Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
File: G6UWeIg5f_nKqET1VP-DfP2_lyI.mft (raw, json)
Hash identifier: muowMcdYcbSYwohgoi0NYryxBkBhU32cq/lgTUEhnfU=
Subject key identifier: 3F:2E:C8:41:BB:CE:62:50:28:C3:0B:CB:DC:35:24:3D:85:28:CB:E6
Authority key identifier: 1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
Certificate issuer: /CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Certificate serial: 0197B7457CBA468FFA0030DD8CFC66312CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
Manifest number: 150C
Signing time: Sat 28 Jun 2025 16:01:13 +0000
Manifest this update: Sat 28 Jun 2025 16:01:13 +0000
Manifest next update: Sun 29 Jun 2025 16:01:13 +0000
Files and hashes: 1: 6AZTajZMqZoSwaR7hhqu_H7CdE0.roa (hash: xxeWZ0X7ua9pg1fHVRPX6E4scyCZRjZl/DRkbbQExWc=)
2: Be_FrvCQzJEE8AcZD48fTBBydhc.roa (hash: vmCJB59VLswrUqU073qVTINZ2vimvwz+QJwA8ddtgvQ=)
3: G6UWeIg5f_nKqET1VP-DfP2_lyI.crl (hash: vjdODiygJ4sC9ZosNay46jPn2/6FNXisCdLuZB1APOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7c:ba:46:8f:fa:00:30:dd:8c:fc:66:31:2c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba5167888397ff9caa844f554ff837cfdbf9722
Validity
Not Before: Jun 28 16:01:13 2025 GMT
Not After : Jun 29 16:01:13 2025 GMT
Subject: CN=3f2ec841bbce625028c30bcbdc35243d8528cbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4c:fd:1a:0a:96:ea:fc:9f:2b:0e:ef:56:cf:
48:b9:6c:5f:e5:53:b0:34:af:2a:2d:0b:09:19:4b:
82:86:74:19:4c:98:c1:dc:a7:9a:a9:fe:30:63:8a:
ef:2c:0c:b8:5a:a8:2c:ca:cc:51:af:b7:01:6c:aa:
9c:12:de:fc:9a:c2:b4:65:3c:51:ea:12:c6:17:84:
bf:0b:a7:78:c5:d4:57:ce:e1:c3:7a:3d:66:20:2e:
75:47:b8:5d:6c:e7:f0:17:3a:8f:46:67:d0:75:f3:
84:5f:ee:7d:cf:3d:3c:93:e8:e5:2c:b6:94:34:2a:
3f:08:34:c3:56:56:0d:37:c5:12:a9:fe:d8:82:2c:
a8:f3:0c:e7:0b:1d:e8:90:9e:c9:8d:96:f5:ca:0f:
dc:5c:b9:b2:ad:d7:7a:ea:06:a4:5c:39:fa:6c:e8:
a6:03:dc:01:2f:13:91:17:78:3e:d4:d4:23:ca:2b:
1e:ab:3a:4c:08:f8:9e:ee:4b:fa:df:29:06:a4:b9:
c5:49:36:c9:e9:d6:ef:07:91:14:48:a9:fa:70:15:
09:ff:7c:ee:e0:a1:a9:d3:a7:da:51:5b:31:bd:68:
23:22:ed:63:ae:a4:38:ae:de:57:2f:ef:3d:c7:31:
df:22:a2:d1:fe:69:d0:19:b5:60:cc:ff:fa:30:1b:
67:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2E:C8:41:BB:CE:62:50:28:C3:0B:CB:DC:35:24:3D:85:28:CB:E6
X509v3 Authority Key Identifier:
keyid:1B:A5:16:78:88:39:7F:F9:CA:A8:44:F5:54:FF:83:7C:FD:BF:97:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UWeIg5f_nKqET1VP-DfP2_lyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/066478-b066-4736-ad9f-53f41dfe407f/1/G6UWeIg5f_nKqET1VP-DfP2_lyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:66:67:f0:31:ad:50:45:82:55:56:2c:c0:6d:3d:0c:6e:a1:
2e:79:57:82:56:8a:86:19:0b:d1:5f:25:19:41:65:dd:da:5a:
b3:34:5d:41:aa:89:0c:fb:3a:3f:1b:95:e6:d3:2e:46:6c:f2:
42:3b:33:07:5c:30:ec:3d:6d:cf:31:bf:1d:f5:56:6b:14:a7:
83:5e:c9:47:d3:cb:1b:16:f0:8b:34:28:c0:73:fd:cd:95:af:
7c:5c:e0:72:fa:a7:99:f4:46:91:92:a8:f5:c0:d0:74:63:ce:
3d:38:e6:2e:90:14:ed:64:cb:41:92:ed:3e:7b:27:e6:77:5c:
35:0b:ef:de:b8:7e:49:6f:af:8c:cf:24:44:b7:01:3d:fe:e2:
e6:a5:8f:bb:04:31:0c:2d:60:19:04:69:76:a1:69:18:9e:26:
c8:35:8f:c7:a3:93:37:2a:44:19:39:f1:3a:06:d8:88:c4:c2:
d9:d0:ab:df:41:2d:0a:a9:89:a4:9b:7c:cf:a3:21:3c:c4:6a:
d2:4b:bf:20:b6:6d:ab:d5:dd:36:72:dc:77:53:a4:a1:af:54:
9a:ce:1f:65:68:e7:79:66:6d:10:e6:cf:a7:5e:80:ef:3e:67:
9e:10:52:ea:44:89:0d:20:46:bc:96:b6:ae:1c:d2:1d:7a:10:
60:7a:f2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:09:23 2025 by rpki-client