01:2e:24:1d:fc:a5:8a:2d:e1:bd:d4:c3:3b:
a4:2d:9c:9c:8f:50:95:75:fa:aa:6d:fd:fd:04:10:
19:0d:47:53:ec:46:e0:e4:e1:f9:2a:4b:4e:b5:39:
d2:d8:6e:4e:5a:ae:15:b7:f4:9b:60:79:03:0b:9e:
dc:5a:8c:b6:4f:cc:76:4a:49:39:b2:2c:4c:b7:df:
b7:80:1a:22:66:ec:d9:07:e9:77:c7:33:3a:aa:c3:
73:e0:6b:86:65:2d:8f:b7:73:e7:c0:00:05:d9:19:
e6:8c:aa:30:eb:05:d0:4c:d5:5d:ea:3f:c1:7f:95:
11:fb:78:1e:df:67:9d:53:0f:04:70:f8:92:7d:f0:
e0:9b:9d:cd:7d:d9:3d:46:29:40:63:a0:30:3f:34:
a4:b9:32:17:cd:aa:2a:91:5f:f5:16:b9:75:8f:a5:
90:ec:d5:97:9d:27:b2:b8:da:c1:a7:1a:c1:6f:ca:
7e:c5:48:7e:84:7b:1c:ff:37:4a:47:f3:53:60:e9:
d5:61:ce:30:48:e0:63:e0:b2:a8:06:8e:dc:d5:4e:
99:f4:40:bf:6a:7a:00:85:8d:b3:86:ee:d0:6f:9e:
6b:dd:b0:5e:14:a2:f8:ec:d5:eb:45:64:64:6e:a9:
52:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:11:14:32:BC:C8:8D:2A:BA:51:1A:DB:21:8E:EB:5A:4A:71:DA:6F
X509v3 Authority Key Identifier:
keyid:7C:CD:6D:EC:67:B0:88:2D:15:E3:28:25:26:98:0A:16:7B:42:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM1t7GewiC0V4yglJpgKFntCCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b4ce9a-4877-4159-bd80-beacb094f80c/1/fM1t7GewiC0V4yglJpgKFntCCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:03:0f:3f:3b:c8:ac:10:39:35:02:84:1c:c1:45:83:f4:4d:
5e:76:02:07:ff:89:fb:b5:88:92:eb:bc:30:c7:85:c7:1d:3a:
4c:9b:cf:ad:2f:44:df:f0:b9:8e:74:29:4a:d2:d2:a3:d5:13:
ec:cc:6d:12:ba:de:de:21:04:5b:6f:99:58:7b:cc:0d:78:c2:
20:8c:1a:1d:e6:5f:21:14:b1:9e:55:a3:03:7f:1e:f0:e8:9c:
b2:16:bf:06:51:f0:7e:d2:d4:fb:3d:56:06:44:d7:41:f1:a4:
a2:12:ba:02:94:f2:6c:fd:12:fb:e5:05:f6:3a:86:ba:92:11:
18:3f:4f:86:5e:7f:74:6a:d7:60:f9:a4:07:92:ab:8b:81:57:
af:91:d1:72:0c:f6:e3:0d:cb:67:72:38:0e:ca:b7:eb:c7:c2:
74:08:69:08:93:b6:b8:d0:7d:7e:77:2f:5a:04:3b:45:88:a7:
f0:58:7c:23:a5:de:83:35:8c:34:cd:40:f6:47:6d:0a:0d:6f:
a9:7c:72:5c:ec:e5:d3:10:39:1d:9d:7a:5b:e0:51:ac:f2:56:
a7:90:2e:53:18:10:02:84:22:df:7a:3f:09:f4:14:c3:1c:20:
81:c4:44:2f:ce:14:f6:0b:f1:f6:17:92:d5:ba:39:86:d0:e1:
9d:89:ba:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:22 2025 by rpki-client