Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
File: rfRJdaXb2_gjtKCmt-65mxSENn4.mft (raw, json)
Hash identifier: leNL7BgbjmZFfgzutUR/4UEnCHKrlzbA2zxB+y6AFWw=
Subject key identifier: 01:22:AD:08:9B:D8:0E:CC:36:F0:5E:55:9E:D5:F2:CE:AB:24:17:A6
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial: 0197B77CC52EFC9AF3CD706CA9920BB27BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
Manifest number: 0549
Signing time: Sat 28 Jun 2025 17:01:36 +0000
Manifest this update: Sat 28 Jun 2025 17:01:36 +0000
Manifest next update: Sun 29 Jun 2025 17:01:36 +0000
Files and hashes: 1: R4XHwh-uR65EL_DdpXZF6OARJ4Q.roa (hash: iFcX7qqj7I+Qr0pVVXkrPFoUP0jPJo5pY3SNhZeIPSE=)
2: rfRJdaXb2_gjtKCmt-65mxSENn4.crl (hash: WiiY/pbytx3x82brLJCDH4LeRKU0mcxe1EGVTcF2hc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c5:2e:fc:9a:f3:cd:70:6c:a9:92:0b:b2:7b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Validity
Not Before: Jun 28 17:01:36 2025 GMT
Not After : Jun 29 17:01:36 2025 GMT
Subject: CN=0122ad089bd80ecc36f05e559ed5f2ceab2417a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:12:ca:d4:e5:b4:bb:17:63:1c:c0:b5:57:
75:c6:d0:fb:07:32:3e:1e:f2:cd:87:62:83:2a:fe:
b2:d8:62:74:f1:bd:50:67:59:72:4d:43:a4:f0:c3:
1a:10:98:f0:4d:02:29:fa:04:57:72:86:3c:82:b2:
6f:a7:c8:87:88:96:79:00:8e:cd:7c:1d:e9:16:67:
62:b2:99:6f:cf:40:75:3c:7d:70:1c:26:20:7a:fc:
73:28:2a:d3:8b:3e:7d:e8:59:a6:25:16:7a:3e:44:
77:45:8a:e0:3f:3e:24:35:9a:c4:28:0b:b0:81:9d:
bd:90:ba:ff:20:61:78:4d:26:9c:ad:0d:39:37:72:
e7:92:e6:86:be:9c:7d:94:98:0b:47:29:29:f3:5d:
0a:55:c0:2b:ec:19:6d:e3:25:43:a9:ed:22:d6:d9:
56:d6:ca:88:fe:23:ca:46:c4:d3:1c:ba:5b:59:7a:
b5:70:52:52:71:8f:79:21:c0:62:24:f4:b7:df:35:
49:74:df:3a:a8:a6:ca:f6:e1:82:31:d3:42:1d:d2:
ed:de:64:1d:f0:18:be:d4:76:52:9c:4a:5e:41:49:
b3:9a:79:f9:d2:13:90:6a:37:52:46:64:ff:ff:8e:
91:1c:ab:a1:1f:6c:15:cb:fd:10:1e:96:aa:48:ac:
d1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:22:AD:08:9B:D8:0E:CC:36:F0:5E:55:9E:D5:F2:CE:AB:24:17:A6
X509v3 Authority Key Identifier:
keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:08:cf:30:7c:78:01:a6:16:71:f6:4e:09:87:e4:af:a7:57:
b2:ea:76:f2:9f:29:94:cd:11:3c:7d:d7:a6:2a:5e:34:d8:06:
dc:98:1e:d8:93:24:a1:e5:d3:c5:bb:2f:d8:b0:18:ba:6a:24:
01:77:68:62:3a:a3:8c:31:38:a2:22:ea:a1:fd:40:93:dd:f6:
01:68:23:04:03:3c:ee:46:92:74:08:27:b0:27:da:cc:8b:55:
8f:1f:c5:25:8f:a8:ce:80:8c:e5:4a:53:0f:8d:2f:b8:c1:fb:
13:91:af:65:74:16:4a:d9:61:38:46:da:55:14:3c:90:b0:51:
da:1c:e6:bb:28:7e:e4:9f:76:5c:05:e1:5a:fa:fe:28:f6:30:
6c:2b:f9:c6:cd:73:f2:c3:82:a7:f5:6a:d4:5c:8e:ef:2d:de:
47:19:17:e7:b0:b7:92:e7:8c:10:c5:a9:4d:aa:05:a5:06:25:
d5:45:db:dd:22:c9:83:bb:c5:24:2f:41:35:b4:38:3a:dd:77:
a9:af:79:05:6a:3c:be:b6:da:c0:84:d2:bf:e0:00:52:75:37:
db:01:e2:05:cc:25:f4:d2:8a:d4:fe:e8:60:75:90:b9:1f:a6:
e9:69:23:c0:d6:fe:e9:e3:00:c1:39:57:af:92:80:b3:3b:71:
76:b3:3c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:27 2025 by rpki-client