Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
File: RfwKpabDOR7__6g0JbI7JkxxCF8.mft (raw, json)
Hash identifier: 6MXptjGjrfEGBR0GgoWEaYseyclymheIP+B6SiCJ6Qk=
Subject key identifier: 2C:1F:3B:05:4D:FC:5F:8C:24:4D:B5:02:02:E7:FE:6F:82:C1:BF:D7
Authority key identifier: 45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
Certificate issuer: /CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Certificate serial: 0197B5FC0D61E3568A1FFB1325FB3EF7BDA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
Manifest number: 0365
Signing time: Sat 28 Jun 2025 10:01:23 +0000
Manifest this update: Sat 28 Jun 2025 10:01:23 +0000
Manifest next update: Sun 29 Jun 2025 10:01:23 +0000
Files and hashes: 1: AtEE45wMuuWclU17cb1kVGtiK-k.roa (hash: zV0IMkpRcApVZ59kj9E+ybhQgMo26h1xRqM1Q3Q35gM=)
2: RfwKpabDOR7__6g0JbI7JkxxCF8.crl (hash: i/S8dNcZUT4sgayMpfJRuG1ra9Q0cdJzkdz1mt0pB3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:0d:61:e3:56:8a:1f:fb:13:25:fb:3e:f7:bd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fc0aa5a6c3391effffa83425b23b264c71085f
Validity
Not Before: Jun 28 10:01:23 2025 GMT
Not After : Jun 29 10:01:23 2025 GMT
Subject: CN=2c1f3b054dfc5f8c244db50202e7fe6f82c1bfd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:33:0f:ff:09:ba:13:56:ba:7f:5f:42:c4:01:
1b:da:b7:d1:5a:80:0d:89:e8:f4:a0:75:b2:66:19:
51:07:e9:60:ff:57:1f:c0:21:96:8e:61:66:47:5e:
c7:a8:59:05:54:bb:d7:49:8a:00:9b:5e:04:e0:16:
8a:2c:60:85:d6:50:c9:d4:07:94:64:41:3f:a5:6a:
26:57:56:75:95:9b:40:0d:c5:38:be:86:48:5e:45:
dc:e9:08:1f:0e:03:35:b9:5f:fd:7d:4b:82:c2:5c:
bd:c5:ba:ca:15:6e:0b:f3:cb:1d:ea:d9:32:46:c2:
5a:ab:6c:ee:1c:f5:fd:13:25:48:e7:dd:7e:e0:e5:
5d:05:a9:72:34:49:fa:84:4f:52:50:98:de:e3:69:
d4:ca:5c:0c:a9:f9:b3:5e:b4:b1:b8:cc:d7:c1:23:
80:80:b2:89:e2:d1:2b:fa:cf:66:cc:e3:8b:b6:3a:
4b:f8:26:d1:78:fc:df:93:c6:93:81:1f:f6:a0:b4:
a7:d8:f1:30:47:af:9b:47:6f:6b:fe:ff:91:01:de:
84:d4:ae:3c:8b:18:bc:3f:d2:4a:c6:76:3c:5a:a8:
27:7c:47:b7:05:22:d3:1b:6f:47:16:48:4f:31:63:
f2:07:86:b3:cc:86:f1:49:15:c9:c3:f2:6a:47:91:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1F:3B:05:4D:FC:5F:8C:24:4D:B5:02:02:E7:FE:6F:82:C1:BF:D7
X509v3 Authority Key Identifier:
keyid:45:FC:0A:A5:A6:C3:39:1E:FF:FF:A8:34:25:B2:3B:26:4C:71:08:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfwKpabDOR7__6g0JbI7JkxxCF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/73c60b-18cd-425b-8e6f-92719b00bbd4/1/RfwKpabDOR7__6g0JbI7JkxxCF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:aa:d8:84:29:ed:de:5f:2f:17:4a:70:bc:fd:4f:43:9c:38:
58:74:fc:56:1d:2e:44:4c:4d:ec:fa:9a:73:96:65:62:4b:cc:
c1:0a:12:d4:1c:d3:24:20:d6:7c:5f:cd:62:9b:1c:c3:77:d5:
42:ab:da:ce:1d:4f:82:b9:1a:68:3a:c9:a7:ec:2a:55:96:e0:
4c:2c:08:24:4d:87:c8:f6:4c:01:22:86:6d:2a:86:f8:99:e5:
5f:b9:51:a4:f6:b6:64:67:f1:92:96:dc:d9:3e:44:0c:01:25:
bf:ec:73:c6:b2:82:7e:6d:d7:fc:c6:3f:d0:e1:7f:23:7d:7f:
ac:69:b7:61:21:f7:6f:53:a6:ec:4f:3d:4b:b4:d4:e9:bc:cb:
9c:3b:b8:66:8a:22:ce:ae:c3:c2:06:05:c2:34:f5:27:ee:dc:
41:08:dd:1d:9e:5b:02:dd:9a:60:c0:36:51:1f:0e:c5:bf:ce:
22:ca:3b:80:fc:b6:1b:c6:18:1c:56:71:ae:ff:3e:dd:43:1b:
1d:43:0e:ce:7e:81:7c:53:0c:a1:fc:5d:b1:d7:74:04:b7:85:
14:83:40:d3:e5:79:d2:21:2c:4b:13:81:b2:47:af:a5:54:a5:
00:31:28:74:1b:85:6e:13:20:d0:20:5b:8b:a6:35:cb:2d:4f:
e8:a4:2c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:18 2025 by rpki-client