Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
File: g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft (raw, json)
Hash identifier: 09WjR0WhxrLyBmUy4mw6FT5tju6qnImAKLV7RguopxM=
Subject key identifier: D5:2B:2D:E6:61:14:87:89:E9:10:5C:21:A9:6F:74:DC:AD:04:05:D2
Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
Certificate issuer: /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Certificate serial: 0197BFDAF2155D9ECE0D2B72C8AF40820BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
Manifest number: 04CA
Signing time: Mon 30 Jun 2025 08:01:26 +0000
Manifest this update: Mon 30 Jun 2025 08:01:26 +0000
Manifest next update: Tue 01 Jul 2025 08:01:26 +0000
Files and hashes: 1: BU9JhoqrTpIQsWIouXHlxP2UwJc.roa (hash: eExBD31OYoCxpTQ9bbvDSg8Lx/R1p5NUbz4eD5SEWnA=)
2: PMFwvTAxfhGKJmrLSIFVTDEuW3I.roa (hash: HYp8t9eAVcEw+uZrQ21I7eKONuoQGa89OFuwBzm+DCo=)
3: g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl (hash: 1MoPFgN+Z0HWp8QYXtrbCHSR+o3lPlYmLb0CuQ9Bnig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:da:f2:15:5d:9e:ce:0d:2b:72:c8:af:40:82:0b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Validity
Not Before: Jun 30 08:01:26 2025 GMT
Not After : Jul 1 08:01:26 2025 GMT
Subject: CN=d52b2de661148789e9105c21a96f74dcad0405d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:9f:24:71:d2:c3:ee:5b:54:a3:e0:41:93:
84:17:16:61:9b:b3:2b:ef:f0:66:3a:e0:5b:11:89:
02:42:41:b3:80:32:fe:9b:56:74:50:86:40:78:4a:
3b:83:02:94:a4:a1:e1:1c:24:92:52:b6:9c:88:40:
83:03:76:19:b5:39:25:36:3d:5d:51:62:df:93:01:
5f:11:f9:37:5a:9c:bc:d2:d7:da:28:74:3d:6e:5d:
d0:ba:72:1f:b6:09:7c:66:67:80:1a:df:d1:a0:e1:
e6:de:05:34:2d:e9:4a:61:33:a6:cf:fd:2c:3c:65:
c7:e3:53:cf:b7:73:f9:bd:67:a0:49:43:74:c2:71:
63:12:69:83:79:9f:93:8b:7b:2e:c2:7a:ee:ce:89:
c7:67:63:b7:bb:9d:2c:bb:f7:8b:76:46:f7:e2:93:
98:35:be:65:0d:a9:5f:fe:74:0e:b8:da:1c:22:2e:
53:9c:c7:8a:db:3b:5e:6f:b0:7f:44:2f:1b:8c:72:
be:2a:4e:6d:b3:54:00:57:a9:43:b9:d5:d1:18:4a:
8e:d8:a8:09:2b:25:a2:ab:0e:1d:c9:89:1e:ea:64:
8e:82:83:af:23:2c:2d:d2:ba:77:15:50:84:76:a7:
63:cc:b5:92:25:27:9a:80:13:77:54:0b:2c:85:f0:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2B:2D:E6:61:14:87:89:E9:10:5C:21:A9:6F:74:DC:AD:04:05:D2
X509v3 Authority Key Identifier:
keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:12:5c:84:aa:12:4f:f6:ed:6c:09:52:da:0d:48:9d:f8:ae:
d8:5e:64:88:52:c3:1c:f9:4f:19:48:cd:85:a7:38:7c:a6:e8:
6d:e6:00:fb:0a:6a:86:7d:3f:21:57:30:1d:27:29:c4:2c:f7:
f4:3e:a3:f7:2d:fa:d5:da:9c:3d:eb:95:da:e5:09:4a:6e:c0:
88:ba:d7:ef:12:48:8d:74:ad:20:d5:68:57:69:4b:b5:09:bf:
e5:85:14:b8:e1:2a:65:61:18:30:cb:9f:93:a3:5b:a7:09:f7:
29:58:5a:e3:4d:a0:d8:8d:3b:a7:57:1c:d9:e8:c3:d9:6c:58:
39:90:e7:f6:23:55:2f:06:e1:b1:ba:eb:bd:f5:48:49:94:f4:
26:b1:7f:c9:41:d6:99:1f:f1:a5:55:b6:fb:01:d2:18:bc:0d:
5a:be:65:8e:a9:73:a4:18:86:9e:d4:2b:02:41:31:46:b9:5b:
d8:eb:6e:ec:a5:a4:d0:93:d4:b6:70:10:ee:26:cc:50:3f:72:
65:38:1a:7d:f4:be:19:98:c3:92:99:1f:4d:4b:2d:20:70:a1:
16:70:7c:3c:f0:5a:e9:4c:ba:31:49:56:93:d3:96:50:ac:13:
ba:db:e2:ae:dd:7a:0a:e7:a2:13:82:b9:3c:15:17:15:82:cd:
b0:bb:5a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:38:51 2025 by rpki-client