Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: Cd0Sgtq20De8HYCdMyHSKnfctaeidWhQ9XMeFWWtGaY=
Subject key identifier: DE:CF:06:60:95:9E:18:2D:0B:18:C7:94:71:E6:A2:B3:C6:7F:8D:EF
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 0197B821115A84FA51E4AE9CA901E246DAD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0A20
Signing time: Sat 28 Jun 2025 20:01:04 +0000
Manifest this update: Sat 28 Jun 2025 20:01:04 +0000
Manifest next update: Sun 29 Jun 2025 20:01:04 +0000
Files and hashes: 1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=)
2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=)
3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: MS3+DSIu6xa826eAobpqTuH4/GMsRJGHhdhxw3vztSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:11:5a:84:fa:51:e4:ae:9c:a9:01:e2:46:da:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Jun 28 20:01:04 2025 GMT
Not After : Jun 29 20:01:04 2025 GMT
Subject: CN=decf0660959e182d0b18c79471e6a2b3c67f8def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:2c:3e:1d:11:8b:b8:72:81:2d:f8:b6:c2:
61:eb:dc:26:02:ba:df:42:8d:96:07:5d:74:ae:7d:
c8:c7:b7:32:4e:a3:37:73:1a:ea:c0:be:8d:01:41:
76:84:0e:1e:af:b0:c7:e7:4e:ff:8d:19:42:d3:76:
a7:f4:a5:36:25:fb:d2:e4:48:30:41:d3:3e:91:4f:
98:21:f8:90:06:84:ea:ab:ff:4d:80:9d:cf:1c:98:
8a:6e:79:db:2e:34:c7:e8:2b:df:d4:e6:0a:95:15:
de:b4:a2:b0:cc:f1:88:a5:cc:e7:6e:45:a7:58:d4:
bb:78:5e:50:db:df:52:c2:18:4c:91:63:de:9d:27:
f3:a2:e0:c3:0e:c9:1b:7b:38:13:c3:2c:7e:cc:60:
7e:c0:95:98:9b:78:bf:29:40:32:e6:96:51:ff:12:
ae:74:2f:8c:af:72:cb:74:e2:be:7f:08:bd:0b:6f:
ec:de:83:a0:6d:fa:6b:51:91:08:a8:7f:96:1e:c3:
58:86:12:6c:64:e3:8e:ac:e9:24:97:07:08:99:e6:
0b:54:85:ec:9a:64:5e:5c:4d:ea:52:c6:40:ce:90:
cb:39:11:93:b9:c7:e0:59:a4:e5:ce:e3:a1:ed:74:
a4:7a:54:4a:79:cc:fb:66:ef:11:e4:c6:7e:aa:50:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CF:06:60:95:9E:18:2D:0B:18:C7:94:71:E6:A2:B3:C6:7F:8D:EF
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:66:16:0d:05:38:1d:b6:b3:23:cd:8d:bc:c6:fc:69:e3:4c:
2b:0e:3d:2b:9d:6f:ca:8f:b1:30:34:25:43:b3:a8:79:c2:37:
a5:2d:68:17:fe:67:54:b1:7b:fa:b3:fe:d6:b4:99:17:e6:dd:
91:65:42:7d:4f:70:b8:d8:72:45:96:1d:99:4a:77:78:17:3b:
3e:26:4c:da:14:1d:b0:77:16:a4:4c:e8:db:3c:d2:47:4f:4c:
0b:1a:90:ac:88:7e:c9:65:5c:64:16:df:e8:89:26:9d:ce:f2:
88:99:5b:ce:b0:64:d8:8c:ae:90:3b:02:69:57:60:6a:ab:d3:
7c:b4:10:f6:09:50:49:51:62:cf:8a:8b:1b:5c:51:fd:5a:d3:
29:ff:c4:4d:4e:dc:69:9e:88:4f:e3:56:43:c7:44:5b:74:f9:
9c:d3:15:71:86:75:eb:ed:62:72:86:1a:9a:ca:66:85:c8:5f:
f4:6b:5a:3e:f0:bb:82:28:e5:a7:5e:ad:9d:97:80:f0:e0:16:
d6:f2:e7:c0:3e:10:36:45:c5:d0:e6:7c:5d:c6:27:c1:1a:ec:
a2:02:ff:3c:c5:ec:22:64:2a:fa:83:24:fb:6a:b9:85:34:b3:
1b:19:76:cb:59:fa:c6:e4:e0:e5:d2:7e:5b:bd:04:3c:bf:60:
95:95:e8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:19 2025 by rpki-client