Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
File: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft (raw, json)
Hash identifier: 78dNw92Y2XNCxMMknQdWaYfMEbaMR4YvFKS/lWGe6DM=
Subject key identifier: 3B:5A:22:2C:2E:37:6F:51:EE:3E:93:5A:C9:E3:B8:21:7D:80:78:2B
Authority key identifier: E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
Certificate issuer: /CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Certificate serial: 01976885234D43AB99B4A0739B43E883BB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 09:00:45 +0000
Manifest this update: Fri 13 Jun 2025 09:00:45 +0000
Manifest next update: Sat 14 Jun 2025 09:00:45 +0000
Files and hashes: 1: 51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl (hash: E0yyAYt+MruLckxXdXSu0y2UhYTIB4HAGAKd3x2XZJM=)
2: JjZhvhphZRDZH5Oh3OKMQHamrqo.roa (hash: I0uqH2D54bPvPhDVGHzvDh0kw0oClKnlcruCIfR9TBs=)
3: uttZJDL3LQ7QDxUT6eilC7zrvqs.roa (hash: w5gBSlKjA5Lu1HULnBbNVdum/zMpOaAXAiNTMSLvzE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:23:4d:43:ab:99:b4:a0:73:9b:43:e8:83:bb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Validity
Not Before: Jun 13 09:00:45 2025 GMT
Not After : Jun 14 09:00:45 2025 GMT
Subject: CN=3b5a222c2e376f51ee3e935ac9e3b8217d80782b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:89:d1:46:25:3a:80:0f:40:ae:7f:34:eb:
56:62:e8:04:a3:8c:56:ab:6e:1d:5b:d8:cd:e9:97:
af:19:b5:93:ea:4f:55:1b:e5:a8:45:ae:62:e8:c5:
2c:6f:f3:56:63:15:a9:d2:db:51:96:3b:2e:64:df:
93:9e:ee:f4:86:12:d4:2b:e4:5d:23:be:0d:5b:fe:
15:5a:a9:6c:cc:a2:93:b0:f6:78:f0:17:c3:32:32:
c8:c7:d1:43:69:4e:ba:8e:45:ae:23:2a:82:cd:c2:
25:2e:7c:c3:09:4d:50:71:e0:63:8d:55:24:59:10:
3e:ee:ad:54:0b:d0:33:75:e4:73:6c:7c:bb:b9:be:
b3:72:0d:a9:91:f2:db:cf:0e:08:f0:a2:fb:ff:3f:
95:c7:8a:34:66:b9:73:01:3b:1c:f6:b4:a8:18:70:
66:64:66:97:c3:25:69:ab:42:96:5f:cc:ba:ff:67:
ac:61:e2:34:f4:0c:3a:e7:7e:4f:37:15:b4:02:64:
52:ee:0f:8d:ab:10:61:6c:87:e5:ce:d0:f1:81:a8:
b9:08:c3:3d:25:95:15:c0:39:5d:52:b0:ac:1f:e6:
ba:2b:f6:ae:8d:be:3d:33:8f:48:76:59:47:f2:2c:
6f:fc:44:f7:fc:5b:0e:73:ae:89:14:95:39:7b:73:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5A:22:2C:2E:37:6F:51:EE:3E:93:5A:C9:E3:B8:21:7D:80:78:2B
X509v3 Authority Key Identifier:
keyid:E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:84:c2:3f:6a:de:af:18:0f:0d:aa:64:6b:01:86:97:ca:84:
cf:87:8c:ed:a4:6b:06:b1:ae:f7:75:69:f8:fc:06:5e:9d:a4:
05:37:23:ed:43:7c:70:aa:c1:66:37:81:95:bb:11:0a:41:0a:
25:7a:5f:75:45:5c:69:2d:7e:d4:6b:0f:81:20:e1:df:b8:1e:
79:79:8b:6c:34:35:6c:25:9e:dd:cf:cb:41:d2:81:af:93:7f:
95:c7:ba:23:81:a1:ed:35:ff:73:0c:b3:6c:fa:df:1a:05:f3:
8d:ac:20:e8:5c:81:d8:b0:a9:1e:00:39:65:d7:98:d4:6c:21:
84:42:8e:8a:23:36:25:69:ac:a1:76:7d:4d:b8:42:c7:39:cf:
ef:7e:a4:19:d6:a4:5b:9f:39:a3:39:23:c9:36:e1:60:12:7e:
ee:6d:c5:48:c6:d3:63:dc:e3:ed:da:e8:86:0f:79:16:a0:c2:
25:6a:c5:de:3f:46:7f:c1:90:a1:66:0b:b5:d2:aa:56:8e:ea:
74:c8:b2:8b:d3:5b:5f:c4:40:87:ec:d1:64:80:14:95:e0:20:
4b:15:15:c9:16:17:45:56:0c:29:e1:c7:c5:59:ec:ee:ad:98:
ea:9c:b8:e7:b6:be:f2:e3:38:1f:04:9b:ed:24:46:82:d0:e8:
69:70:1f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:37 2025 by rpki-client