Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
File: aI5xOwfHn5e0fp8DIXaLCUiLegM.mft (raw, json)
Hash identifier: Gwck+ZVl0omycsxz6ZsTWeUN/pilx7DqD7UAougDL1k=
Subject key identifier: 58:AC:E6:A0:E4:87:B6:98:21:A1:D8:AC:DF:95:94:77:1B:7C:CC:E4
Authority key identifier: 68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
Certificate issuer: /CN=688e713b07c79f97b47e9f0321768b09488b7a03
Certificate serial: 01976F9A6AD406AE940887A1E72CF7D54CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 18:01:20 +0000
Manifest this update: Sat 14 Jun 2025 18:01:20 +0000
Manifest next update: Sun 15 Jun 2025 18:01:20 +0000
Files and hashes: 1: aI5xOwfHn5e0fp8DIXaLCUiLegM.crl (hash: 6LOzKxmp2MItcXe/3LRmYjNRZtPInqhAGEZ9dNqaZ+o=)
2: eKt0iVcZQR9s-wKnsCaLnRBWxb0.roa (hash: r1viPmPOoL4VlPRT69GWy0bXH2hVoJ6TviDvQ+6ZdW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:6a:d4:06:ae:94:08:87:a1:e7:2c:f7:d5:4c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688e713b07c79f97b47e9f0321768b09488b7a03
Validity
Not Before: Jun 14 18:01:20 2025 GMT
Not After : Jun 15 18:01:20 2025 GMT
Subject: CN=58ace6a0e487b69821a1d8acdf9594771b7ccce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:89:f4:1a:58:11:ce:14:89:6c:0f:45:3c:88:
97:e3:4b:93:ce:4c:12:3f:f7:f7:db:e6:26:a2:0b:
3b:db:05:68:f3:43:47:f3:38:a0:46:f1:fe:f2:2e:
b4:03:02:13:a5:79:4e:e2:31:3a:14:9b:92:4d:83:
1d:59:e7:4e:ae:3d:a9:bf:19:a0:15:fe:a5:4d:57:
b2:c9:93:0d:67:c2:38:ff:c0:86:ef:54:56:d5:d2:
94:77:a0:53:d6:d4:08:47:1d:2f:cd:07:8a:60:21:
c7:44:ad:9b:b1:16:49:83:17:26:13:fd:1f:3f:70:
19:c7:86:82:e5:b2:94:1e:e5:cd:09:58:13:e0:95:
ef:0c:4b:e4:de:1c:fc:c1:8d:2d:87:a0:dc:f5:ac:
d0:d9:64:bf:25:f8:99:47:0b:77:55:4a:9f:a5:64:
cd:db:14:a2:39:41:5f:46:e2:79:f9:97:06:d7:89:
30:b5:2e:5d:74:e6:11:d9:49:a4:8c:58:e4:02:7d:
59:cf:b2:af:92:62:f7:0e:d1:97:72:3d:49:03:98:
11:18:8c:4a:f1:17:67:00:eb:41:a5:63:ad:95:60:
09:41:7a:e6:92:1e:c3:ff:95:c4:b4:cf:43:67:5a:
9f:04:ad:c1:9a:aa:cc:6a:50:03:01:04:c6:87:51:
ff:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AC:E6:A0:E4:87:B6:98:21:A1:D8:AC:DF:95:94:77:1B:7C:CC:E4
X509v3 Authority Key Identifier:
keyid:68:8E:71:3B:07:C7:9F:97:B4:7E:9F:03:21:76:8B:09:48:8B:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aI5xOwfHn5e0fp8DIXaLCUiLegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0ebeb9-31a8-4550-8396-695f4a927610/1/aI5xOwfHn5e0fp8DIXaLCUiLegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:dd:3b:40:ea:31:fb:e8:b9:37:ae:c3:8f:e0:c3:19:b9:08:
83:4d:07:83:59:9b:d7:50:b4:ed:80:7d:ab:b8:1b:ad:7c:33:
46:b8:52:de:7e:51:1e:2e:32:f4:e7:c6:30:a5:34:7a:62:2c:
e7:bf:ea:53:38:5c:02:d1:b0:5e:63:e3:d5:65:ff:86:28:07:
45:2d:cb:57:75:06:a0:b2:5d:80:c6:72:72:c1:e6:93:fc:f5:
e9:cd:91:a3:59:16:1c:5c:10:ed:72:7a:a7:43:b0:3c:70:ad:
d5:c6:45:cf:82:71:9f:af:1c:f6:1c:21:03:ac:52:2a:5a:e6:
69:2e:7b:f7:5b:01:24:d2:1c:d9:1b:4d:f2:85:7c:85:76:0c:
5b:1f:01:59:28:2e:95:a1:10:4a:d1:ad:1f:e1:5f:2d:2d:0a:
0f:23:40:ce:be:c5:ab:6c:4f:73:4c:91:42:35:1c:5a:d4:1c:
31:53:34:50:07:cd:61:94:fd:b6:ce:9b:e0:17:a2:51:4c:44:
d3:8c:62:43:7c:fb:23:84:52:6a:1b:88:5e:62:8d:c4:a0:18:
05:68:e5:cc:90:fb:b7:e6:23:9f:4b:ab:dc:a4:45:bb:86:53:
f5:ea:18:44:90:db:04:51:9a:5a:23:db:72:8d:64:cd:40:5a:
98:80:ee:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:19:09 2025 by rpki-client