Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: RGiV54gPk0iOLboY87yZusByhUIE2hajt1knlEGpC6U=
Subject key identifier: 3F:D4:F1:C0:A1:E2:DC:6A:66:16:85:0E:D3:9F:81:76:22:29:33:39
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 01976884CF394DD36A8A658242E5E12B4436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 09:00:23 +0000
Manifest this update: Fri 13 Jun 2025 09:00:23 +0000
Manifest next update: Sat 14 Jun 2025 09:00:23 +0000
Files and hashes: 1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=)
2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=)
3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: 1C7Mwnxl4lJ+ivj5jYX5sxnaVa8FJWAdioMiWCg2REY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:cf:39:4d:d3:6a:8a:65:82:42:e5:e1:2b:44:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Jun 13 09:00:23 2025 GMT
Not After : Jun 14 09:00:23 2025 GMT
Subject: CN=3fd4f1c0a1e2dc6a6616850ed39f817622293339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:53:e9:50:aa:f4:b6:04:aa:0a:28:97:99:
97:83:b9:17:e6:e7:64:56:74:c2:2e:47:8a:2c:13:
ce:f6:7b:f8:89:a6:4f:2a:8a:5a:7a:12:f0:71:cf:
d2:ab:0d:47:33:8f:9b:64:4f:fe:2a:aa:65:bb:65:
2c:7f:8a:63:38:91:2f:bc:bd:f0:fe:1d:32:f4:ee:
56:5d:5a:af:34:42:36:ea:5d:13:a3:0f:d9:41:1c:
ad:0a:a9:39:44:96:6b:68:f8:c2:d7:24:56:d6:14:
fb:1e:58:53:77:61:17:27:ed:f4:f0:63:b6:fb:3c:
9f:ca:14:26:24:78:5b:23:06:58:94:67:c6:a4:9e:
65:26:04:8c:d5:d0:24:b1:a8:3b:5b:2e:a8:f7:ed:
98:b9:68:f1:83:76:dc:d7:db:27:bf:77:6e:97:bf:
1f:42:78:8e:fe:1b:ea:ee:6a:63:e4:e9:9b:78:2b:
5e:42:1b:16:2c:93:0a:55:34:16:84:53:7b:5a:bb:
42:48:7f:f0:d0:c2:ca:f6:ed:02:89:bb:94:5f:70:
90:39:a0:e5:4d:0c:28:91:f4:1e:09:bd:b6:77:e3:
ff:da:a4:a7:b1:2d:a3:38:1e:45:cf:4f:7f:8a:a1:
dd:0e:59:af:90:a7:67:83:e1:c7:10:83:db:98:4b:
72:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D4:F1:C0:A1:E2:DC:6A:66:16:85:0E:D3:9F:81:76:22:29:33:39
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:66:d4:56:36:0c:91:ed:37:30:75:5e:ad:ef:66:e2:ca:b0:
2f:7f:e0:34:c6:34:02:16:23:00:a6:6f:73:d0:e8:34:40:ae:
4a:5c:12:e3:b9:20:11:2f:7f:6b:57:51:3e:fe:6d:77:d0:94:
b9:70:df:74:c4:5b:77:f6:96:d9:0e:43:e0:7a:e0:a9:47:1f:
6c:55:37:a1:06:18:b3:08:c6:a4:d0:05:5b:81:46:e6:6b:77:
7a:b3:ba:c2:bd:9a:86:0f:56:cc:c3:69:16:8e:7d:10:3f:9e:
7c:ed:9f:65:ba:97:c6:4b:b5:9b:e1:c0:7e:cc:a1:88:b2:59:
b7:f4:23:2a:5a:65:36:09:6e:7d:b0:3d:35:55:1d:8f:8a:fc:
41:f9:da:ae:4d:8b:7d:31:87:93:a3:ab:34:63:ea:f7:8f:c7:
93:26:77:a1:53:6f:fb:da:b1:62:e5:98:4c:43:14:a6:c6:84:
1a:92:f9:ce:65:66:66:1c:c9:51:92:ed:8d:5d:f1:39:04:21:
67:0a:97:2e:ef:ff:7b:65:c4:f1:bc:a7:40:4c:07:84:69:71:
65:ef:8d:87:99:83:d2:5f:fa:1c:76:8a:ab:7f:4f:54:95:bc:
bc:7b:e7:8d:00:97:a6:9a:9a:4f:32:0c:9f:97:23:7d:86:49:
e4:e5:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:57 2025 by rpki-client