Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File: sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier: ZUMoYvezr8WqvJamWYDf2XzKpORsIZ8e7meRO8V7goI=
Subject key identifier: 10:30:C3:46:E2:63:3C:E6:6D:CB:4E:DF:FF:CB:D8:97:47:04:80:D1
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer: /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial: 0197832095781E4B984E80DE641A8E91DCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number: 159E
Signing time: Wed 18 Jun 2025 13:00:40 +0000
Manifest this update: Wed 18 Jun 2025 13:00:40 +0000
Manifest next update: Thu 19 Jun 2025 13:00:40 +0000
Files and hashes: 1: 58fbPOFYsvSvpunLR9rNMDG4HkA.roa (hash: ReuETm25IMaI+/tSCMwYNSlxDNomkPKvSSM3DvSw9hM=)
2: 5bh70NDw7zp64NXJ_51b90SAuu4.roa (hash: 4ywVwFnAjMHvhsAsLPg1qryIBj6T959YwjsSeW0RTBc=)
3: bmIFkmc46wZv6ewcgJwZwj1cvlM.roa (hash: t+xCiPV9KaRJxGAZeXjb1sny70g09pMUXGWJ9TkswqI=)
4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: 8nfIH7dZ0iNtSr8nnwrkZk2zYmUw5e00CvjmasCue1Q=)
5: uQ91Nqx0wJ0hnu7-KkzAQL_V-cs.roa (hash: /lYRhYLBo69SAVI30wQHJh+caFfwu0pd662lIZiJCC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:20:95:78:1e:4b:98:4e:80:de:64:1a:8e:91:dc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Validity
Not Before: Jun 18 13:00:40 2025 GMT
Not After : Jun 19 13:00:40 2025 GMT
Subject: CN=1030c346e2633ce66dcb4edfffcbd897470480d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d2:46:8d:5b:11:b0:42:36:51:1b:74:eb:d0:
69:bf:20:c6:fa:e8:50:dd:eb:11:47:56:89:dd:f6:
32:d9:0e:6e:b1:a6:a5:3a:40:5f:f0:c1:99:87:4c:
44:61:4d:5e:8c:db:e3:c2:60:3c:87:74:84:34:8d:
8a:7e:de:76:7f:f8:d4:eb:96:da:50:ff:61:96:7a:
4a:95:2e:d9:05:fd:78:14:5d:bf:49:dd:b7:36:6e:
37:8e:46:3c:00:f1:35:08:04:3c:87:28:df:01:2c:
29:34:38:42:5d:66:c9:91:7e:bc:09:0c:c9:72:68:
5e:36:2d:e7:90:78:07:70:c8:e4:79:a2:e6:ab:76:
00:0f:db:b0:8e:45:f8:e7:27:36:5c:5a:fd:d5:ed:
38:73:2d:e2:4e:ce:53:fe:f0:39:7a:74:75:09:e0:
89:20:fd:24:5a:13:e1:c8:52:98:ed:77:44:91:41:
53:a1:cb:ef:24:8f:61:1b:b0:1e:f1:f7:28:e8:57:
58:a5:a6:86:b6:06:b5:21:60:21:1b:bb:3f:c6:bf:
b7:aa:70:52:58:dc:40:e2:41:6c:ad:76:71:e0:62:
75:38:1f:69:a7:96:0f:60:2b:57:3b:11:01:13:b4:
f6:7f:44:14:8a:b3:66:f0:95:45:48:81:ad:80:d0:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:30:C3:46:E2:63:3C:E6:6D:CB:4E:DF:FF:CB:D8:97:47:04:80:D1
X509v3 Authority Key Identifier:
keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c0:71:8b:d5:bb:70:75:e0:91:0d:bd:b8:73:89:3f:0f:7a:
02:20:30:a3:53:d2:ab:8f:10:57:2b:2e:44:6d:ae:7e:9a:f0:
cf:e3:fb:28:10:86:63:0d:55:ab:0c:11:f1:d7:a0:c7:2b:ae:
c0:37:15:64:5e:4b:08:1a:e1:bb:78:70:fc:c0:69:b4:9b:6a:
b7:b0:b8:31:b2:c3:52:c5:85:64:7b:eb:1b:7b:f0:48:0e:8c:
d4:f3:81:c7:03:9b:45:48:14:f3:be:91:af:dc:b9:46:d3:c5:
f1:f6:6f:9e:05:07:fe:01:b5:bd:c2:58:87:76:ad:2a:94:2f:
47:77:21:16:a3:3c:2b:d2:36:42:ca:27:17:e9:e1:8a:78:78:
76:95:14:30:0c:7e:e7:97:63:cf:26:ed:7e:bc:7f:2c:35:f3:
c0:8a:65:39:8b:3a:cb:95:7a:34:8b:9f:09:0b:4b:6b:c2:96:
2f:67:5f:9e:6b:d6:38:bd:6c:92:44:ee:8b:6f:bd:48:e8:7e:
75:d8:70:d7:4a:02:1e:61:24:33:bf:54:b4:01:98:56:d5:8d:
a8:78:15:f9:e6:92:ca:c4:8c:97:d1:df:6f:13:1f:6c:bb:6f:
3d:e4:24:ed:45:f8:7b:77:55:c1:02:83:7d:d7:53:1e:06:8f:
71:16:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:05:41 2025 by rpki-client