Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: OiOLD3p4Hk4o1S/puXKG3xncREOnixMJNOCscR8UhNo=
Subject key identifier: 5C:51:F0:E7:18:E9:7A:BB:0C:2D:54:B7:91:3A:34:EF:E6:7B:9F:33
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 0197B77C7A538EC59F175693A89DDF98D248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:01:17 +0000
Manifest this update: Sat 28 Jun 2025 17:01:17 +0000
Manifest next update: Sun 29 Jun 2025 17:01:17 +0000
Files and hashes: 1: PtQPD0TcWGGlrHrTKtFaghUGI8Q.roa (hash: M4698F1pGrbgP6S//HBwAHD8jz/cn5NjY1ncpneTdfY=)
2: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: 4IxLI4BdM8yJyNWpMKWDzpL0qQURtJDci7FQA7tWoWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7a:53:8e:c5:9f:17:56:93:a8:9d:df:98:d2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Jun 28 17:01:17 2025 GMT
Not After : Jun 29 17:01:17 2025 GMT
Subject: CN=5c51f0e718e97abb0c2d54b7913a34efe67b9f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:c9:5c:5a:0c:38:35:41:00:f2:6b:84:18:
c7:80:b9:2f:2e:4f:9d:f4:dc:47:1b:50:af:7f:36:
06:a3:3f:f9:92:bc:0d:ad:21:21:ec:78:7f:2c:ba:
27:93:fa:a2:1b:f5:c0:68:06:e0:2d:23:71:45:6a:
e4:8e:92:66:73:1f:69:45:58:7a:f7:c7:ac:c1:ac:
56:d1:b3:19:81:f8:0f:d3:2f:0f:da:9a:b4:1a:44:
1c:b5:5b:6b:54:8f:b8:30:77:5e:1e:f6:ae:67:11:
d2:9b:be:c9:f6:6b:02:44:bb:58:9e:e9:dc:cb:53:
e2:dd:c8:1b:9e:e0:21:ee:b8:32:4e:bd:5d:0b:30:
19:47:a3:fc:0d:46:d4:0c:95:b1:cf:5d:08:7b:60:
fb:07:24:0e:62:95:08:74:f6:5c:ba:69:ba:6e:13:
91:81:2c:50:41:49:f3:dd:73:35:c8:6f:ce:03:66:
5b:7a:c0:7e:3d:d5:d8:41:22:6e:21:2b:c3:15:d6:
c4:81:b8:c0:89:42:73:bd:b2:92:f5:98:db:00:61:
aa:05:e1:72:ed:00:4e:4a:09:cb:76:e2:74:22:06:
90:20:47:99:a9:fb:13:ef:cb:12:b6:c2:6f:bc:6f:
6d:91:2d:7e:a4:3f:68:35:60:f4:60:25:df:4a:f9:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:51:F0:E7:18:E9:7A:BB:0C:2D:54:B7:91:3A:34:EF:E6:7B:9F:33
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:14:af:1e:a4:4c:30:89:6a:47:b7:87:89:ee:27:da:71:74:
06:0a:16:59:1b:33:17:1e:e7:29:29:71:c3:5c:3a:70:a2:61:
89:8a:1e:98:f4:e7:8e:b7:70:48:15:a6:c9:40:48:8e:1d:66:
d9:53:cd:c9:cf:5d:56:aa:e5:91:21:fb:b1:18:44:cb:ad:ec:
17:b0:e8:87:0e:77:14:9e:10:0f:96:b0:ca:24:98:8b:c9:d1:
94:23:ab:f9:b1:f9:3a:fe:a3:7f:9b:8d:05:a7:7d:78:0c:5d:
87:cc:49:4c:ab:a8:18:19:0b:2c:8c:58:f7:f2:cd:ba:cc:24:
37:63:c8:27:53:34:66:f2:8c:61:9d:a7:dd:93:54:25:34:dc:
e6:64:d7:b0:63:06:99:39:47:86:00:31:11:c7:83:62:de:34:
36:b6:b9:42:4f:d9:0c:2c:31:33:34:ed:0f:a2:02:44:1d:75:
24:01:6e:52:71:5c:bf:88:1a:98:f4:0e:f2:08:d7:e5:b2:11:
03:db:7c:c7:1c:20:18:7f:f1:ea:2b:d9:60:b3:3c:db:ab:8f:
62:da:c0:19:7d:2d:9b:81:1d:4f:c5:05:5f:86:76:71:ba:e9:
dc:19:1d:1e:da:26:6e:39:32:78:76:be:af:ea:7c:48:54:23:
44:c1:92:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:58 2025 by rpki-client