Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
File: RZR46fHzCyT9FxmNHKyDW8Hk368.mft (raw, json)
Hash identifier: AvhryPADHBOtPQVNilvtJP3Dr9J+tbGzHdNE6LIW7R4=
Subject key identifier: 38:F7:A3:6C:51:5C:B8:EF:1D:C7:9D:0F:D4:83:A1:84:79:28:ED:11
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial: 0197B7457FF497ED878F63D5F404CAEE5714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
Manifest number: 0654
Signing time: Sat 28 Jun 2025 16:01:14 +0000
Manifest this update: Sat 28 Jun 2025 16:01:14 +0000
Manifest next update: Sun 29 Jun 2025 16:01:14 +0000
Files and hashes: 1: Ocy_m2zHXezY_DKukKlr3xhqDhU.roa (hash: UC3MI0ffSuAJ2UoCKWrS6GgqqpWg8XTm0KoUn3rbNKY=)
2: RZR46fHzCyT9FxmNHKyDW8Hk368.crl (hash: yezUDzdGkuw16IjSKfdzSvprD04in6Y1ltgBn5p54IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:7f:f4:97:ed:87:8f:63:d5:f4:04:ca:ee:57:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Validity
Not Before: Jun 28 16:01:14 2025 GMT
Not After : Jun 29 16:01:14 2025 GMT
Subject: CN=38f7a36c515cb8ef1dc79d0fd483a1847928ed11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:2c:18:7f:98:a1:84:b7:c1:8b:d6:19:76:
cf:c3:a4:f4:91:00:a9:89:7d:30:c0:99:87:09:a3:
99:61:29:80:53:66:22:0f:44:5c:7f:b4:fc:c1:61:
6d:33:2e:45:69:1f:ec:d6:03:97:59:2b:d6:20:47:
a6:4a:9f:e9:d9:12:59:07:3e:41:7d:de:26:b4:a2:
2a:f8:7c:7e:58:39:4c:1e:ad:38:ef:22:4d:aa:98:
99:f3:45:24:da:44:91:9a:87:f8:f5:f7:90:b6:14:
ca:f5:cb:bc:3b:f3:10:33:d8:5b:ed:ee:0c:2f:80:
a7:bd:89:61:21:55:8e:0d:03:a5:fa:11:72:ca:aa:
1d:29:ae:23:f8:10:05:d8:3d:13:28:4a:aa:c5:41:
6a:24:0f:52:90:5c:59:ff:0d:7d:59:a1:32:9b:f4:
2f:71:2b:25:94:05:48:2a:bf:a2:09:39:bd:bd:49:
e2:1b:ba:af:25:4c:15:ab:9f:c3:1c:a7:f9:a3:4e:
df:95:83:2a:43:29:91:d8:79:09:52:2e:2e:a1:d6:
df:3d:a3:3b:2a:6a:1e:55:b2:8f:a5:a5:71:14:89:
a2:7f:fc:e9:b9:44:f8:69:18:cb:2e:27:92:1e:37:
24:44:dd:e1:c0:a4:98:27:20:11:98:38:3b:67:b9:
99:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F7:A3:6C:51:5C:B8:EF:1D:C7:9D:0F:D4:83:A1:84:79:28:ED:11
X509v3 Authority Key Identifier:
keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d6:a4:73:91:39:ec:03:db:4a:a7:ff:ae:ac:6f:2f:4c:46:
e4:42:4c:c1:1d:6e:7d:19:a3:03:6d:90:44:f5:73:41:24:7a:
80:2e:7e:3a:b6:7d:88:6f:0e:91:d4:9e:f6:87:49:ee:33:4f:
d6:58:cb:9f:78:df:46:51:43:06:9d:9b:35:8c:49:ef:0b:e9:
ec:ed:03:8c:fe:04:dd:d2:61:bc:f8:f1:d3:5f:14:6b:86:d4:
9c:eb:65:00:d4:b5:57:23:9a:b2:aa:63:a9:c6:c8:bc:31:a6:
d1:bc:e6:b2:4c:7e:23:9c:a8:e5:ed:3d:93:ce:fb:c9:7e:96:
6b:73:58:21:9c:26:f8:ea:4e:06:88:9e:06:1c:31:26:3f:69:
e1:a2:d4:bf:8e:67:96:4d:e9:02:12:49:0e:bd:8c:2d:22:d7:
a1:c1:f9:7b:86:85:71:3b:19:9e:50:81:ae:fb:b6:55:4d:44:
e5:d6:99:de:ae:f4:b5:98:88:16:e1:29:d5:78:d8:bf:34:16:
ed:1a:9b:63:4d:0a:39:38:13:14:65:e8:86:4e:3c:4e:50:0f:
1d:0e:9e:54:2c:e4:be:65:54:a8:e7:b4:9f:ce:6e:ea:f2:9a:
d8:30:23:40:5d:49:48:af:a5:8b:6a:f5:b7:8b:9d:1d:64:e0:
25:56:81:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:33 2025 by rpki-client