Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: TTxGT5OXOoHHhOXvVQnBtYKqlrXKS8GzR0pE7JqihOc=
Subject key identifier: B8:19:DC:20:F6:7C:AE:37:5E:73:E1:06:FF:C7:B4:D4:54:BC:A4:2B
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 0197B77BFD7AD873FAF59201A1D453B62B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: D9
Signing time: Sat 28 Jun 2025 17:00:45 +0000
Manifest this update: Sat 28 Jun 2025 17:00:45 +0000
Manifest next update: Sun 29 Jun 2025 17:00:45 +0000
Files and hashes: 1: ERKKjb9maK6l2D8S98DiUvq_sHY.roa (hash: K5h5Qq2Di55EgzF5bOxkfD2fsAbyW8q02xX4iijsUmk=)
2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: jNsLPj5gwvG8ucAhH5jLd9Oj6JqVedZ5js8yAcK0LRQ=)
3: uC4_l-E2xjwrvlqz30Q-HpJhGxI.roa (hash: eCi9fijMSbE+YJ8x/iuJrnNqx//o/hxhFT+nJZyvJ+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:fd:7a:d8:73:fa:f5:92:01:a1:d4:53:b6:2b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Jun 28 17:00:45 2025 GMT
Not After : Jun 29 17:00:45 2025 GMT
Subject: CN=b819dc20f67cae375e73e106ffc7b4d454bca42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:84:f2:2d:69:2e:61:d7:16:4a:73:d3:02:
86:9e:51:47:32:66:34:0d:19:f6:8e:35:f4:89:13:
96:41:6d:22:36:ac:fb:b6:a7:6d:86:b7:b7:12:95:
36:72:42:9b:17:52:01:2c:41:d0:46:51:22:96:dc:
64:b8:db:fa:3c:49:f8:c9:38:cf:e0:f0:b4:ec:a0:
5b:b1:6d:f1:dc:24:24:80:13:8e:9b:79:7e:0a:a8:
d7:10:c2:f1:13:8f:5f:54:c4:25:ee:eb:46:26:64:
6c:e4:73:56:eb:7a:b4:32:04:ce:27:da:a7:ad:c6:
bb:c8:1a:dc:fb:24:af:aa:49:7a:88:fd:a3:b7:38:
40:d3:78:98:82:01:91:de:4e:d4:7e:ec:6d:99:4b:
0f:d9:77:65:fa:7f:32:06:0b:fb:17:a7:1b:d0:8a:
d1:4b:6a:be:15:04:11:a5:88:c0:28:36:3e:d6:8b:
7f:7d:1e:16:57:9c:1b:36:e2:ae:07:08:0b:e0:fa:
46:69:94:3a:f7:c4:86:96:e7:c2:0a:82:85:af:f8:
b1:13:5a:6f:7d:62:95:d5:d6:9b:95:c1:58:90:a5:
21:1e:c9:c7:f4:8c:bf:e1:20:81:c1:38:92:2f:1e:
46:67:7c:88:de:21:e8:0c:4e:87:11:a1:e4:e2:fa:
bd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:19:DC:20:F6:7C:AE:37:5E:73:E1:06:FF:C7:B4:D4:54:BC:A4:2B
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a2:36:a2:c5:ac:a5:92:20:6f:3b:3b:55:d4:66:1e:27:87:
c4:86:c6:6f:13:0c:8a:81:a1:09:f8:89:e5:07:a4:b9:e8:de:
e4:00:00:16:ef:8c:ec:a1:ca:e3:8a:1c:43:a0:de:7e:30:af:
31:f0:36:f8:1d:ec:55:60:a7:6b:a1:a1:16:a2:2a:2a:8a:80:
29:b2:f3:b7:6e:03:9b:37:81:14:a2:46:8f:18:d4:c7:54:21:
c1:26:c6:ea:4a:b6:70:4e:cd:02:c9:59:92:ad:6a:06:81:ce:
db:b3:e6:fe:79:f8:38:32:2b:09:c7:02:51:e6:60:d9:3e:3e:
e2:be:da:5e:fb:bc:94:85:65:a0:20:c4:58:3c:04:59:e7:21:
a2:94:de:0b:15:7b:80:74:65:fb:87:5e:52:d7:fc:91:aa:45:
3b:b3:39:bc:c4:eb:8b:16:8f:52:28:49:ce:03:26:65:3f:de:
88:d1:83:a1:e9:48:db:ee:47:76:e2:6c:6e:e1:63:7a:81:19:
67:d8:92:39:37:ab:ea:77:f6:e4:a4:61:fc:b6:aa:fd:85:3c:
22:99:3a:72:be:cb:67:c4:24:65:ff:79:9e:7a:20:42:b7:af:
50:18:91:60:5d:bf:20:1f:27:00:79:ce:b9:52:01:83:40:06:
41:45:b4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:07 2025 by rpki-client