Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
File: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft (raw, json)
Hash identifier: nxz/pEbc8mt8Xb6/a4yydE3zhPkrtd+hW5yetPzWyi0=
Subject key identifier: A6:E2:A6:97:3D:87:8C:1F:45:D6:F5:96:86:51:29:DF:02:41:67:69
Authority key identifier: AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
Certificate issuer: /CN=ae7f187c12782fc4d844762235993329c4563a0d
Certificate serial: 0197B96B164D74E641DBD78ED142132604B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
Manifest number: 0BD3
Signing time: Sun 29 Jun 2025 02:01:32 +0000
Manifest this update: Sun 29 Jun 2025 02:01:32 +0000
Manifest next update: Mon 30 Jun 2025 02:01:32 +0000
Files and hashes: 1: ArXM7RJDnDKHHLBE21eoL2lE76c.roa (hash: n1+IHvUCKe6KRZXjngvQSrArHwaB9mNvliy4XN3wMhA=)
2: rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl (hash: DUzHtlNUUCqqudFHce84FLhvdWqVfc3Q+hJil6baIb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:16:4d:74:e6:41:db:d7:8e:d1:42:13:26:04:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f187c12782fc4d844762235993329c4563a0d
Validity
Not Before: Jun 29 02:01:32 2025 GMT
Not After : Jun 30 02:01:32 2025 GMT
Subject: CN=a6e2a6973d878c1f45d6f596865129df02416769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:52:d3:15:45:55:6d:b9:47:c7:03:22:f3:
de:24:6e:99:b8:f2:cf:f8:4d:4b:4b:d9:d2:40:2c:
2d:51:98:77:71:cf:77:3f:92:34:13:92:a0:1d:89:
0a:3a:76:38:54:36:da:8b:1b:59:84:8b:c9:5b:39:
1d:3b:b4:78:63:5b:96:f6:38:cd:7c:d7:ce:1c:b3:
dc:ed:c2:5e:6c:9f:34:68:5a:ab:c3:d0:67:10:f2:
4c:fe:59:6c:bb:81:96:01:81:f9:bd:84:c3:b8:16:
b2:a2:de:08:00:18:6e:df:8e:7f:56:c6:9c:00:46:
1e:2b:84:7d:7c:0d:65:dc:12:c6:b8:fb:7d:c9:79:
42:69:db:b3:1d:56:46:47:c1:a2:07:98:67:13:e9:
a8:d4:b9:ba:20:7b:3e:2a:12:cf:5c:1c:65:74:8f:
c3:8d:41:2c:4a:91:0a:34:86:fa:3e:1a:91:ca:65:
dc:98:d1:4f:79:82:27:81:28:99:c9:fd:40:01:43:
4e:33:54:a6:e4:cc:5d:49:7c:35:c4:32:9d:ea:f8:
aa:7b:e4:45:d6:1a:36:c3:fb:df:e7:53:56:d5:a4:
4a:77:c1:b4:b3:01:0f:a0:29:bd:bb:46:7b:aa:dc:
35:32:75:b4:0e:a6:99:06:97:38:d4:d9:8f:af:d6:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E2:A6:97:3D:87:8C:1F:45:D6:F5:96:86:51:29:DF:02:41:67:69
X509v3 Authority Key Identifier:
keyid:AE:7F:18:7C:12:78:2F:C4:D8:44:76:22:35:99:33:29:C4:56:3A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/c8f647-ed79-42d9-8df6-05877604a01d/1/rn8YfBJ4L8TYRHYiNZkzKcRWOg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:41:5f:b5:af:1c:04:a1:af:fb:f7:78:93:14:e2:48:bf:4a:
36:7a:5f:e6:0f:df:a5:3e:f1:3e:79:d6:22:df:c3:f1:69:e8:
31:58:69:dc:69:b2:df:ea:e5:d0:3a:0a:63:26:cd:61:cc:a2:
48:b6:1f:0b:7a:3f:12:b2:93:26:42:7b:d7:08:97:24:a7:8a:
85:dd:5f:11:a3:15:2d:aa:5c:16:9a:92:56:e3:92:e1:69:12:
e3:b3:bb:05:d1:f6:c1:c6:78:0d:93:a2:6f:0d:d8:3d:ec:83:
6c:6d:29:75:5e:2a:97:65:da:33:64:56:3c:eb:2d:b1:55:6f:
18:77:c2:1f:b9:c7:14:6f:98:c1:03:92:a9:bf:d5:8d:0c:5b:
a2:3e:1e:ee:45:52:17:66:04:9a:28:86:20:16:7e:d6:1f:0a:
28:b5:58:ae:f0:c7:ad:01:0a:53:52:67:5d:ec:f9:ec:e5:21:
9b:ad:aa:bf:12:7d:ac:0c:b1:57:5d:35:1f:ac:7a:6a:f6:1f:
9b:b3:fb:4e:54:f4:f0:4a:f8:de:c1:61:a7:be:58:e2:ff:02:
9c:e0:42:dc:39:41:0e:e1:46:9e:8b:1d:00:d9:5a:fc:82:ef:
38:e2:49:c7:b4:3d:67:40:30:22:af:dd:77:72:5e:43:2c:3c:
9e:e9:ea:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:40:16 2025 by rpki-client