Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: NNusWWoU2zkPBcNO1sv808YmtrnwmMUcAOx76YKWLk8=
Subject key identifier: C9:FC:C3:1F:B4:41:84:0E:F1:3F:A4:50:E1:76:5E:5C:CF:A0:F8:69
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 0197B5FBB62D4CB265BB024DA7C4FD40851D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 0684
Signing time: Sat 28 Jun 2025 10:01:01 +0000
Manifest this update: Sat 28 Jun 2025 10:01:01 +0000
Manifest next update: Sun 29 Jun 2025 10:01:01 +0000
Files and hashes: 1: 1-AKJmO9q5axmG2bLlo_CKWpT7rI.roa (hash: IzbOHhtlqnCQLwohTNVhlpmomMZIZO83L4rK6yCvODA=)
2: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: +kKMxeZGS7s1HSU/n/YK59Gmn29OKVB1u0bh6pwPAMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:b6:2d:4c:b2:65:bb:02:4d:a7:c4:fd:40:85:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: Jun 28 10:01:01 2025 GMT
Not After : Jun 29 10:01:01 2025 GMT
Subject: CN=c9fcc31fb441840ef13fa450e1765e5ccfa0f869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:07:46:da:15:13:f8:9b:b2:25:f2:a2:58:
c1:b0:d5:8c:ad:30:0f:ee:a5:4d:fb:a9:29:3a:43:
ae:53:6f:41:1a:0c:e6:3a:ca:2c:83:b5:26:5b:3a:
94:f6:c6:3c:03:7c:4c:cd:28:0f:b5:42:0a:be:9a:
2f:67:4c:c7:13:db:46:36:b7:54:2d:9a:f7:4b:80:
69:c8:d8:f3:a9:3a:7e:79:97:78:10:4a:93:b1:41:
1b:c2:2e:e6:a7:f6:16:99:08:96:9b:3e:40:c1:76:
1f:42:fd:cf:77:41:bb:37:27:d5:f8:cd:11:d9:5a:
2a:2c:4d:87:42:2f:a1:5c:d1:05:a8:0d:af:f5:f6:
a8:d3:5e:b3:3a:74:06:0b:4b:00:4b:3e:b1:cf:8a:
83:67:ab:fb:08:e9:46:ab:63:f8:c1:9a:0e:6a:7e:
2f:eb:13:4b:1b:bc:2f:7c:3e:b6:19:94:a8:9b:8a:
65:3e:3c:fb:70:87:5d:b6:ac:2e:ee:d5:53:8d:1d:
e1:9d:29:d6:f9:11:09:01:a7:c9:a7:df:00:62:3a:
4a:a6:4e:bd:bf:ee:a2:3c:b1:f0:57:9c:db:ef:87:
83:52:9a:64:3f:4f:7c:ed:a6:1a:fb:55:be:1a:ec:
b9:11:a2:d9:d0:45:fd:23:d2:8d:6b:62:bc:2c:b0:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FC:C3:1F:B4:41:84:0E:F1:3F:A4:50:E1:76:5E:5C:CF:A0:F8:69
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:61:a1:8a:85:ec:81:da:29:c1:7a:70:63:c6:4d:9a:df:cc:
2d:f9:80:8e:c9:3a:62:9e:cb:63:33:f4:e2:8c:5d:8d:af:fe:
1d:cb:f2:74:a0:c5:d7:82:ab:2a:6e:c6:93:55:14:76:3d:ed:
0d:52:bc:53:48:7a:b2:63:2c:44:fc:7f:08:ad:ab:d5:a7:1e:
bc:d3:b8:d4:27:6f:8b:e7:66:1a:a6:8b:cc:8c:e9:e4:d2:be:
a1:bd:06:71:96:df:47:ef:73:68:9e:85:a3:7b:c7:92:1a:7b:
70:87:8e:30:04:ab:79:1f:dc:cd:51:37:33:d8:a6:54:00:82:
08:c6:44:d9:8f:25:ac:fb:69:42:16:34:f5:76:f5:13:5e:95:
fd:38:33:e5:3a:57:da:11:b2:8f:84:e4:0d:c2:9e:60:cc:b7:
5b:a0:39:dc:5c:fe:dd:b9:1e:26:e9:2d:9f:b8:65:43:d8:da:
16:9d:7d:fb:a2:f5:d2:ab:07:de:36:99:89:17:d1:9a:98:46:
8d:0a:bc:2f:3c:00:df:b6:28:04:3b:8b:e0:f2:5c:5d:14:02:
1e:5e:ad:3f:ac:94:de:37:79:50:26:7b:c9:f2:01:59:5b:c4:
30:c6:36:71:72:2b:f3:8c:cb:8b:7c:56:29:7d:0f:21:87:e2:
76:f8:7b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:51:58 2025 by rpki-client