Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: 5kZoD4MhR4xeP+eHVrWoVFoYucapG40tg/FUBmAm4rQ=
Subject key identifier: 3B:90:E9:41:66:DD:17:72:26:48:03:4B:83:24:6E:1C:59:8F:79:1F
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 01976D3DAFD200601FE612FE07FCC8DB275E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 07:00:48 +0000
Manifest this update: Sat 14 Jun 2025 07:00:48 +0000
Manifest next update: Sun 15 Jun 2025 07:00:48 +0000
Files and hashes: 1: 963pl4kMqERhlH5zQNINJ9q-oB4.roa (hash: BOAkYmCmSJL+jWIjxEb3nC4tx8Y5C6plreJ8j+irwHk=)
2: 9nSaJxHrbQ3QEW5mfZiYPpI-ugo.roa (hash: wy2LzSvu/dsXfdQ3akCDVPoEcY+5eaESxs8S9jGdusU=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: 6jcTtJRbMHJEnMIyoOO67hguZhcDvQ+7TsXPsaN2jPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:af:d2:00:60:1f:e6:12:fe:07:fc:c8:db:27:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: Jun 14 07:00:48 2025 GMT
Not After : Jun 15 07:00:48 2025 GMT
Subject: CN=3b90e94166dd17722648034b83246e1c598f791f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:8b:43:e2:c4:d5:3c:04:7d:42:d4:c9:ec:
b8:98:7e:e5:ae:de:7c:4d:30:3b:a1:6e:35:d5:9d:
e2:b3:42:29:db:e2:4c:c5:c1:a3:ce:f1:b1:11:86:
d8:ed:ba:c9:ba:d5:ae:4f:37:b8:ec:89:86:9f:d4:
c0:79:89:9d:23:01:9e:08:7a:75:31:a7:cd:27:c9:
52:25:f8:43:53:7d:b8:9d:c5:83:94:3a:e1:e9:16:
37:1a:29:17:7d:a2:75:8b:65:bf:d8:3e:1a:12:df:
6a:36:ab:93:c0:9a:83:ab:58:42:03:62:e6:5e:8b:
e2:b7:7d:6f:bc:6e:95:54:62:14:5e:e0:0b:76:40:
ee:5c:df:6b:48:d5:1c:3c:50:0f:d0:6b:cb:6c:bc:
69:ad:09:d2:ad:ce:d4:fe:4a:c9:c8:4e:a2:ba:03:
58:e7:15:19:0f:63:8e:ec:4e:8c:4f:69:c5:d8:2c:
6b:3e:99:59:36:18:bc:5e:14:fa:44:87:63:ce:9e:
f8:f3:82:3f:76:f4:e9:7c:e1:e8:09:b1:f3:10:71:
0c:e5:76:6f:b7:c2:ae:96:61:2c:8c:31:4c:82:f0:
8f:3a:bb:e4:e2:3b:dc:5f:08:62:bf:3a:72:1b:9a:
a5:ad:01:88:a3:f1:1c:91:4d:fa:03:3e:35:3d:bd:
1d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:90:E9:41:66:DD:17:72:26:48:03:4B:83:24:6E:1C:59:8F:79:1F
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bb:64:66:b4:70:91:98:2c:49:9a:04:86:72:4d:44:12:f9:
2d:3d:b5:d5:7d:9f:c2:0b:0b:65:83:69:f8:9d:26:c5:6e:24:
05:77:df:44:48:7f:c3:d0:5e:3c:39:9f:91:7f:eb:1f:a7:12:
35:1d:d6:cb:58:50:52:ac:27:43:23:4d:c3:99:ee:fe:b6:7c:
8d:4c:73:85:de:b4:be:36:4c:8e:91:b4:72:bf:40:92:f0:cb:
50:19:a2:90:f2:4d:33:26:e8:17:ab:8e:8f:a9:eb:1a:75:b7:
ba:a9:c6:d1:e9:1a:cf:8e:ee:00:fb:7f:9d:07:51:80:8b:eb:
36:16:64:1d:1b:3f:e5:b4:1f:80:fc:fb:9c:47:b6:79:6e:aa:
f5:bf:d1:da:94:a7:01:22:64:8f:7a:30:e3:39:ca:bd:94:2a:
7b:6a:1a:57:7e:ef:c9:29:76:43:b7:2f:17:4f:e3:c0:38:21:
43:be:47:4b:35:ec:62:ce:27:97:07:d0:48:49:95:f6:c0:53:
b4:d7:46:a5:d9:36:f6:1b:86:fd:a0:e5:52:63:a8:10:b4:24:
87:32:99:0a:12:07:36:bf:2e:bd:f4:de:ae:3a:f5:7a:2d:fb:
3b:fc:7a:87:10:df:45:c7:bd:fa:d7:61:44:7c:f1:03:62:2d:
84:ac:79:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:06 2025 by rpki-client