Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
File: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json)
Hash identifier: dYAvrVJD+cW1tBeEfs7i2eBfb1tPiNFZpCopsEx6HpQ=
Subject key identifier: 61:39:40:C2:D3:26:0E:C8:1E:2A:49:7C:7E:FC:E5:BB:C5:55:5A:EA
Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
Certificate issuer: /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Certificate serial: 0197B6A13E45AA2076FA2B3BAB50BDDD410A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
Manifest number: 0960
Signing time: Sat 28 Jun 2025 13:01:49 +0000
Manifest this update: Sat 28 Jun 2025 13:01:49 +0000
Manifest next update: Sun 29 Jun 2025 13:01:49 +0000
Files and hashes: 1: E5xFDK9_S5iJGP4sFeJ9ooZosHI.roa (hash: AbosUOGwDkylbwXsNTmNDaibnmXnMj0HIqZzxGPKQ6U=)
2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: fkrQVakEDrOcEDt9+xbueXEJs+gY/CAXAt92W/sJmAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3e:45:aa:20:76:fa:2b:3b:ab:50:bd:dd:41:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Validity
Not Before: Jun 28 13:01:49 2025 GMT
Not After : Jun 29 13:01:49 2025 GMT
Subject: CN=613940c2d3260ec81e2a497c7efce5bbc5555aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:5c:d6:86:e1:5c:2a:79:ea:08:54:53:b5:
c2:17:8a:14:a9:71:67:84:68:12:f6:df:81:14:94:
1b:9b:19:d4:0a:8f:72:ea:c0:e2:cf:8c:0c:42:6b:
95:11:aa:e4:d5:1e:cb:5b:97:60:56:42:a2:ae:ba:
36:2e:bc:02:b0:77:86:b8:b2:eb:0e:9b:7d:c3:9a:
54:a8:69:83:13:e1:7b:d1:6b:57:ae:82:cd:a9:aa:
80:04:9e:db:f7:1f:1e:90:15:92:13:f5:14:81:17:
21:a3:14:21:c2:22:ad:99:5d:39:ce:3e:22:a1:a1:
dc:8d:56:7f:49:24:2a:df:46:31:3e:95:c8:ce:c3:
c4:b0:9e:64:fe:1b:cb:17:4c:c3:23:50:df:b7:4f:
ff:ea:3b:c2:22:a9:7c:38:a5:09:96:e5:30:28:7d:
11:68:1a:90:46:4e:b0:6e:af:d7:19:da:5e:32:b5:
99:2c:bd:ee:0b:30:40:2a:bc:76:f0:b4:e4:96:76:
ce:e6:b8:df:0b:c2:f6:62:c7:a9:2a:6a:6e:01:8b:
4f:f5:94:5c:58:88:2e:22:5a:28:3e:17:55:2d:7a:
ed:d8:06:86:48:7d:d5:1b:c7:76:3b:74:67:99:47:
06:db:f9:2c:8f:89:f1:53:84:73:af:4c:58:d6:11:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:39:40:C2:D3:26:0E:C8:1E:2A:49:7C:7E:FC:E5:BB:C5:55:5A:EA
X509v3 Authority Key Identifier:
keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:51:39:74:ff:e1:8f:2b:8d:7f:44:cb:5e:1c:8f:d9:2b:b3:
df:fd:95:3a:e1:af:e7:59:3a:df:8f:5f:75:82:d4:5b:e6:fe:
09:5a:c3:47:93:54:4e:5a:f5:9b:f2:fd:08:ee:91:0f:81:62:
17:ad:ed:21:5b:b2:b9:72:81:d6:1b:a4:5a:3c:18:5e:ec:07:
7e:7f:34:93:e5:36:ea:27:7d:6e:ca:c6:2f:11:89:25:a9:f8:
53:cb:47:42:35:76:22:aa:8a:e8:fb:93:b4:4a:e0:d7:43:e8:
78:ec:6f:71:ad:65:72:7f:62:b8:1c:31:09:a8:d6:f3:36:78:
f1:4a:c7:b1:66:34:7b:7e:fe:1e:98:1e:5b:21:00:43:f8:9a:
f4:c5:94:80:8e:35:99:4c:0a:16:73:ed:79:61:dc:ac:b2:0f:
9c:35:2a:7f:a4:26:1f:a7:18:16:fb:bf:63:8d:26:a0:1b:cb:
6b:f7:49:c1:1a:b3:16:c9:c9:45:dd:ff:f3:31:65:0d:ca:1b:
e6:b0:b0:98:47:f7:6b:74:03:12:d0:a2:cb:d9:4b:89:bc:7c:
35:25:b8:20:8d:18:9b:f6:1f:0c:40:e0:bd:73:16:89:c0:bc:
b5:b4:e8:88:6f:a1:92:4c:b3:10:06:02:27:73:78:4f:11:cc:
2e:54:c0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:46 2025 by rpki-client