Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: DZh0QAKwLtGkO+inFZeXIUxcgKeUvBb22//xf93mWaQ=
Subject key identifier: 65:E9:83:CB:D9:1E:81:C7:BA:74:2E:A9:B9:B4:9C:64:B8:64:2E:EE
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 0197B745323E1383116669A9D40B3AA53E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 16:00:54 +0000
Manifest this update: Sat 28 Jun 2025 16:00:54 +0000
Manifest next update: Sun 29 Jun 2025 16:00:54 +0000
Files and hashes: 1: 0fxrFgaOEJg9dbqq-7NyccGKfo8.roa (hash: PianfnGVaMrVPowuDRPfsiFVI9vqBZ2hff1ALtVypRc=)
2: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: 2+4w6sHHhPqY/LQjW14RuTt8ghEUk4sW1QjfqsQq2Mk=)
3: wlvSN6qng0SspfaRqRgU0QaR_is.roa (hash: dvmYB11eIHXfV35gEc7/J0+3NCXH6IER/8ZhOiLqTT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:32:3e:13:83:11:66:69:a9:d4:0b:3a:a5:3e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Jun 28 16:00:54 2025 GMT
Not After : Jun 29 16:00:54 2025 GMT
Subject: CN=65e983cbd91e81c7ba742ea9b9b49c64b8642eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:29:ed:58:30:94:4a:30:21:77:19:cb:5f:
7a:8f:60:01:40:a6:03:24:35:50:99:41:cd:42:89:
89:64:b5:67:aa:62:15:dc:30:f3:d9:fd:f4:38:8d:
1d:48:db:f4:a4:d7:68:68:c9:d7:59:a2:b1:21:40:
e4:d5:5d:f7:18:ee:05:e5:8b:ae:98:1d:2c:4e:49:
46:6b:38:87:b4:c9:6c:d1:d0:28:9c:e1:52:4a:ce:
56:c8:0d:40:87:fe:e0:cf:70:83:10:6b:fc:8e:cc:
7b:e6:f4:8a:12:cf:de:ae:37:a7:d3:37:f4:c5:a5:
48:04:8c:7c:58:30:0e:49:9d:b9:da:e5:39:6d:b8:
8a:19:0d:a6:e3:74:51:df:f2:ab:34:5e:1f:2b:4f:
8a:90:d7:6a:bc:ff:7f:7c:10:68:3e:63:9c:d4:e3:
74:c9:73:25:06:7f:b5:ef:85:89:90:62:1d:b2:fb:
78:35:8e:05:4e:b6:72:0f:dd:7e:7d:6a:31:28:52:
d2:c6:b6:fb:13:0f:95:f3:a9:6b:79:c8:cc:cf:e6:
ba:54:8b:32:fc:6b:64:7f:d1:de:7c:84:48:13:7b:
1d:64:a7:ac:b3:a8:0a:51:7e:ca:31:25:e0:59:8b:
3f:f5:55:00:26:be:ec:b5:4c:df:4d:0a:31:44:7a:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E9:83:CB:D9:1E:81:C7:BA:74:2E:A9:B9:B4:9C:64:B8:64:2E:EE
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0d:e8:20:3d:8c:ea:71:1a:0c:53:53:35:b3:67:d7:ac:b4:
5f:a2:1d:88:5f:2c:56:6c:88:6a:6a:1c:d8:b3:82:54:25:a9:
8a:4d:6c:74:b5:1a:ae:1f:3a:32:ba:91:7f:97:4c:04:41:3f:
8f:9b:27:30:51:01:de:03:77:76:68:31:14:ba:9c:a8:f3:47:
a4:fd:8f:da:bc:da:80:e7:b5:84:fe:4d:ea:2b:c9:2a:68:19:
c5:e3:f1:50:58:da:5b:1e:13:f4:85:d1:b1:b3:a4:ca:de:1d:
b1:a5:a4:0f:96:31:78:b7:d9:3c:af:f0:3b:db:2b:57:01:0e:
0e:03:2e:aa:03:4a:af:9e:fe:d7:be:67:de:73:f6:66:b5:6a:
8b:a3:3c:eb:b5:cf:7a:e6:c6:a9:89:52:0f:bc:8b:75:5b:fb:
83:be:9a:da:1f:18:0f:07:8e:c8:f2:b3:e1:62:f2:02:81:02:
7e:92:ed:66:75:be:54:fa:47:be:ff:71:e1:c4:8d:7d:1c:7a:
e0:c3:80:5e:02:28:05:f7:72:f8:69:ec:55:4c:8a:e2:77:dc:
43:74:e2:ae:ae:2a:09:6c:83:ac:e7:a8:be:df:06:ed:4b:6c:
a1:1b:fb:4b:80:45:21:b3:1b:6c:b4:da:79:a9:21:96:b6:7b:
d7:93:6b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:31 2025 by rpki-client