Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File: 458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier: YLvAMcuiiK+Nt4UShego7zFi5GabWzGyapm1Wx0s1v4=
Subject key identifier: 9D:D2:D3:B3:8D:26:77:DA:71:F8:B8:7B:46:9C:76:A9:5E:DD:3D:02
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 0197B70E86F79403175BE452A70F68F64C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 15:01:11 +0000
Manifest this update: Sat 28 Jun 2025 15:01:11 +0000
Manifest next update: Sun 29 Jun 2025 15:01:11 +0000
Files and hashes: 1: 00-pDRnkJ28HOY9PiW3UHtRlnaA.roa (hash: ajRA1r/wZbCFV5DRURYHBboFEqfVmi4nUu+o5RsVv7I=)
2: 458aboTAJ378tW2UKw615FZHESk.crl (hash: bUp5R+YCkRlqH0zXwOHgzBfcGjZzaDa/ZrUEzMz1mM0=)
3: h0icjzgutWd6lA-1BOIfw-Gwjqg.roa (hash: S1MAwDWcpRVxYAC6r+etNs1goxhniGxwWQ8E6EEXeo8=)
4: w1G2WgRwg5TMv1o-ctrHxpnkGg8.roa (hash: agU6Qqy0fnivl3H4SG64+Hxp9Tp7KmPmlQXRx4PQep0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:86:f7:94:03:17:5b:e4:52:a7:0f:68:f6:4c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jun 28 15:01:11 2025 GMT
Not After : Jun 29 15:01:11 2025 GMT
Subject: CN=9dd2d3b38d2677da71f8b87b469c76a95edd3d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5a:93:a5:08:d2:76:f3:6a:11:aa:b4:e8:e2:
c2:a6:c6:bc:18:bf:3c:7c:88:3d:27:b2:93:f7:0b:
cd:42:e9:02:3b:45:e0:b8:f3:ca:f4:d9:6c:24:e4:
1f:c1:7b:ab:7f:03:5c:9e:0c:b9:98:2a:c0:dc:04:
ab:9a:b3:ab:06:db:61:53:54:fb:65:fe:42:5c:06:
6a:1b:c3:da:3d:a8:7c:46:da:b3:e7:75:b0:2a:bf:
ee:b1:a2:aa:ee:3f:3f:eb:3f:4d:32:94:3e:e9:fe:
93:fd:3d:89:87:71:7b:85:20:4e:b6:ce:af:67:90:
d5:b4:b7:d1:ef:eb:a0:c9:c5:d9:1a:6b:7a:e7:5a:
3d:1c:18:d9:3f:a5:e4:a3:78:3d:ff:f1:3d:32:f0:
b3:4d:f0:a9:1a:b0:61:c5:1f:4f:1c:f4:bb:6b:42:
8c:70:9e:bb:81:22:b5:a9:50:96:f8:12:9b:fe:40:
8d:83:40:6f:22:85:72:d0:4d:1e:39:67:d7:50:78:
04:75:dd:4f:88:48:6a:cb:81:ac:f6:5e:1c:b1:2d:
a8:88:d1:72:44:f8:2e:df:2e:78:ea:52:ac:d1:d8:
4a:f3:96:41:2d:98:04:7f:7f:2e:24:aa:c3:ed:c5:
34:b0:b5:31:2d:5d:15:8f:14:e5:55:35:59:18:93:
f9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D2:D3:B3:8D:26:77:DA:71:F8:B8:7B:46:9C:76:A9:5E:DD:3D:02
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ee:01:fe:64:66:a0:29:54:d7:9d:2e:27:45:5f:0b:dc:2e:
04:f5:73:ab:36:c1:d1:68:7f:ca:ce:9d:7f:e7:7b:05:22:cd:
63:b6:9a:0a:39:76:eb:69:f0:41:13:73:74:b0:63:9f:91:fe:
6b:65:65:90:21:60:0c:5d:93:a1:a7:c7:89:25:5d:f3:68:c5:
66:6a:e0:be:d5:90:40:38:9c:01:e6:5c:1e:ad:c5:51:13:88:
16:89:6b:90:1c:5a:31:04:d3:a2:4f:c0:11:07:3c:a3:b0:2b:
2c:b3:9a:8d:85:fd:af:1c:e2:87:2b:f6:83:6b:d9:1d:d8:99:
df:e5:87:d7:cf:40:b1:cd:9f:52:a0:04:f0:1d:b5:28:e4:06:
ff:e4:57:4a:7a:9b:60:69:6f:01:29:b8:4b:58:bf:d7:a6:35:
df:d3:3a:59:f8:14:01:93:2e:95:bc:0d:3f:5b:42:69:38:17:
44:b2:10:f3:9e:68:76:b4:6e:5a:a9:37:1b:be:5c:fc:98:55:
6a:10:72:0e:9a:f6:db:1d:f8:31:89:e0:d2:6d:d4:6c:c5:13:
82:b0:22:c2:2e:0d:e9:42:6b:d9:19:84:96:13:84:6d:cd:fc:
d0:66:e5:b9:b7:12:92:17:c9:03:89:86:d7:0c:d5:6d:d0:f7:
20:4e:c5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:26 2025 by rpki-client