Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: G3HWZ9fs2SqfAcxEe2HZsCTr4retcOFtwaKxlcs8iRY=
Subject key identifier: 52:6A:69:2B:BA:CF:FE:55:DB:D2:FC:83:B2:93:BE:A8:D2:8E:B0:15
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 0197B96B0AB6398F21442A2732E549C3218A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 010C
Signing time: Sun 29 Jun 2025 02:01:29 +0000
Manifest this update: Sun 29 Jun 2025 02:01:29 +0000
Manifest next update: Mon 30 Jun 2025 02:01:29 +0000
Files and hashes: 1: SFufe6GxPr18jUulsobsVcJNabA.roa (hash: BS7brnhU1ziQ1RkRsO80taFEBA/xtbs+mzY1lj67wlg=)
2: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: QDc67+/+94c8Uu+Qnl0jql89iqyj5aZBFruc87f8H98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:0a:b6:39:8f:21:44:2a:27:32:e5:49:c3:21:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Jun 29 02:01:29 2025 GMT
Not After : Jun 30 02:01:29 2025 GMT
Subject: CN=526a692bbacffe55dbd2fc83b293bea8d28eb015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c4:c3:71:7a:db:a1:73:1e:6a:71:f7:16:3f:
f8:8e:25:c5:cd:c5:55:58:7a:11:1f:97:ef:b1:79:
63:4b:f9:24:f1:c2:65:b8:82:1c:09:41:d1:82:47:
2f:12:35:a4:02:06:3c:f6:f4:8a:dc:84:6c:08:71:
e0:26:35:84:24:7a:76:26:6f:3e:3a:0e:ba:30:80:
4e:67:df:63:09:60:24:19:b2:68:7b:18:d7:8c:68:
8e:68:58:cc:e7:7c:bc:2c:bf:57:cd:c1:50:29:c0:
85:18:a3:28:41:f2:5d:18:5c:12:68:e3:61:b4:fc:
17:dd:3f:f6:88:d7:8d:ed:34:c2:65:59:f5:b5:be:
2b:8c:45:42:42:60:59:c1:fd:9a:c1:a5:5e:8d:fb:
ad:1f:76:17:76:32:7d:38:bb:6f:de:f9:9c:2e:37:
ba:22:45:79:3a:8b:ab:71:b1:f1:8a:2b:74:fd:a3:
3a:ba:5e:2e:53:32:f7:92:06:b7:6c:c4:90:f4:d4:
81:98:06:fa:6a:88:30:47:f3:ca:72:30:af:d5:23:
a7:c4:ee:9e:69:8a:08:58:7e:fa:af:26:c9:ca:45:
9c:18:63:e6:54:fe:7a:2e:73:9b:33:2f:46:a5:26:
95:1d:b2:d4:52:a6:c8:90:51:82:76:5c:0c:66:c6:
29:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6A:69:2B:BA:CF:FE:55:DB:D2:FC:83:B2:93:BE:A8:D2:8E:B0:15
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cb:ea:18:cd:d3:c3:df:95:b4:72:26:0c:68:d6:f5:09:b2:
e8:da:07:28:e0:ee:34:4b:ea:92:c4:a2:f2:cd:b0:b1:68:da:
b7:7e:f1:75:99:9f:76:42:3e:3b:97:71:da:ec:ed:12:0f:13:
d9:65:a1:c4:3a:bc:96:c7:94:e7:1f:87:2d:68:4e:44:6d:1b:
40:4b:a9:4f:11:7d:53:94:e0:63:e6:f4:dc:58:60:63:47:dc:
26:bd:89:58:87:8d:70:1d:42:e2:35:0e:4b:0c:73:f5:42:8f:
09:1c:c5:aa:d4:05:6e:21:7b:8e:8d:32:62:77:56:30:6d:d5:
e9:47:8d:62:5f:e3:c3:dd:6d:af:00:84:a8:3c:17:2c:a5:fb:
25:6d:6d:72:e1:86:93:12:90:6e:cb:76:f2:f1:35:cb:0a:09:
e2:00:f0:e4:69:86:e0:c9:98:c3:97:2a:28:d4:cb:82:73:cd:
72:1e:66:de:6c:a6:bd:e3:da:8c:64:ae:36:92:18:18:bd:cf:
28:39:10:79:35:fe:97:5a:bf:53:79:75:c8:ed:ee:6e:87:12:
29:16:95:9d:0a:d1:1f:07:ab:dd:6c:7a:2c:41:c5:86:49:e1:
8c:7d:50:58:7d:b5:7f:73:62:f3:01:f6:d9:5a:2b:1b:bd:55:
8c:b6:89:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:04:52 2025 by rpki-client