Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File: RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier: wdVCfaJBiRJnwm0rgVLn/FayEfuzDYyEl4zJS2pkRr0=
Subject key identifier: 32:DB:06:65:84:11:A4:4C:E5:C1:E3:D1:6B:64:93:DC:16:3E:3A:94
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial: 0197BA7E6DC6E29EB6499990B20E3DAD97A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number: 14FE
Signing time: Sun 29 Jun 2025 07:02:17 +0000
Manifest this update: Sun 29 Jun 2025 07:02:17 +0000
Manifest next update: Mon 30 Jun 2025 07:02:17 +0000
Files and hashes: 1: 9VQnH-9sd7nGshve_4r1C2nYakY.roa (hash: Z02F3WYNcnzG8yizQnWEGco/cel18dqYBCQHGg9DCTg=)
2: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: Il8KXPZT9EPrOAx6TTSD46xkxHAV8KWiJ1bWqPOq4Sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:6d:c6:e2:9e:b6:49:99:90:b2:0e:3d:ad:97:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Validity
Not Before: Jun 29 07:02:17 2025 GMT
Not After : Jun 30 07:02:17 2025 GMT
Subject: CN=32db06658411a44ce5c1e3d16b6493dc163e3a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:df:61:ef:aa:f2:e9:ad:f2:d3:d7:85:5d:
56:e9:ba:c1:be:32:cf:3b:05:12:0d:b9:80:0b:81:
e3:e1:34:fc:2b:ad:19:53:51:f9:0c:85:9f:7a:4d:
c1:e5:37:26:88:ca:72:66:25:f5:fb:0e:f9:a7:9b:
08:eb:c4:cf:f0:93:72:ae:f8:f9:fd:81:d3:b5:7e:
77:90:0b:7a:d8:86:d0:6a:36:8d:65:20:b9:da:e0:
45:b3:52:c7:70:bf:4e:17:d2:78:91:0f:32:3b:ae:
cb:4c:c7:e3:3a:15:80:d5:5d:52:98:46:21:39:0f:
04:20:6a:d8:50:c7:e6:e2:bb:2a:b7:cf:7e:81:61:
fb:bf:91:e0:dc:d8:6c:c9:1e:d2:71:09:7e:2e:78:
3e:76:7b:13:42:f7:27:8e:ec:64:61:ad:ef:9e:e5:
36:e6:d9:dd:4a:3c:37:c6:f1:5a:d7:f8:1b:6f:dc:
c4:33:e8:06:de:1e:8a:6a:c5:59:ff:1c:46:f3:70:
3d:be:10:89:92:93:43:39:81:b0:b1:01:c0:78:14:
60:9f:d0:af:72:9f:29:c6:69:cd:d6:63:3d:9b:28:
b2:5a:13:5b:08:65:9e:d5:ab:46:68:d3:57:df:ab:
d8:9b:7c:6d:b4:89:ff:f0:fb:98:90:c2:a6:e4:62:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DB:06:65:84:11:A4:4C:E5:C1:E3:D1:6B:64:93:DC:16:3E:3A:94
X509v3 Authority Key Identifier:
keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:db:30:97:b1:c4:0a:4f:7e:93:3d:24:ac:2b:82:20:69:9d:
82:55:82:3f:3f:47:83:3f:40:c1:25:d9:53:24:74:9b:1f:07:
fe:81:1c:17:52:39:dc:50:5b:13:17:2e:80:62:26:af:1e:6f:
97:3b:0f:87:c7:1a:69:72:56:f6:8a:91:70:ab:8a:e3:40:54:
92:bb:4f:29:a3:c9:21:75:cd:e3:49:17:4c:5a:87:f6:ea:4e:
4b:76:03:6f:8b:7f:f5:d2:db:2c:00:e4:71:48:af:02:13:05:
c9:e5:50:12:5f:ef:77:cc:4b:74:f5:1c:19:7d:07:dc:e3:28:
c0:53:c6:52:fd:4a:12:a8:91:c9:f7:60:db:e7:a9:9f:66:dc:
6f:e1:31:9f:0b:44:9d:79:95:3b:8f:c3:92:a8:19:96:07:60:
97:d2:3a:7e:86:6d:4a:f6:36:62:7c:7d:87:07:65:b4:bd:ee:
e1:bf:54:1b:39:33:62:44:cf:aa:10:c8:29:bb:e5:63:ed:18:
1c:78:cc:66:92:6e:48:11:c8:72:4d:c4:18:ab:6b:50:79:cd:
d4:e8:13:43:d5:11:93:92:d6:e4:48:0d:ee:bf:60:2d:88:d0:
47:87:1f:87:b7:30:f2:c6:20:53:b7:08:63:6c:df:9b:2a:6c:
6b:56:a6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:37 2025 by rpki-client