Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
File: sIRyULOncSfffDx7je-MnZGdxLk.mft (raw, json)
Hash identifier: FhE3qtwoNZSOk8sbaYU/5//4A1T0Z7Yjm040kBO+uhk=
Subject key identifier: F3:96:9B:0D:70:A5:AA:6B:F6:FA:E4:3F:74:FA:B5:72:B7:8A:DC:32
Authority key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Certificate issuer: /CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Certificate serial: 0197C15B601117A64B271BE89B6BAF13F188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
Manifest number: 081E
Signing time: Mon 30 Jun 2025 15:01:20 +0000
Manifest this update: Mon 30 Jun 2025 15:01:20 +0000
Manifest next update: Tue 01 Jul 2025 15:01:20 +0000
Files and hashes: 1: BEVOt5Hu7SlSOUV5TBn_pg8-Bq4.roa (hash: nEzdIf15rxzhFQC8rcsKrtOrx8pALRaykpAEEi2uLpo=)
2: sIRyULOncSfffDx7je-MnZGdxLk.crl (hash: flV1AkoStrYMLL5WUvGmS/I5+iE5yiZBKVE7Bp230pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:5b:60:11:17:a6:4b:27:1b:e8:9b:6b:af:13:f1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Validity
Not Before: Jun 30 15:01:20 2025 GMT
Not After : Jul 1 15:01:20 2025 GMT
Subject: CN=f3969b0d70a5aa6bf6fae43f74fab572b78adc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ab:a5:9f:92:1f:f9:ce:0f:84:90:1d:ce:57:
8a:d2:1a:11:33:41:a1:8a:44:e6:bd:3f:93:02:63:
fc:92:6b:99:c1:63:8c:da:83:44:b6:9c:fb:f7:fe:
62:81:8d:f3:c3:b3:40:0d:3b:fa:38:40:2f:11:12:
66:f6:bf:c7:2e:8a:e5:94:b1:65:f3:1f:26:f5:1c:
0f:74:f3:1b:1a:d4:82:31:bd:2f:5b:96:b5:84:a1:
99:1c:9b:d6:f3:11:e9:4f:45:cd:c5:e5:49:d1:29:
04:67:07:3a:d8:a1:d1:f1:c7:25:82:d8:b8:86:32:
8a:4c:97:13:33:2e:1d:80:5f:f0:da:a1:77:f2:8e:
58:11:a1:3e:db:b1:ff:28:fb:e1:d5:6f:06:6c:99:
6a:11:a1:80:cf:9f:31:83:2c:57:4f:75:26:09:20:
5a:67:ac:2d:44:12:f3:a2:10:83:be:42:a7:be:9e:
59:d8:b2:b7:42:6d:55:ae:64:1d:11:d3:e8:34:89:
59:cd:10:00:c0:0b:46:10:2f:51:2c:58:1b:71:55:
0f:8e:26:9a:67:6d:ab:57:c2:49:10:65:04:83:2d:
75:0c:72:3d:b3:0c:2b:b3:7c:0f:ff:d1:c6:66:4e:
57:1d:86:76:e1:49:dd:2f:b6:f3:28:4b:c9:8e:76:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:96:9B:0D:70:A5:AA:6B:F6:FA:E4:3F:74:FA:B5:72:B7:8A:DC:32
X509v3 Authority Key Identifier:
keyid:B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:86:3a:81:2c:5a:6f:8f:82:c0:c0:60:03:24:82:bd:b3:aa:
e0:f1:45:a1:f3:df:bf:0f:33:eb:d1:16:d3:41:e6:db:75:84:
30:46:67:9e:03:66:cc:29:8c:b4:58:e1:3d:c6:d4:ee:f4:dc:
da:54:c4:11:41:36:06:29:fb:f4:c0:55:b0:f5:a0:9c:40:c1:
d8:c5:81:20:aa:98:67:e1:88:79:3d:2b:30:db:b5:ce:a5:8d:
c3:e2:73:a4:6e:0b:f5:d3:85:46:eb:e7:10:60:16:f6:db:c7:
50:a2:6f:7f:e8:51:36:b7:f0:99:5f:88:25:fe:c7:c7:e5:88:
8f:4b:36:f0:26:44:fc:3f:8e:5f:07:5b:88:f0:48:79:d1:56:
68:3e:70:df:e7:9d:8b:ba:d7:16:5d:ec:ad:b4:c1:fe:8e:8a:
3f:2b:fd:a1:66:87:0e:4f:48:d3:c7:95:3d:b8:7c:13:e0:04:
9b:4a:68:49:62:de:f8:90:99:3d:85:20:18:1e:59:8e:71:a1:
87:95:75:8e:93:65:11:7b:eb:de:a0:95:09:4c:f6:6f:9f:b4:
12:15:ba:7e:81:0e:71:86:2a:8f:ea:d2:4b:5b:1e:2f:eb:fb:
6c:a8:4a:0a:34:b2:37:a5:0c:0d:a9:70:02:8d:dc:b7:72:55:
e8:e4:5f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:58:37 2025 by rpki-client