Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: cecPg2cxxAdyPBgp3kxwNDUEopTyXOzzw3bXQa9WQSM=
Subject key identifier: 09:6F:DF:58:6F:52:79:9F:C3:34:01:A1:E1:B3:A1:0A:0D:09:C1:4B
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 0197B6A21F352803AD7DCD1F43A1B84EB7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 0210
Signing time: Sat 28 Jun 2025 13:02:47 +0000
Manifest this update: Sat 28 Jun 2025 13:02:47 +0000
Manifest next update: Sun 29 Jun 2025 13:02:47 +0000
Files and hashes: 1: 1-B4mnYUsJDtWU5_HUQ7FJC6tCSw.roa (hash: sHcyd6IuGZiLkLEHDVFO8zkeKGMSe2epXGrDt7jtZiY=)
2: kIgDZb1mJNxoy-31G2UkNHRwWx0.roa (hash: zPGGaXstMh703tXkFi/JyzFhGqACNCTHmmN1tjIc6M0=)
3: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: Jt6ABRowkvbE7xN3HxDScjZ8Lq6OI70hWMhKVn5Ox6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:1f:35:28:03:ad:7d:cd:1f:43:a1:b8:4e:b7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Jun 28 13:02:47 2025 GMT
Not After : Jun 29 13:02:47 2025 GMT
Subject: CN=096fdf586f52799fc33401a1e1b3a10a0d09c14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:b9:f5:03:e2:9f:65:60:12:09:60:d8:b2:
5c:4b:aa:31:14:1f:55:5a:fa:ce:07:ce:d1:d4:65:
f4:c2:3c:f2:09:aa:16:aa:3a:3c:f8:c9:b1:45:13:
5c:13:84:9b:89:83:50:cd:d8:03:0e:65:61:e4:72:
9f:27:96:27:d6:10:d2:b8:73:65:e7:6e:0f:91:68:
27:c3:30:93:fb:fd:58:21:92:1a:8a:e4:c2:1b:bc:
e5:93:fb:94:1a:b8:20:a0:21:7d:72:98:1d:62:2b:
18:6e:e9:ce:4b:04:80:17:8e:6d:c3:8b:f6:a9:99:
2f:ba:9f:bb:2f:94:d2:bb:76:39:58:14:a8:7c:70:
71:1f:18:aa:cd:a6:21:a5:fd:80:58:46:71:43:c7:
1d:20:b6:13:08:fd:50:54:3b:ba:e3:96:35:ef:12:
34:73:4b:f5:e1:2f:9b:58:70:5e:7c:c1:33:b7:3a:
d3:23:58:e7:15:3f:bc:ce:ab:82:9e:6a:fc:d8:9b:
dd:62:d8:fa:83:f6:30:3f:48:b3:f5:40:05:39:7a:
26:2f:a8:0d:75:a3:36:29:1d:83:d7:c3:1d:11:74:
f0:8f:45:20:f0:43:e6:a7:a5:47:f5:28:7e:f3:ff:
6a:e7:69:f5:9d:cf:92:df:58:10:e7:a2:48:24:34:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:DF:58:6F:52:79:9F:C3:34:01:A1:E1:B3:A1:0A:0D:09:C1:4B
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:93:1e:95:5a:76:ce:fd:08:1e:ee:9e:14:af:39:01:c8:d1:
b2:e7:8e:58:89:aa:42:86:b3:9e:38:8f:f7:b8:e1:df:8f:51:
c0:64:17:7c:67:ae:86:4f:2a:66:d0:c5:c3:52:78:9b:9e:cf:
03:f1:c6:ca:f2:ff:18:07:a0:de:cb:26:a2:db:f2:f5:23:66:
2b:78:0c:88:f2:5a:c0:6f:dc:31:01:89:70:f9:5b:af:48:0e:
b4:53:54:5d:c3:8d:34:b0:a2:1e:ea:a3:0f:40:d3:fa:69:5f:
c0:b5:32:69:a7:61:f0:bc:45:52:cc:f8:38:31:25:42:24:88:
81:e1:bd:dc:ed:89:62:df:fb:fb:e1:50:26:02:38:5e:13:fc:
fd:3f:2f:26:56:90:2c:b2:8e:23:a8:ac:c2:3f:9f:9b:f0:9a:
fe:d6:0f:40:42:46:77:da:3c:ce:2d:36:3f:f2:5b:b0:43:c2:
80:ea:4b:1d:6b:68:03:00:26:60:ac:5d:96:87:b3:a9:a2:5f:
c8:79:14:17:4f:fa:c1:6f:db:62:48:4c:49:23:b4:7b:1d:de:
0e:07:10:af:31:33:78:83:ab:9c:e1:82:04:f3:3f:3c:9f:06:
a7:34:eb:ea:1a:aa:97:eb:b9:17:87:b9:92:b2:44:5b:e0:fb:
1d:00:e1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:27:56 2025 by rpki-client