Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: +t34hrl6KPAr3AweWNNCmA7NteK3AZ4a4obh8bz2Shk=
Subject key identifier: 46:F5:D9:BA:1A:00:D1:89:A5:35:74:7C:FC:3C:81:70:F1:DF:0B:2F
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 0197B9A1717B2699F6AEB7358D4317A71654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 15C3
Signing time: Sun 29 Jun 2025 03:00:54 +0000
Manifest this update: Sun 29 Jun 2025 03:00:54 +0000
Manifest next update: Mon 30 Jun 2025 03:00:54 +0000
Files and hashes: 1: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: Cvr0IrQ2VB99k1SfxWxT0LK6nhLWajfDp2gq/nMqgP8=)
2: SFYQtUf8h78RR3sYV-5vV65d0GI.roa (hash: k8VC+Pkqjm+Q/34YSS05tLomED6YZDaGOWiNO2M8zlM=)
3: cQWK86wyTE6QykBYGD0IQXVxmGU.roa (hash: YU+GQaBeZSBZ4pnqlkuWqIUXGdhcGs2HRIrroMn5n04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:71:7b:26:99:f6:ae:b7:35:8d:43:17:a7:16:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Jun 29 03:00:54 2025 GMT
Not After : Jun 30 03:00:54 2025 GMT
Subject: CN=46f5d9ba1a00d189a535747cfc3c8170f1df0b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:84:c8:20:4d:59:d0:cc:a0:3b:33:b3:4d:41:
f0:85:f1:43:9e:d7:05:85:fe:bd:f5:9b:50:8f:e9:
4d:1f:60:dd:de:01:a5:9c:3a:23:22:b4:38:bf:67:
b5:7a:a2:2f:3c:96:ef:8b:2d:5d:6e:48:bc:94:9c:
a4:54:b7:7b:5a:20:29:62:03:58:d0:f7:15:fa:c5:
cb:28:61:ed:5e:ad:1f:be:33:cf:de:66:a6:f5:6d:
a1:61:59:f3:a7:af:8f:67:60:c3:87:1b:7a:8c:11:
b3:96:f5:bd:c9:ed:24:82:30:d9:69:48:2d:1d:5c:
8b:96:d7:0f:f5:a3:94:58:00:42:4b:d1:76:52:98:
de:f5:a9:8d:70:bf:bf:9c:0b:ef:51:61:68:72:39:
95:36:4d:d2:61:eb:94:07:04:95:51:87:a5:40:08:
45:33:f5:56:70:4d:c6:7d:7a:55:75:7c:a6:74:26:
2a:c0:19:dd:e3:0b:31:b3:8d:dc:7f:79:76:87:96:
8e:12:21:00:5a:5c:3c:c7:83:a4:d9:db:ef:78:43:
a6:e3:c2:d0:0f:8c:9a:18:a2:3b:82:3f:c9:d5:25:
45:25:21:84:93:78:b7:33:72:3a:b0:3f:4a:00:16:
0b:20:03:7e:cc:b3:03:2a:85:96:2a:c2:06:88:6f:
43:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F5:D9:BA:1A:00:D1:89:A5:35:74:7C:FC:3C:81:70:F1:DF:0B:2F
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cf:9b:5b:1a:f1:06:fc:86:43:50:57:ff:09:b3:cb:50:4a:
46:f6:14:4a:64:49:52:3b:40:e5:3e:3c:2f:ba:ac:1d:66:41:
e5:ac:28:2b:6e:63:fb:84:f5:11:34:5d:5a:47:d5:20:43:df:
22:28:f1:80:db:0e:12:d1:ab:98:8d:3d:b0:5c:97:14:20:0a:
c0:f0:25:56:f2:5e:40:5d:88:e3:af:55:cc:42:c7:3a:ac:75:
34:98:d0:85:38:6d:8a:7d:92:16:6e:b1:ed:aa:c1:24:9e:05:
5f:42:1d:c7:66:96:8a:3f:3b:37:35:82:28:89:4b:db:19:3b:
c0:40:59:f8:ba:02:07:b1:4a:6e:45:91:5b:c8:ac:a9:72:31:
68:60:05:03:8a:c8:e3:52:8c:f3:54:f7:40:fb:bd:db:b5:64:
1f:3d:cb:12:75:d6:2b:4b:1f:48:ad:26:9d:5a:28:33:6e:33:
fe:7c:b7:36:79:af:e6:40:39:03:09:2a:2d:79:fa:b9:36:e5:
10:c6:5e:7c:5a:63:33:4f:90:e1:e2:08:61:43:87:8c:03:e4:
08:1d:8a:88:d7:a7:44:87:7e:35:11:ba:81:56:8f:4e:f7:d8:
c4:23:4b:ae:32:8f:00:0b:bc:60:c6:82:18:d6:92:b9:41:53:
cb:cf:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:50:10 2025 by rpki-client