Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
File: RJ5CUryyLqLGz7OSTI-Evd56dHE.mft (raw, json)
Hash identifier: W6cOFY33ifBpPoRYIgrI0hdAol6Mqp2TVOhXYRnVijc=
Subject key identifier: DF:E8:CC:B9:86:E4:56:A3:63:D8:E1:89:F7:07:6F:46:B8:73:52:D9
Authority key identifier: 44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
Certificate issuer: /CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Certificate serial: 0197B88FC280B8852930FE0BF0917489AC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:01:58 +0000
Manifest this update: Sat 28 Jun 2025 22:01:58 +0000
Manifest next update: Sun 29 Jun 2025 22:01:58 +0000
Files and hashes: 1: IuxDHR_CV3eNS1S5clbvfJ1hK_k.roa (hash: Hz3aDArINU9rGaWmuAjDTNSRDFd5qodJqjOuXUvn7hM=)
2: RJ5CUryyLqLGz7OSTI-Evd56dHE.crl (hash: v12Ix9+sARFu39tp/WRDopI/2yXm4+uIp6un21xuz+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:c2:80:b8:85:29:30:fe:0b:f0:91:74:89:ac:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=449e4252bcb22ea2c6cfb3924c8f84bdde7a7471
Validity
Not Before: Jun 28 22:01:58 2025 GMT
Not After : Jun 29 22:01:58 2025 GMT
Subject: CN=dfe8ccb986e456a363d8e189f7076f46b87352d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:19:71:dd:30:b1:84:31:c6:82:91:38:2b:
d8:78:bb:a6:79:45:17:94:8b:d2:cc:2f:eb:4d:af:
98:8a:02:e5:e4:4b:6c:a5:ab:66:8a:2a:ee:69:74:
a9:c0:1c:45:56:59:64:35:20:43:80:2c:8f:50:f4:
c0:e6:6e:c2:f9:f7:4c:76:b4:61:49:77:80:b1:76:
77:86:60:cc:cb:bf:b3:e3:6e:00:08:40:72:b5:ab:
04:a5:db:92:3e:86:23:21:f7:e0:ab:7c:d3:9b:0d:
b7:5e:89:68:6d:b7:3e:14:95:0f:1b:58:19:44:64:
14:f4:c8:1c:18:64:11:06:aa:79:eb:cb:24:df:64:
9c:bc:05:d6:86:bc:c9:f2:ce:36:d4:22:ba:3e:f7:
f7:dc:55:c7:9d:3c:82:59:de:77:e2:49:97:14:56:
38:a0:a5:21:7a:b0:fb:ac:52:c6:33:0f:28:30:d8:
0f:2f:92:c2:c7:2d:08:e8:d5:16:35:08:c7:cc:af:
74:c7:59:04:58:9e:41:82:8d:ea:ee:cb:ba:6c:13:
65:4f:27:52:87:84:6d:e0:5f:4f:60:cd:6e:c7:4a:
ea:e0:3e:a2:a8:4a:84:da:20:68:23:4e:91:e3:49:
81:c4:e3:2c:85:2c:2c:86:1e:b0:30:ef:12:43:8d:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E8:CC:B9:86:E4:56:A3:63:D8:E1:89:F7:07:6F:46:B8:73:52:D9
X509v3 Authority Key Identifier:
keyid:44:9E:42:52:BC:B2:2E:A2:C6:CF:B3:92:4C:8F:84:BD:DE:7A:74:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJ5CUryyLqLGz7OSTI-Evd56dHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9e9559-8f3c-45d0-851c-68f2174c79ee/1/RJ5CUryyLqLGz7OSTI-Evd56dHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e7:c9:7d:7f:86:d5:b5:42:14:7f:c0:61:81:19:59:a3:19:
2f:a5:30:86:7c:48:ab:90:5d:f5:f4:2b:03:14:9a:65:f5:e3:
7a:51:c4:53:e0:03:2e:e2:9c:28:e3:70:47:64:4b:e8:48:60:
e6:59:73:66:90:30:39:55:79:da:4b:34:33:28:5f:29:19:92:
79:61:b6:de:6d:cd:a3:80:76:c7:ea:65:ae:2f:fd:59:35:41:
e5:0e:9e:3a:68:71:23:80:d4:62:42:71:0c:48:aa:8e:94:b3:
60:59:62:3c:0a:68:1b:f0:ff:58:91:0b:32:b9:85:08:e1:0d:
3a:50:71:f3:f4:4a:65:33:50:9f:1b:ac:60:7f:d3:b2:de:5c:
d7:e0:db:9e:4e:94:55:05:a6:64:f0:97:f3:df:c7:88:7f:0a:
47:4d:4c:f1:e7:7a:f3:65:93:39:27:ed:a3:4c:9f:f3:a7:5a:
80:92:58:e0:9e:8e:5e:59:f9:85:59:85:69:89:26:cb:58:70:
8a:80:91:35:c3:fc:a3:bc:c9:50:e3:76:66:e2:6d:32:ee:aa:
48:d3:c1:06:c4:48:7c:69:21:c1:61:91:7f:34:4c:d7:94:07:
2c:2d:63:7f:97:b8:0a:c2:bc:f9:4a:6d:19:e8:68:f6:d5:49:
de:2b:a2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:19 2025 by rpki-client