Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
File: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft (raw, json)
Hash identifier: MhsENKWJPAxaJlBFRxHVLk6k2ZCel2X8OGQgf4Cjp8E=
Subject key identifier: 82:FA:1D:A7:B0:FA:19:40:F7:D0:A0:1C:46:F5:18:31:B3:27:89:49
Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
Certificate issuer: /CN=02c4df5b74d99f9796718435c3afd2220cb56751
Certificate serial: 0197B7EA829DE50DA6341043A75B05E904FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
Manifest number: 0331
Signing time: Sat 28 Jun 2025 19:01:28 +0000
Manifest this update: Sat 28 Jun 2025 19:01:28 +0000
Manifest next update: Sun 29 Jun 2025 19:01:28 +0000
Files and hashes: 1: AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl (hash: Ieiw8H6T7AV3RhGIt8MWbQhJn3n7dZZxh4x0HVdXzqg=)
2: GakqseBs9N17ifC6fb7xtN9jmGk.roa (hash: JKMq9liNBrNVPApT7HHCvfwbA7KUxUp/4G8fH+nrAPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:82:9d:e5:0d:a6:34:10:43:a7:5b:05:e9:04:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751
Validity
Not Before: Jun 28 19:01:28 2025 GMT
Not After : Jun 29 19:01:28 2025 GMT
Subject: CN=82fa1da7b0fa1940f7d0a01c46f51831b3278949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:92:0f:97:0d:a8:37:3e:bc:a8:7e:24:6a:fd:
06:72:5c:38:4a:99:12:24:22:bb:0d:1f:a7:9c:36:
87:74:53:e9:66:1a:96:b7:9f:71:26:1f:5c:46:6a:
72:46:15:21:e9:00:31:de:f9:41:1a:40:20:f5:35:
f2:ea:0f:8f:d9:2d:83:d1:0f:20:1a:8e:0f:c7:27:
57:2e:d5:20:59:f6:d8:7e:28:8b:f2:a7:9f:a6:e1:
5c:ed:8f:0e:ba:4a:cb:81:4a:10:b7:34:e8:6b:99:
a1:d0:bb:32:8e:ae:09:05:cd:d6:5c:46:83:3f:39:
61:87:e3:09:fd:96:b2:bb:32:f9:b0:0d:11:76:f9:
68:08:f5:e8:3d:94:2e:67:7e:fb:18:46:24:89:bd:
98:e7:c1:33:aa:e1:b0:f4:be:83:90:40:c5:43:38:
6d:8d:1f:e8:1a:4f:01:ee:03:f9:87:55:cc:e6:5f:
b0:34:bd:a3:44:ed:bc:cf:24:88:73:e9:d9:b6:7e:
d2:65:ab:c9:4c:fe:05:9c:fa:10:20:3a:a3:f1:ef:
de:19:fd:6f:3c:33:25:de:2a:61:d5:68:ea:01:f8:
7b:66:61:97:7c:bf:3e:b1:bd:8f:0a:57:fe:95:ea:
56:7a:dd:80:ad:56:e0:e6:68:10:84:33:a1:fa:0c:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FA:1D:A7:B0:FA:19:40:F7:D0:A0:1C:46:F5:18:31:B3:27:89:49
X509v3 Authority Key Identifier:
keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:da:e4:ab:08:20:f3:c7:d7:d3:6b:73:74:78:ba:60:5f:3a:
73:0b:00:45:44:e1:8c:2f:61:78:06:55:39:7e:a7:41:21:69:
0c:be:32:bd:7b:e1:44:0a:b7:47:4e:f9:1b:74:b0:e0:35:3d:
74:5b:4f:60:d3:b9:01:2e:6e:44:89:00:92:e2:c6:7a:d4:b8:
c3:14:31:83:52:b1:34:ca:d7:ea:c5:40:51:05:fa:37:e6:cb:
d5:86:29:11:0c:fa:08:fd:6f:b8:d5:99:14:44:77:73:c2:74:
7b:a0:16:83:e4:07:14:71:89:0f:54:bf:58:e9:04:17:96:2b:
d3:2d:ad:b3:d2:9c:f1:44:ed:fd:f7:1c:b2:8f:dd:81:82:bf:
60:63:cd:a1:11:ce:4b:57:c9:14:48:f9:7d:cb:9f:ac:df:c6:
dd:29:d7:64:41:10:51:ca:7f:1d:25:b8:49:72:27:2c:8f:fb:
00:2a:aa:65:ad:8a:16:2e:89:30:fe:0a:57:fc:86:53:73:04:
43:a6:1f:22:08:3f:02:a4:d3:8c:35:88:f5:4f:2c:d3:5d:f4:
bf:c7:f9:77:b2:9d:7b:79:b9:70:d6:bf:29:5d:10:a6:95:2a:
6a:a7:e7:f1:b7:1d:ce:36:6c:38:3f:75:2a:64:0e:25:db:22:
db:bf:9a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:42 2025 by rpki-client