Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
File: RkVleaUXL8oI4EOwK7ly-3UDrq8.mft (raw, json)
Hash identifier: 1BbFXkhhnnebmK8ofcUkNiTLp7kJR7r5ss8K43wwFiY=
Subject key identifier: FF:49:29:64:42:D9:DB:C9:65:2E:11:37:63:F9:8D:DE:FC:66:3B:1F
Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf
Certificate serial: 0197B77C9D2200F2CD36E423011F77F15C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
Manifest number: 130A
Signing time: Sat 28 Jun 2025 17:01:26 +0000
Manifest this update: Sat 28 Jun 2025 17:01:26 +0000
Manifest next update: Sun 29 Jun 2025 17:01:26 +0000
Files and hashes: 1: 6--mKTLhcJSvHElJeuoDt_lQE_Q.roa (hash: SXpjKVkVSr9zsLSxhubs4WsDg8DBpMmGqFFwLSfPmwo=)
2: RkVleaUXL8oI4EOwK7ly-3UDrq8.crl (hash: JPTlhTKY13Gcjjv8WwJcWjim+Xi0y0SuBr+DsTZx+iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:9d:22:00:f2:cd:36:e4:23:01:1f:77:f1:5c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf
Validity
Not Before: Jun 28 17:01:26 2025 GMT
Not After : Jun 29 17:01:26 2025 GMT
Subject: CN=ff49296442d9dbc9652e113763f98ddefc663b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0f:f4:a3:2a:14:30:4a:bf:56:4f:17:9e:1a:
94:ff:a2:dc:a5:99:09:50:0f:9d:f7:de:88:fb:b8:
3d:63:26:03:00:b6:cc:c7:f2:22:d3:4a:8b:7f:06:
a1:2e:98:9f:6a:ee:76:c1:e3:24:55:f9:c6:ed:90:
ce:b2:a2:c0:b8:75:48:05:4f:6c:90:1c:c0:f0:f8:
2c:31:1f:c6:3f:70:90:4a:8a:76:8e:5a:f3:0f:4f:
c9:12:24:cc:11:87:ce:31:b6:95:b7:0e:ae:70:72:
51:53:c1:bb:ca:e1:92:fd:2a:51:ba:47:89:27:ee:
33:b7:ab:53:f4:c9:02:4d:50:4a:8c:10:a1:d1:2d:
8b:96:60:3d:24:a0:de:9e:62:cd:0a:6f:72:6c:e3:
20:14:e6:f0:69:d1:92:45:b1:31:14:fe:6e:c9:45:
85:8d:d4:f4:d7:fa:f2:fe:03:08:3c:e3:04:97:2b:
d3:aa:00:04:c0:f7:9a:4c:ab:da:9f:27:3d:3a:38:
48:04:37:dd:c3:8b:ca:c1:92:8d:a6:4e:91:ac:38:
30:09:2b:f6:04:98:25:8b:16:b7:84:5b:1e:46:53:
6a:a1:fc:51:65:33:a4:c3:ec:7a:fc:dd:7e:ea:f7:
e5:07:93:72:ff:49:f7:fe:3d:81:b0:5c:26:55:cb:
d9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:49:29:64:42:D9:DB:C9:65:2E:11:37:63:F9:8D:DE:FC:66:3B:1F
X509v3 Authority Key Identifier:
keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:67:86:95:1b:52:f5:17:a9:d0:23:73:56:53:73:cc:e8:79:
6e:f8:45:92:8e:4c:23:e2:96:e7:e0:2a:d6:09:35:b8:f1:a1:
e8:f6:85:10:2f:cf:23:0a:a4:7a:d4:e6:6e:e2:18:ec:c2:17:
b4:78:6a:ad:79:d5:c4:67:eb:2d:d6:14:14:77:d0:4b:50:ae:
8e:9c:a9:e6:43:4e:83:84:41:64:02:74:4c:c2:86:e6:c7:b1:
ff:c0:8a:36:38:48:60:d7:51:0d:b5:6d:64:ef:ec:86:e9:81:
a0:0c:32:7c:e9:ac:80:2c:cf:3c:11:ea:25:6e:fb:12:d1:6e:
db:7e:d4:38:05:f3:21:50:92:c3:eb:aa:66:8d:14:98:dd:7c:
10:e0:6e:f4:8a:5b:18:e3:d0:80:2f:52:05:02:e6:ce:f6:99:
de:44:d8:aa:cc:c0:dd:72:82:38:83:8e:0c:ba:ca:5d:f5:14:
25:6a:24:10:cf:8b:78:97:1a:2c:1d:3a:14:84:4e:59:ff:09:
76:6e:5e:ed:d2:7c:f3:bb:33:c7:99:0a:7b:0f:18:de:49:d9:
68:a0:42:f3:3f:e6:8f:b1:cd:35:7a:eb:39:ca:2c:23:5d:8c:
e8:46:a0:4d:15:71:6d:51:6d:1d:78:e5:e6:11:be:07:ed:31:
89:e2:39:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:52 2025 by rpki-client