Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: lGCGRj67DQ8KfugxknWT+quQc34f0IBz3xlAcChgVtU=
Subject key identifier: D5:92:41:E2:31:68:2C:5F:ED:51:72:50:7D:22:25:1B:FD:52:F4:F4
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 0197C6816E46E136A8D5D1EF3976B24B9C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 15:01:00 +0000
Manifest this update: Tue 01 Jul 2025 15:01:00 +0000
Manifest next update: Wed 02 Jul 2025 15:01:00 +0000
Files and hashes: 1: MybCmB4b1BFDPTACJ5YE-7C3a3E.roa (hash: wDv5owiZFkNYSTe+2a532nAjJGNE7mvoA0ctW2ktRc0=)
2: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: /X4m4u2X1bOMJNq3CztaYCXw5dOvQGWMqtaWQ+ql8w0=)
3: s4BqNapwmXilT71OYAf_1FRui4w.roa (hash: kbEYYaNpnssAu6Bf0kAHSemqVpHFQtEnzKXJ44cMHxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:6e:46:e1:36:a8:d5:d1:ef:39:76:b2:4b:9c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Jul 1 15:01:00 2025 GMT
Not After : Jul 2 15:01:00 2025 GMT
Subject: CN=d59241e231682c5fed5172507d22251bfd52f4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:ca:1b:d0:36:e5:69:f8:da:ac:42:05:e8:
74:72:ca:1b:70:6e:2f:8e:92:c1:4d:c9:8f:b2:ae:
c1:42:2d:cc:d8:b4:0d:ab:bc:43:99:3d:7f:f0:b7:
d9:06:38:38:43:3e:14:a5:e8:81:2b:bd:ff:45:e4:
b2:e8:57:ac:a2:61:d7:cb:c7:78:e7:2d:90:37:d7:
e6:be:4d:fb:60:5d:be:29:d7:b7:3a:8a:8d:23:ca:
86:5d:a8:8c:ac:22:64:3c:28:fb:b3:dd:29:36:dd:
6b:96:ad:7a:d3:b2:45:dd:ef:14:5b:54:4c:99:d3:
d7:b7:cb:c0:a0:0c:cf:11:0e:ce:48:67:ef:db:5d:
57:c1:eb:57:8e:99:26:37:21:f4:29:ba:e0:cc:a1:
e8:99:2b:67:17:4a:6f:62:b0:58:e6:61:49:85:93:
5b:7e:7e:a6:14:62:b0:66:a1:5a:c3:ed:85:46:88:
80:45:94:0f:09:f8:97:a5:70:90:01:3b:54:77:63:
6b:1d:83:ac:06:42:8a:f8:ef:e4:5f:d0:2c:9e:15:
b7:a7:a5:79:c8:dd:ae:9d:49:fb:94:32:b2:86:0d:
5e:31:bf:60:f0:38:f1:78:38:20:40:c6:99:74:3c:
ca:b6:71:3a:ec:f6:8b:72:5c:20:8e:1c:0a:d3:89:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:92:41:E2:31:68:2C:5F:ED:51:72:50:7D:22:25:1B:FD:52:F4:F4
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:34:20:72:c4:2d:4c:4e:ea:0b:2a:2e:f6:52:6c:ed:b0:91:
7e:80:bb:a3:20:38:3f:0c:59:b6:62:49:b4:4c:4f:1c:bf:ab:
1d:aa:71:b2:0a:09:6a:31:45:06:24:ab:92:76:27:2d:ed:a4:
23:e1:79:4f:c7:c5:35:6a:e2:c9:58:0e:07:da:be:5f:81:8a:
3a:10:b6:8a:27:22:1c:00:12:b0:50:41:03:21:9a:e1:30:de:
7d:ac:e1:ef:8f:ee:9c:95:77:82:30:b5:78:af:f9:3c:0c:85:
42:e7:d3:2b:42:fa:1c:9b:b5:66:68:03:5c:82:15:bc:d6:2a:
65:07:66:1f:8e:b3:53:1b:b6:cf:90:ee:09:aa:69:36:bb:b7:
f2:65:79:a4:7f:1e:26:dd:bd:b2:8d:45:63:fd:5a:2d:7e:6a:
a9:45:8a:8d:4b:d0:14:59:25:77:54:1b:e4:4d:5b:bc:49:21:
e1:11:6f:63:0a:89:8b:af:5d:0e:12:14:dd:0b:3e:8e:0c:43:
c1:3d:0c:c5:60:3f:02:4c:1b:e8:b0:dc:ce:4d:83:a3:e2:31:
39:ae:e2:ed:d8:f1:7e:01:3b:1a:42:c3:94:79:f1:ca:b3:65:
17:c7:3d:9e:6a:26:59:e3:da:09:0d:61:c0:72:00:e9:25:30:
bf:da:89:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 18:29:56 2025 by rpki-client