Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
File: RWF9LghjWN2nvbDcRmyhyG7U_so.mft (raw, json)
Hash identifier: JgTWMriDt5F8QfInh72jtORIfyVkWgr8vLBLvmeYvw4=
Subject key identifier: 99:08:69:D9:5D:C1:A2:C5:48:CB:E0:3A:E0:4C:46:20:C9:3E:72:96
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Certificate issuer: /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial: 0197B6D7B1CA9CF7735291B6EE90FD3ADC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 14:01:18 +0000
Manifest this update: Sat 28 Jun 2025 14:01:18 +0000
Manifest next update: Sun 29 Jun 2025 14:01:18 +0000
Files and hashes: 1: Kp8YOETyXn_CJNlkKRcjiHTajds.roa (hash: pE4tiu3XHnbIpJeimbwG8Yyb4EwnGUv1VJS0J7muojA=)
2: RWF9LghjWN2nvbDcRmyhyG7U_so.crl (hash: a3PwLKeD9VkjHTYGwyfdE0VdBbdS1ESKXZxjYKPID2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b1:ca:9c:f7:73:52:91:b6:ee:90:fd:3a:dc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Validity
Not Before: Jun 28 14:01:18 2025 GMT
Not After : Jun 29 14:01:18 2025 GMT
Subject: CN=990869d95dc1a2c548cbe03ae04c4620c93e7296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d4:c1:81:f2:62:14:06:ad:85:61:21:e3:06:
ef:95:1d:1e:9a:53:57:f3:5e:52:6b:60:70:20:59:
38:43:bf:93:2e:f6:e9:bc:0b:bc:7b:7a:07:23:d0:
99:7a:fe:da:90:f3:56:b3:a5:b8:b4:f5:30:00:ee:
cc:53:94:20:94:ec:5d:c1:c0:e3:4f:80:db:e3:05:
d8:31:c5:7b:6d:4e:7c:5d:76:9d:0e:6b:fa:d2:4a:
87:41:46:96:64:be:06:98:a8:3c:b0:34:75:cf:f4:
d1:42:58:62:d6:de:05:cd:ff:30:c8:5c:3d:2e:bb:
da:19:ee:e8:df:c6:b0:13:f7:bb:a0:ff:19:d7:33:
57:56:53:30:88:26:46:81:dc:42:39:43:0e:3e:11:
3b:b5:7b:be:c4:32:69:50:92:1b:2d:c7:c3:9b:be:
ea:87:f0:14:75:dd:90:1e:80:bb:f6:03:08:4a:f8:
8a:e4:9b:db:90:35:9c:2a:2b:a9:b7:f9:27:3d:c1:
8a:ea:bd:c6:aa:f7:ff:51:2c:46:0a:65:12:b5:19:
92:dd:78:33:b3:12:4d:59:1d:a3:2f:69:39:19:3f:
f3:a7:09:9c:85:5f:3f:ef:3c:37:ea:1c:a9:21:94:
cd:30:28:26:7f:4c:e5:ee:5e:4d:10:85:22:ac:31:
2b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:08:69:D9:5D:C1:A2:C5:48:CB:E0:3A:E0:4C:46:20:C9:3E:72:96
X509v3 Authority Key Identifier:
keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e7:c7:82:6f:87:f9:9b:93:b6:7f:89:07:1d:f2:66:22:36:
69:7d:53:c2:3b:a0:63:ab:7a:cc:4b:cf:96:28:8d:0e:ea:26:
85:bb:1e:93:0d:27:6d:5a:f3:7c:48:03:8e:89:b5:2e:e2:8c:
5d:9d:de:0c:b6:fe:1b:f6:73:9c:ac:67:67:e8:90:89:5b:38:
21:33:44:7b:c8:29:40:56:ca:ae:71:89:33:a3:bc:9c:42:a5:
0b:60:73:53:be:e6:24:c7:ae:4f:79:0f:ce:ed:1a:ae:86:c0:
a2:d1:b0:4c:25:23:c6:82:fe:65:2f:75:81:67:15:b1:1d:3a:
34:57:f6:3e:bc:ee:5e:18:34:df:1e:46:25:7d:74:57:f0:43:
95:4e:d7:d9:01:1a:6d:bc:10:06:3f:ca:f8:13:99:61:f7:40:
4b:a2:ea:cb:3e:15:6e:54:bb:34:ef:a5:4d:19:27:cf:5a:70:
1c:7f:47:5e:b2:99:32:c9:d9:08:4d:ef:92:40:35:59:b0:89:
e6:a0:d0:16:28:ec:15:31:b0:e0:10:bc:b2:29:f4:6a:aa:c7:
89:32:78:6f:87:98:33:27:ad:d9:6e:f1:8f:a2:b8:4c:02:6e:
52:08:2d:39:eb:b0:3f:11:b2:0b:fb:77:16:e7:f6:0d:26:fd:
b8:eb:24:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:41 2025 by rpki-client