Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
File: pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json)
Hash identifier: wz/KF8J5X61033DmWw0PSGEtDP9i4onpLwwCIUjBUr8=
Subject key identifier: AF:2A:46:72:DC:AF:77:1C:91:BD:ED:C9:31:97:4A:4C:E7:9B:2C:05
Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
Certificate issuer: /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Certificate serial: 0197C75D41E2E3A5ABEAF06E779F41871DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
Manifest number: 08FF
Signing time: Tue 01 Jul 2025 19:01:06 +0000
Manifest this update: Tue 01 Jul 2025 19:01:06 +0000
Manifest next update: Wed 02 Jul 2025 19:01:06 +0000
Files and hashes: 1: cGGNHHL2taAbcfw5rMUB84kQw_k.roa (hash: J56YjCbrct/bNrc5fidg1pLfrEEsu9MaAGzXOMhbxY8=)
2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: jvefJN3DqzYsXPA1NUUj2lpoQvv3htE/8mrh6THS3Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:41:e2:e3:a5:ab:ea:f0:6e:77:9f:41:87:1d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Validity
Not Before: Jul 1 19:01:06 2025 GMT
Not After : Jul 2 19:01:06 2025 GMT
Subject: CN=af2a4672dcaf771c91bdedc931974a4ce79b2c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:13:71:c3:84:14:a5:97:a3:77:6b:50:e1:
15:43:97:bd:ea:09:0c:fc:7a:ae:96:3e:f5:ac:58:
6e:77:e6:dc:cf:78:c8:83:38:fd:c0:70:30:37:50:
00:e7:68:89:f2:7f:2c:3d:f1:56:aa:b5:24:da:fe:
38:43:77:38:aa:10:fa:28:81:7f:40:05:70:6a:98:
1f:bd:88:f5:5b:e6:d3:c8:b1:c1:50:46:ce:11:5e:
60:7e:c0:f3:60:53:b9:c8:91:9f:52:d8:91:8e:79:
a2:3e:c6:09:05:94:c5:66:33:08:87:3a:39:72:c7:
4b:92:e3:02:85:1d:be:86:93:67:ad:e1:b8:29:d0:
c7:32:21:1a:c4:1f:ac:c9:43:70:3c:d4:af:37:e1:
ec:04:79:1a:f2:b5:ae:37:6f:05:cd:de:ec:d2:f9:
90:4b:02:8e:32:46:e0:bf:9f:db:5b:72:76:32:1a:
ad:53:ac:cb:dd:4f:a3:7a:bf:57:05:e5:ae:87:5b:
3c:68:af:ee:04:43:a6:00:aa:70:0a:a5:10:d8:59:
10:1b:89:b2:e0:27:81:81:26:e4:31:22:c7:e2:d1:
16:e0:02:d4:27:7a:ea:89:78:3e:3d:e9:57:be:19:
ee:ce:ab:32:13:2f:b8:fb:53:71:97:87:d8:7d:84:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2A:46:72:DC:AF:77:1C:91:BD:ED:C9:31:97:4A:4C:E7:9B:2C:05
X509v3 Authority Key Identifier:
keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:45:d1:32:79:56:e2:16:c1:e8:b6:c6:01:12:9c:17:7e:4e:
6f:8e:d5:89:56:1b:f0:76:ea:d3:eb:66:39:b1:72:88:81:68:
8a:40:cb:26:30:ca:27:2b:43:eb:60:c3:ca:a3:c1:26:89:d6:
2b:96:e8:ab:87:6d:d5:94:4a:42:29:7f:ef:b6:13:91:9d:c1:
b4:e7:42:ea:29:80:4d:49:c8:6c:8a:40:f5:91:16:aa:9f:6c:
57:ca:8c:73:e5:c6:a2:67:67:ba:16:bf:94:24:fa:40:1f:47:
f8:d3:82:5c:13:29:87:1b:c7:2a:50:ee:e0:b3:10:de:8f:20:
cd:11:3c:bb:cb:40:0d:ab:ad:0b:22:38:80:3d:27:eb:31:fb:
00:4c:57:26:f9:a4:68:37:af:c7:ff:26:09:5d:07:2f:2b:ff:
90:5c:08:fa:ff:d3:55:73:a4:54:b7:18:d2:30:d0:bf:73:1b:
82:c7:ee:8a:2c:84:fa:a0:42:20:c4:d7:21:be:75:90:20:11:
77:f6:ba:84:97:e8:72:f4:30:7b:15:66:b3:47:41:11:98:25:
73:d3:d8:91:4a:9b:7d:17:a2:7f:5a:72:18:fb:75:03:0e:97:
44:87:cc:79:cd:77:b5:91:2d:f1:37:ef:3b:f6:ce:ba:56:fb:
11:2f:0b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:50:26 2025 by rpki-client