Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
File: gi9abAuVZH8HA1DmUk4SIPukf6M.mft (raw, json)
Hash identifier: 4LKzocDL2LYrVT8geqgPdPmW8RN1F7go32b363ETyZc=
Subject key identifier: 8B:14:B3:72:BE:FE:FE:3E:D6:51:9D:78:6B:EC:0E:C2:D2:26:EC:00
Authority key identifier: 82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
Certificate issuer: /CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Certificate serial: 01976BBD2FEED3C1D70A71EAAF3CB2FE76C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 00:00:49 +0000
Manifest this update: Sat 14 Jun 2025 00:00:49 +0000
Manifest next update: Sun 15 Jun 2025 00:00:49 +0000
Files and hashes: 1: gi9abAuVZH8HA1DmUk4SIPukf6M.crl (hash: J5BCs6cSN4CYIVUII8nh2fUjece8y1ywOaFZ9wgFAqA=)
2: qDh2JY1h_xNgvgx5Db5sVmUy5ks.roa (hash: I1r2aL4TOC/MGm5ShRW+1jSA/7hy7A6Iss+iJbXJ1A8=)
3: rj4zNee9qFUnSWdRyXBl1w5hL7U.roa (hash: ura4XN26mFPNxngI443E4Cbcpg3UZiyC6cycpOaLYgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:2f:ee:d3:c1:d7:0a:71:ea:af:3c:b2:fe:76:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=822f5a6c0b95647f070350e6524e1220fba47fa3
Validity
Not Before: Jun 14 00:00:49 2025 GMT
Not After : Jun 15 00:00:49 2025 GMT
Subject: CN=8b14b372befefe3ed6519d786bec0ec2d226ec00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:a0:bb:19:6c:e8:e6:00:a4:f9:98:16:07:
be:1d:80:13:78:d7:8c:a9:d5:a1:59:26:2d:19:79:
92:de:dd:19:89:ee:42:9c:0f:2c:a8:7d:2e:d0:b5:
01:1d:0a:4e:9a:94:e5:52:f2:16:0a:9f:4e:f1:83:
1f:34:fa:fd:1a:ef:a7:0f:85:60:b3:e6:39:06:94:
62:83:06:9b:9d:50:1a:70:f9:4c:66:22:3a:57:4a:
3a:5d:6e:6e:b2:c1:28:35:38:76:9e:cc:c8:3e:5a:
c5:93:d4:3c:d4:7b:3e:c1:6a:1f:4f:b3:ea:c6:ad:
da:d7:5f:ee:45:68:d9:48:94:25:2f:89:c4:b9:01:
25:ed:2c:e3:18:ab:61:9d:6d:68:e6:f9:e8:03:cf:
70:a8:47:5e:fa:12:18:9e:74:bf:cf:61:90:59:ba:
40:1b:ef:28:6c:ab:35:69:42:6d:75:c1:63:81:43:
50:af:1a:61:33:31:55:48:4c:dc:6c:a6:b5:df:ac:
89:0a:67:cd:00:af:70:e4:02:cc:43:ed:35:19:3a:
a7:8d:08:f6:c6:bb:21:66:ce:49:96:fd:39:f4:00:
b9:e6:61:32:50:9f:32:cf:53:6e:a3:d8:a7:ec:4b:
e6:3e:79:7d:8c:46:69:1a:82:10:75:b3:42:39:11:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:14:B3:72:BE:FE:FE:3E:D6:51:9D:78:6B:EC:0E:C2:D2:26:EC:00
X509v3 Authority Key Identifier:
keyid:82:2F:5A:6C:0B:95:64:7F:07:03:50:E6:52:4E:12:20:FB:A4:7F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gi9abAuVZH8HA1DmUk4SIPukf6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5df262-2e0b-4fb7-b0d3-5d0e09a0204f/1/gi9abAuVZH8HA1DmUk4SIPukf6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cc:80:35:ff:78:bd:94:2a:7e:5c:98:ff:9b:ed:e3:f0:d4:
86:e4:df:82:d1:40:97:cb:b0:47:73:9f:6d:ee:d0:f9:b4:66:
a8:af:51:d9:46:30:9d:4f:a5:68:60:5a:b6:05:fb:61:ff:b2:
9e:a1:4f:af:83:20:f6:0d:a2:6a:b1:91:f6:a2:de:39:d4:c3:
95:bd:5b:0b:d1:f0:d5:41:a7:de:e6:cb:a5:56:91:90:f9:41:
08:7c:e3:58:98:a8:c0:54:04:81:63:ef:c5:3a:e6:e8:b0:02:
ff:d6:30:7b:ce:c4:07:30:66:41:7c:61:dd:45:93:59:95:58:
5e:3b:00:ef:e8:99:54:3f:be:3b:8a:c7:4f:ea:67:b7:f1:6e:
b0:34:fd:31:f3:21:11:1a:3a:bb:fb:e8:93:6e:aa:54:d1:ad:
9d:e5:db:db:fa:24:1c:a8:67:28:08:08:42:55:95:1d:c2:f0:
b6:05:65:35:8a:a3:89:f5:bf:f4:f8:bc:df:b5:d6:81:7b:a0:
17:f6:fe:a4:c4:a0:fb:8e:d6:60:91:09:c5:7f:9f:d5:40:4a:
bc:2c:43:83:9a:8f:44:6a:d0:bf:5c:b7:2e:cd:db:73:ce:2d:
80:fe:af:d9:f0:e0:c6:7f:ee:ac:54:ba:42:64:b6:68:02:70:
ca:9b:b1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:41 2025 by rpki-client