Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
File: RkXJxY1aSZm13OngcNMvSI4zH1I.mft (raw, json)
Hash identifier: igmnLgFNLgbn7SXBPDUqDmNreoOqkvyjlgOKTua9HqQ=
Subject key identifier: 25:77:7D:76:41:9A:75:DB:03:D4:F6:E6:BE:6F:E0:2F:14:8F:F4:8B
Authority key identifier: 46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
Certificate issuer: /CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Certificate serial: 0197B5C48F0C1483E05421D9D04903CAF8E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
Manifest number: 03ED
Signing time: Sat 28 Jun 2025 09:00:47 +0000
Manifest this update: Sat 28 Jun 2025 09:00:47 +0000
Manifest next update: Sun 29 Jun 2025 09:00:47 +0000
Files and hashes: 1: RkXJxY1aSZm13OngcNMvSI4zH1I.crl (hash: sBrADRFAk+NundvQHvJ+yHnKwVao9WvkAViMVaiSCYg=)
2: S8w484i2So0upLimT4DivXMFWTc.roa (hash: Xwh1nJvihxD2+JIu0EcE5o1EcOXEFkB9P4xQdM683xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:8f:0c:14:83:e0:54:21:d9:d0:49:03:ca:f8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4645c9c58d5a4999b5dce9e070d32f488e331f52
Validity
Not Before: Jun 28 09:00:47 2025 GMT
Not After : Jun 29 09:00:47 2025 GMT
Subject: CN=25777d76419a75db03d4f6e6be6fe02f148ff48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:f6:97:05:3e:d8:66:96:43:db:ea:0d:46:
f6:df:cf:8e:8b:4e:3b:33:fe:f5:30:5d:34:56:8e:
00:82:a9:1c:e6:9a:01:17:01:47:48:c8:02:43:3f:
91:98:7f:f1:a8:83:1a:88:24:d3:2e:e3:13:f1:b6:
8b:e8:89:ee:f9:8e:00:a8:a6:9f:e4:c3:db:bf:4d:
95:d1:73:60:53:56:04:7e:3c:48:91:c0:b2:91:e4:
38:c6:50:c0:52:3c:e1:94:70:cc:20:f2:83:51:3d:
a8:17:fe:34:cc:1d:7b:e3:fe:24:ef:61:ad:63:d6:
ff:c6:80:ca:c1:2b:e0:8b:32:a2:a7:86:ac:72:da:
f4:a9:c9:00:6c:9a:5b:60:fa:27:9f:a1:fe:cb:35:
2f:9d:74:b5:e3:0f:40:49:63:22:20:ba:16:7e:6a:
d5:73:a5:6e:1c:45:36:53:13:13:3e:2a:5c:14:78:
a8:ea:94:3e:1e:66:73:5a:44:e8:5c:46:6c:2f:55:
fe:e3:58:4e:14:ed:df:08:3e:f0:68:99:1a:78:69:
be:80:3c:7e:53:46:5e:52:ee:81:e4:5b:89:30:f5:
11:c8:e3:ff:8c:5c:d8:45:6b:6f:43:6d:6a:4f:d4:
2b:d0:0f:16:3d:d6:23:08:7d:1c:e7:92:61:c3:2b:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:77:7D:76:41:9A:75:DB:03:D4:F6:E6:BE:6F:E0:2F:14:8F:F4:8B
X509v3 Authority Key Identifier:
keyid:46:45:C9:C5:8D:5A:49:99:B5:DC:E9:E0:70:D3:2F:48:8E:33:1F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkXJxY1aSZm13OngcNMvSI4zH1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6c5331-dc1b-4f8c-9d3d-28bf1d33aa90/1/RkXJxY1aSZm13OngcNMvSI4zH1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8c:1a:42:37:2b:c1:64:8b:61:89:d3:f8:c6:e1:a5:90:1a:
3e:ff:11:ef:58:f6:53:b0:1b:76:15:77:0c:f6:f0:a6:12:c9:
4a:d2:ab:d0:f4:f0:ae:c4:f8:f2:f1:2c:c2:da:0e:08:22:b8:
11:8c:11:58:80:ba:32:a4:43:c0:02:d3:30:59:94:5c:90:75:
8b:53:cd:26:bf:2a:9f:ce:dc:ac:6d:0f:2c:6d:f2:75:4e:08:
7c:bb:6b:c5:83:98:74:30:b6:df:87:83:a8:d0:48:e6:b0:14:
b9:b2:95:9d:f8:8d:bd:b5:61:3f:d7:df:c6:fc:25:8d:60:ef:
cf:d6:66:c3:8f:42:36:77:32:ed:eb:19:69:bb:1d:7a:13:29:
f3:59:9e:fa:79:c0:05:9f:84:0c:80:64:15:17:0e:1b:58:83:
f1:b2:87:f5:83:eb:0d:6e:2f:53:1a:1f:a9:e7:59:e5:69:16:
02:46:72:15:c0:2e:46:12:74:89:f0:47:59:50:8b:d5:6e:c9:
18:be:a6:29:52:da:ea:1d:0c:75:e8:12:dd:8e:45:d2:13:8b:
13:da:a8:01:b7:83:4f:bd:2e:72:97:81:a5:d4:e6:ac:0e:18:
e1:7e:55:73:6d:b2:a2:1a:2e:d1:9a:5e:ef:d9:98:2e:d3:72:
c8:c6:3d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:39 2025 by rpki-client