Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
File: rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json)
Hash identifier: ZeMDHSQSxisv2Ju1Qf7Xwaid5fZ0hQxzmX3n35nsZtw=
Subject key identifier: 99:EA:BE:95:BC:90:12:4A:CA:D4:FF:9B:FE:77:24:2E:3C:59:CE:41
Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
Certificate issuer: /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Certificate serial: 0197B77C6F7B1B5E28A1A0A61FA6E8AC3556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 17:01:14 +0000
Manifest this update: Sat 28 Jun 2025 17:01:14 +0000
Manifest next update: Sun 29 Jun 2025 17:01:14 +0000
Files and hashes: 1: csdHd_e7Tx65D2MBS9ZtbLUxU90.roa (hash: fNuNtwuPS3v94+W5VQY9K+dMsKggefc0dwxaWQUAwyY=)
2: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: pbppw7wRm/4J7JyYoX8QKF26Ixpa7fTXLqvfLoely9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6f:7b:1b:5e:28:a1:a0:a6:1f:a6:e8:ac:35:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Validity
Not Before: Jun 28 17:01:14 2025 GMT
Not After : Jun 29 17:01:14 2025 GMT
Subject: CN=99eabe95bc90124acad4ff9bfe77242e3c59ce41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:c7:59:26:20:fb:c7:19:a4:06:33:8f:f2:
ff:6c:dd:26:ed:f0:a7:e1:98:18:9c:0f:44:04:3c:
6b:86:1f:ec:5b:e9:52:ff:e2:e5:7f:14:1e:f9:00:
cb:7d:7c:ec:77:87:ce:fe:cc:48:dd:13:42:c4:60:
bf:06:3e:6c:fe:f9:6f:bc:81:ff:6e:80:6c:03:85:
34:28:ed:4f:1f:82:be:91:4d:07:57:1f:a4:77:10:
31:c0:32:84:4e:46:6f:ec:b0:25:fb:12:30:6c:33:
35:e8:cc:d9:20:23:fb:74:5c:e7:d1:88:7a:65:7e:
e0:32:d5:7b:f9:c0:cf:e1:59:5d:a5:eb:8d:51:99:
5a:4c:9b:0c:ca:c8:98:bf:36:4f:4d:ff:2c:47:9d:
d5:8b:18:01:b0:83:77:55:d2:be:19:87:83:da:6a:
76:64:6c:18:3e:6a:28:c1:d8:94:10:a1:b9:38:96:
07:27:d8:f2:16:c2:16:61:b7:bb:df:fa:e0:ec:99:
90:ae:33:69:2c:5d:d2:f2:24:d7:a3:80:4a:0c:12:
87:8d:2c:4c:94:51:8a:b7:b5:50:4f:2c:38:51:3e:
81:c2:3a:aa:a5:d2:ad:69:0e:76:c3:35:ce:35:49:
2e:e1:67:a0:4d:77:4c:0d:18:3b:d9:e0:72:f7:a9:
a0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EA:BE:95:BC:90:12:4A:CA:D4:FF:9B:FE:77:24:2E:3C:59:CE:41
X509v3 Authority Key Identifier:
keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:93:27:85:17:35:53:8f:df:4d:67:50:cf:4a:dd:9c:89:42:
94:2b:de:f0:74:30:74:9b:17:58:95:ff:28:97:4a:f0:91:d5:
3d:57:fb:5c:bc:2c:83:cb:82:f3:cb:8b:45:28:6c:a8:19:27:
8c:17:9a:4c:c4:eb:1f:20:e7:25:49:b8:2f:69:dc:7f:43:54:
74:e5:d4:26:13:40:33:03:08:08:fa:d4:ca:d8:ab:8d:d1:f7:
f5:72:46:ba:06:82:75:88:81:a3:70:b0:f3:69:38:d5:4b:81:
45:f9:f1:55:a0:78:74:eb:47:38:0b:23:b7:2b:b8:2b:cc:17:
8f:b2:07:e9:6f:59:6d:29:1a:08:3e:81:f5:87:f9:a1:9f:fb:
01:f4:d3:8d:e7:4c:7f:7c:c1:c8:48:56:ae:d4:ac:fa:ed:5f:
8a:1f:13:74:b6:65:a0:30:2a:18:a6:ab:a1:5e:40:25:31:85:
a4:c3:20:e2:11:f2:59:09:1d:3f:56:10:34:49:43:d7:58:ac:
d5:06:ad:6a:60:91:cd:d2:44:b8:9a:49:26:31:c9:8f:14:e8:
96:c7:77:e7:c2:bb:44:0a:91:b6:0f:ac:79:15:75:65:db:54:
24:cb:50:ca:33:e6:b0:7f:38:2d:c3:d1:97:0c:a2:ed:be:4f:
54:ff:90:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:38:17 2025 by rpki-client