Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File: E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier: +sZyNdhscyI3e1u0JkdjY1hFIqtg0K8zFW+ZfZ06++U=
Subject key identifier: 99:9E:07:95:24:2E:7B:56:7C:4C:6D:82:D4:2C:DE:86:93:34:67:FA
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer: /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial: 0197C4CA28DB339A7726584E658808A83C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number: 15BF
Signing time: Tue 01 Jul 2025 07:01:12 +0000
Manifest this update: Tue 01 Jul 2025 07:01:12 +0000
Manifest next update: Wed 02 Jul 2025 07:01:12 +0000
Files and hashes: 1: 8gvSRkioiol7AtclW0w3QDNdRw0.roa (hash: pAF2HpC02c8LxHhm/ivKqiw2U8OBqawxXoZZFN2vllM=)
2: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: RvsVtVzMuEqXyGqpo0VItDgwAxabpJbNIdDOVA7VF1k=)
3: VqJZEln3bccahadYDW0ePgV1gdw.roa (hash: CgpHiF36vVgykBJlcL4O9MnI1LRoTpD9E00VJ7RhYwg=)
4: wQk6P3JazTtfJ7Qbak1iF7pmDzU.roa (hash: yyhyj8+uWZT4ObCsZinsPoUAt/nN+0r3AmItPKtF2y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:ca:28:db:33:9a:77:26:58:4e:65:88:08:a8:3c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
Validity
Not Before: Jul 1 07:01:12 2025 GMT
Not After : Jul 2 07:01:12 2025 GMT
Subject: CN=999e0795242e7b567c4c6d82d42cde86933467fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:a3:bc:9b:d9:0c:ce:33:ec:87:f3:17:3f:
44:fe:09:0f:8b:ae:99:f7:ed:28:43:cd:64:91:61:
55:4e:15:d4:db:63:27:d4:e6:09:54:93:b0:43:a4:
f5:89:20:a2:dc:91:6f:2c:50:9b:f6:c2:4f:fe:59:
17:d6:f6:de:d7:0c:4a:c6:f4:82:61:15:7a:23:79:
ba:3f:f9:af:07:1a:ec:51:40:3b:b5:42:2f:90:00:
a4:63:d4:4d:56:2d:96:23:b1:ed:e0:96:9c:9a:b9:
88:2f:d4:49:49:66:73:70:d5:e4:09:ab:d1:ea:29:
b5:49:04:83:2b:bd:d4:5d:b4:a7:73:d6:62:8c:6b:
5f:50:72:c8:29:c7:a4:53:e9:22:32:3e:2d:c5:3a:
3d:49:ad:90:ca:d6:e5:ad:87:7b:86:05:b6:45:46:
38:c8:79:af:60:d7:58:63:64:06:d9:5d:99:f1:e9:
c0:d9:5f:39:cf:6d:f6:23:94:07:58:a8:c1:ca:eb:
fb:d4:f1:05:c8:49:62:49:9c:7f:e1:6c:84:9d:65:
a7:07:e6:4c:43:e1:7f:9b:e5:85:3a:1d:86:65:c7:
f5:0f:63:a0:d6:0d:b6:57:18:3e:ff:08:2f:7f:67:
8f:a3:24:cd:7b:aa:83:a7:90:e5:2a:06:7a:4d:f6:
ca:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9E:07:95:24:2E:7B:56:7C:4C:6D:82:D4:2C:DE:86:93:34:67:FA
X509v3 Authority Key Identifier:
keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b2:b5:6e:4c:61:6d:f7:46:b1:1b:b1:dd:d4:22:d2:50:56:
d5:07:f0:9d:f2:6e:b6:71:cf:be:25:cc:fd:95:33:57:1d:c0:
fe:79:14:ce:22:fc:56:e8:c2:25:3e:1b:a5:db:5b:88:0d:4d:
7c:ab:13:94:b9:24:87:1a:bf:3f:b7:80:65:08:dc:6b:78:29:
a9:43:cf:a7:80:51:55:5f:6c:db:4c:cd:bc:12:98:92:b3:d2:
30:cd:97:5d:0c:35:c6:f1:58:6b:59:e1:29:fa:e7:c2:32:dc:
9b:10:7f:ce:9e:2e:7c:32:8f:99:73:f6:25:cc:f6:66:27:39:
32:10:d5:2f:15:29:4d:40:ab:02:27:d2:41:83:07:cb:ff:4e:
8b:93:95:27:f2:4f:c8:0e:22:c8:a9:f1:98:68:9f:ed:bb:47:
e7:67:90:12:25:05:14:8a:57:d9:c5:9d:81:74:52:e7:18:19:
8d:b1:25:84:0e:10:8a:ea:ae:b8:50:4c:7c:b0:13:e2:29:d7:
aa:ad:88:0f:b8:86:3c:24:8f:d0:56:d5:8c:6d:10:1a:27:f8:
3b:41:7f:9a:55:c1:13:a1:5e:1b:b1:58:e4:4b:08:56:38:da:
d1:90:97:49:df:3e:38:1d:41:2d:be:dd:05:cb:24:e8:34:19:
57:81:b8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:55:50 2025 by rpki-client