Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
File: rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft (raw, json)
Hash identifier: gpnYxaluu5DLKsl3DDZH0k0OqD6MccvIdeUr//Z+A6U=
Subject key identifier: E5:2C:03:12:58:65:10:DB:D2:4F:F9:03:4B:AD:7C:15:8E:EC:FC:87
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 0197B77C6FD6FC884DB5038AFD96D0E62045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
Manifest number: 15CE
Signing time: Sat 28 Jun 2025 17:01:14 +0000
Manifest this update: Sat 28 Jun 2025 17:01:14 +0000
Manifest next update: Sun 29 Jun 2025 17:01:14 +0000
Files and hashes: 1: 1xef8JB14kgVdYbFNM-Oq6W7NWA.roa (hash: 2TgMpFsN8snCYIhnDbb3K1R/JLwOpv09B4vLRv33njY=)
2: 30aIeplMe8B5nuWPNxNW6K-OtBY.roa (hash: 3pRxuzSCfGIU8i4yLQxNrHj04RZktWd0aRH2mX3pOUo=)
3: 5R2_zC5O_WNYOAGlu7by2_fhzYo.roa (hash: Eq+hBI8YGdr0edeJFDWardc1U5Cf7U1rPC+h2snaoOY=)
4: mG-NGr5UJw8Bdsm31xr0LARp3LM.roa (hash: Ez+x2KZ41CLnIqO9c7EUA1U/u9pzX46TWaq6peZ65/4=)
5: nqdZW8VS3cJABsENIPnwko2Hihc.roa (hash: IhzETIut1wHzF58gkob1Irj0rHur1kgwouWb5+riuAI=)
6: nrBcJclJWWQmSFgHdkkN2rl4iMo.roa (hash: LHzeWYsmA5iX5RkIBuodpJrYuHeqFeRrX4/36Bp1azQ=)
7: rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl (hash: jACwOFOVvc4beRroZSfZdBpxzpQ8+GsA21rWoVEBAQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6f:d6:fc:88:4d:b5:03:8a:fd:96:d0:e6:20:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Jun 28 17:01:14 2025 GMT
Not After : Jun 29 17:01:14 2025 GMT
Subject: CN=e52c0312586510dbd24ff9034bad7c158eecfc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:f2:04:08:2b:23:94:e4:97:08:04:8b:6f:
ff:eb:a0:23:08:c9:af:32:f5:91:e7:0a:56:f1:9c:
dc:8e:ad:a3:af:6d:13:bb:50:7a:2c:3c:64:88:66:
63:86:76:bd:31:e5:ed:08:33:97:0e:a0:5c:81:08:
5b:56:ea:b3:b1:82:18:3e:b0:f5:c7:88:fd:6c:ce:
fd:2d:f5:5c:63:95:08:8b:8e:5b:19:f5:21:86:ab:
40:b2:e7:e7:22:c0:c1:b8:f7:90:dd:ee:b3:fd:8c:
eb:71:e1:d8:7f:ac:6d:f5:93:16:b5:14:c1:d7:e5:
2e:95:c9:84:be:86:45:85:97:bc:c6:03:85:51:f8:
53:04:5f:27:55:a6:c5:49:be:41:e8:45:87:f1:79:
1b:e5:cb:e7:9a:ec:4c:5b:67:51:66:0b:f4:3b:02:
4c:5a:58:dc:af:d2:5e:b7:6b:61:72:bb:e4:59:83:
22:48:60:e4:66:97:44:d0:9e:d2:44:f7:0e:bd:66:
bd:12:d4:62:f5:fa:76:09:c1:9b:53:c2:0e:07:2b:
45:a8:a8:a8:06:a1:9e:4a:e4:6b:82:b5:ed:6f:1a:
e0:08:54:c1:b2:41:7a:5c:d7:ad:0c:00:59:46:fa:
64:c5:3f:0f:02:15:32:a7:08:0f:0c:24:c1:d3:df:
50:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2C:03:12:58:65:10:DB:D2:4F:F9:03:4B:AD:7C:15:8E:EC:FC:87
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:73:46:4d:92:a1:69:d0:3f:2b:2c:67:d5:b1:22:cc:cf:7c:
73:0e:5c:57:2a:64:ff:ae:5e:9c:32:79:ff:d8:e6:a6:0d:c7:
1e:b2:54:b0:c4:39:47:cc:34:e2:ab:02:52:d8:a1:8f:d5:ab:
f1:e5:4a:f9:fd:dd:e7:9a:58:f9:91:49:7c:fb:c7:ec:30:c0:
c2:74:1d:b1:65:fa:36:3d:c0:c9:81:6e:2b:11:df:62:5c:91:
45:5d:37:da:7e:0e:82:d9:f6:48:34:f1:33:11:c5:e2:fd:3c:
7c:68:de:10:af:c2:1c:b7:2d:49:3c:79:42:20:e6:76:18:2e:
a3:67:2c:df:10:80:1f:df:f5:bf:89:79:cd:40:11:71:b3:f7:
38:00:be:3d:c9:b2:1f:79:c9:38:c5:e7:49:f2:b5:e5:c8:bc:
18:3e:2a:24:ec:52:6a:ca:4d:3c:b8:f1:5c:bd:52:a7:38:fe:
c1:bf:a4:a6:dd:b1:02:64:23:1c:25:34:39:7e:09:97:bc:39:
1d:5e:e0:17:b6:e9:3b:d3:9b:97:d0:87:70:fc:e9:2d:dc:66:
12:b9:5e:be:e5:11:ab:f8:1d:07:78:ca:bd:76:10:d9:ac:b2:
62:20:e0:5d:44:75:68:4b:33:20:e1:f8:3b:80:0f:30:f8:db:
c0:97:0d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:17:12 2025 by rpki-client