Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
File: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft (raw, json)
Hash identifier: PjejbH88l1ySudkbVMcOCwS0qnRvznGSYJ1RCyWdez0=
Subject key identifier: 17:AE:8F:90:12:62:9B:95:A9:92:FD:3F:20:AC:37:EB:13:BD:25:B1
Authority key identifier: D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
Certificate issuer: /CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Certificate serial: 01976EF4E34915740EBBB36A9BD069A21F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 15:00:31 +0000
Manifest this update: Sat 14 Jun 2025 15:00:31 +0000
Manifest next update: Sun 15 Jun 2025 15:00:31 +0000
Files and hashes: 1: 06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl (hash: 8VPIcFnSYCGenu8DbK5fd33OVVK7O5A2kWsd+/LUtmM=)
2: ruzowO5hkwvsrCMVqncyR6RC2cM.roa (hash: 3UI+kEeYIksu5ENYxWY/kKHH2Zgvkj1CId+2uWMcQI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:e3:49:15:74:0e:bb:b3:6a:9b:d0:69:a2:1f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3acd2b7b7473af4350ea1aba83d177585ceedad
Validity
Not Before: Jun 14 15:00:31 2025 GMT
Not After : Jun 15 15:00:31 2025 GMT
Subject: CN=17ae8f9012629b95a992fd3f20ac37eb13bd25b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:63:72:fe:8f:7a:09:2e:48:c5:f2:71:55:0b:
fe:8b:a7:c2:c2:4e:7d:f4:c4:a9:53:de:b0:03:14:
fd:ce:6e:06:26:f3:88:96:19:2a:04:b1:c2:ee:82:
55:27:1e:d8:95:c9:25:75:34:1f:5a:62:af:80:b3:
ae:af:7f:2f:b1:75:14:34:dc:14:90:b7:02:df:de:
55:ea:f5:f4:cc:44:54:d4:e8:54:b7:1e:c1:18:ce:
49:f1:81:eb:96:37:80:a9:a4:43:64:42:ac:16:c7:
50:44:81:b3:d3:f8:68:39:d2:88:d1:67:15:53:e5:
d5:db:b1:a2:7a:c9:bc:e1:13:7a:81:c1:ce:fb:2c:
af:49:6a:32:5f:55:fa:d7:d2:53:2f:cb:14:d2:dd:
98:14:61:74:bf:2f:75:5c:16:81:86:95:1a:72:03:
24:83:5f:1a:46:bd:17:43:d1:bd:2c:af:55:77:6d:
ba:1a:d9:04:64:1d:11:e9:40:98:6d:09:97:fb:cb:
51:6c:3b:45:65:46:a3:bf:18:7a:c5:e3:e2:62:d8:
c0:d7:ee:82:e9:42:7e:e4:24:5d:2a:34:1a:0f:ed:
8c:f6:df:4e:34:5d:bd:ab:47:af:71:0b:20:81:8e:
c5:db:3a:95:36:6a:74:07:f8:8d:7c:c5:19:9d:85:
e5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AE:8F:90:12:62:9B:95:A9:92:FD:3F:20:AC:37:EB:13:BD:25:B1
X509v3 Authority Key Identifier:
keyid:D3:AC:D2:B7:B7:47:3A:F4:35:0E:A1:AB:A8:3D:17:75:85:CE:ED:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06zSt7dHOvQ1DqGrqD0XdYXO7a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/46c20c-f166-4041-a01b-0efec6ea77c6/1/06zSt7dHOvQ1DqGrqD0XdYXO7a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c3:1d:c7:ea:e0:24:07:9d:9a:e7:63:ba:6a:01:61:41:d2:
52:e4:24:12:b6:6d:06:ee:ac:b4:51:01:27:33:42:b1:8a:63:
5e:22:38:18:03:1a:b3:07:69:7f:10:ed:9d:23:76:4a:4c:c6:
12:4d:5e:2c:28:1e:38:b0:36:89:b2:4a:fd:d7:77:2a:fe:dc:
80:f9:32:f3:d7:a6:10:14:d8:fb:d0:0e:53:db:76:08:f4:7f:
68:ac:12:28:94:f6:ea:f8:be:b0:4c:68:70:36:d9:b9:38:c5:
0d:43:a9:9e:ff:f9:50:5f:6f:0d:8c:ce:13:bb:bc:81:b3:e0:
7d:51:2d:38:e9:7c:42:64:fd:68:5e:cb:98:84:88:0e:e9:30:
c4:8b:7d:fe:2b:63:5d:ae:50:f4:f3:14:67:ce:fc:a1:37:81:
a7:d2:bf:9c:d1:86:88:48:9d:21:d7:e9:84:1a:fa:71:07:cb:
90:c8:e4:91:92:8e:f5:24:d1:e7:42:ae:8a:2d:76:99:20:3b:
fd:1c:07:6c:4a:0a:5a:38:6f:a9:c9:09:c3:d4:c2:1e:ed:60:
9e:60:40:34:09:c0:f1:1f:3c:a1:f8:ad:da:cd:76:78:5e:59:
dc:e0:49:c9:17:21:87:d5:92:cd:9e:2a:da:2c:50:09:bc:aa:
e3:f3:5e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:17:42 2025 by rpki-client