Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: Fo+uETM6hUl8czZ70ImPlMPsGM0BnVolsrxI3aI3XSc=
Subject key identifier: E9:04:50:31:F0:C6:25:17:E8:9E:CA:B5:D1:2D:A9:9C:90:D3:4C:81
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 0197B6A21D59A260B0FD83338DC809188A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:46 +0000
Manifest this update: Sat 28 Jun 2025 13:02:46 +0000
Manifest next update: Sun 29 Jun 2025 13:02:46 +0000
Files and hashes: 1: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: 9wlbKcFVrlwaNgVIXJc/uBKJN49Uimpa5s5IIo+tPT0=)
2: kbK5FbYWiIzhyfd6X1FvOM4LM_M.roa (hash: DqjgdH8s8QL3DkbtV73wzVgdXOipMU6gUg//vr7va8U=)
3: mDUiFexcT2mv6c5O8qGbFAH9b3Y.roa (hash: pPWVkb6MaBCnVH/KCkJGhD1ngVL39J0MeLmVUJGfUTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:1d:59:a2:60:b0:fd:83:33:8d:c8:09:18:8a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Jun 28 13:02:46 2025 GMT
Not After : Jun 29 13:02:46 2025 GMT
Subject: CN=e9045031f0c62517e89ecab5d12da99c90d34c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:84:4e:cb:76:90:fe:53:45:d7:1b:0b:19:
4d:ec:9f:cd:e9:1f:37:87:1f:16:78:e5:c4:36:a3:
66:9f:1f:94:bb:ce:48:16:0f:57:0b:bb:f8:52:89:
ca:1b:f6:f9:f0:4b:9d:4a:4e:68:26:53:08:9f:0e:
c5:75:90:e3:0a:f0:1c:14:17:8f:7b:af:b7:f5:d3:
e6:58:e1:f0:2c:9c:aa:8a:da:b7:81:ab:2b:8d:ab:
f8:ef:3e:49:af:09:8e:b2:9c:af:52:d3:6f:41:15:
a0:48:c0:47:8d:e4:33:3a:e4:31:60:95:7c:60:c0:
f5:75:5f:34:23:08:c2:8e:dd:67:ab:41:3a:aa:ed:
ae:d2:35:81:16:49:8b:b0:3e:0c:ee:98:73:c2:e0:
f8:42:35:55:55:e2:bb:52:85:a5:45:f7:89:3b:f0:
25:9f:6f:f4:a7:04:11:89:ce:7a:97:8b:d8:dc:36:
1d:14:6c:57:39:fe:c6:16:3f:b2:5a:da:82:f3:ed:
b3:96:dc:0a:6a:41:07:0f:29:c4:1f:c9:56:d8:dd:
30:49:de:1f:32:fd:d1:d9:5c:62:cf:2a:48:16:93:
75:28:41:55:30:87:44:50:a5:0f:21:ff:26:69:4a:
e2:02:78:f6:0a:87:12:32:84:99:77:19:df:c1:c2:
b7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:04:50:31:F0:C6:25:17:E8:9E:CA:B5:D1:2D:A9:9C:90:D3:4C:81
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:56:ff:2c:e9:12:14:36:f3:e4:c6:49:f0:90:b7:0b:ec:c5:
36:ac:9d:79:a5:f5:ba:d9:d5:44:a0:ef:f2:7a:9d:f7:2a:ef:
7c:a1:48:4b:59:55:12:20:b4:15:a8:fc:0e:04:84:0b:69:4d:
20:4d:da:b3:01:0b:bb:19:b1:cc:78:f6:f3:de:6b:9c:29:c9:
49:14:69:a6:f4:94:23:59:00:7b:64:02:f3:ac:a3:a6:70:b4:
e2:53:1a:e5:92:2b:8c:1f:b2:57:40:87:c9:2d:42:4c:9e:ba:
53:8b:88:b3:69:50:29:bd:14:4c:65:bc:7a:d1:a3:1b:8c:6b:
7a:09:fc:db:e0:74:9f:b7:77:43:07:55:16:37:ab:2e:01:08:
c1:91:0e:8b:85:77:d4:0c:4e:d8:76:39:34:f7:13:d2:fa:8b:
9a:b6:5b:a9:48:f7:ac:31:1b:3d:3a:7d:6d:7b:30:6e:59:f0:
fa:e4:47:3d:f7:2b:dc:9b:3a:83:77:9d:14:21:ac:a3:d1:0c:
01:f7:72:cc:a3:f6:82:cf:d8:1b:1c:f8:e6:5b:66:4c:d9:c8:
74:81:fd:d2:6b:45:13:64:9e:28:85:d1:cd:00:62:47:96:4a:
3d:a9:97:02:ad:39:2e:1b:d0:29:4e:94:86:c3:73:34:da:34:
19:ae:77:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:37 2025 by rpki-client