Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
File: RjXaOiCHnlX-loU-DXru_1M4bos.mft (raw, json)
Hash identifier: w+J6LYxdszRVktbOyUWyVrz0OVQcOLig2Owz4Sza56w=
Subject key identifier: 62:8D:99:1C:C4:0D:9F:29:93:4D:FF:E3:96:A8:49:D9:2D:59:3D:75
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Certificate issuer: /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial: 0197B70EA26A004157DDBD85B1AAA0F725EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
Manifest number: 09BA
Signing time: Sat 28 Jun 2025 15:01:18 +0000
Manifest this update: Sat 28 Jun 2025 15:01:18 +0000
Manifest next update: Sun 29 Jun 2025 15:01:18 +0000
Files and hashes: 1: RjXaOiCHnlX-loU-DXru_1M4bos.crl (hash: epTNDzlWq7uiHPtLSBfg8nYKxgzGR/ZRGpBlNFhBcPo=)
2: Z2Ec6FKFCMROAvsvU_-EjGHw4ww.roa (hash: 422PPfALRjVpASZNjTqWvSXQqN/bAdN9tO/keC7QHEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a2:6a:00:41:57:dd:bd:85:b1:aa:a0:f7:25:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Validity
Not Before: Jun 28 15:01:18 2025 GMT
Not After : Jun 29 15:01:18 2025 GMT
Subject: CN=628d991cc40d9f29934dffe396a849d92d593d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:65:1c:cb:8c:1b:ad:a4:ba:b6:90:1d:41:
40:db:bc:04:f2:84:56:88:16:8f:ee:ef:9f:2f:1a:
3b:a5:74:b6:8f:11:da:38:d4:e8:43:1b:64:83:01:
2d:b4:ce:cd:a3:20:f2:99:0d:2a:60:4a:c9:92:80:
0a:b3:69:be:a3:39:cc:43:32:f3:e0:82:46:05:78:
b2:aa:18:30:fe:61:d6:0a:53:2f:4d:0b:02:c6:48:
37:02:30:6e:43:4d:03:0f:4e:e3:46:03:1f:b4:1c:
0d:9c:ed:43:47:9f:3b:e3:09:ed:f3:f8:2b:be:09:
31:c7:6a:2f:55:55:a5:1b:89:b6:3e:52:44:f1:84:
81:56:20:5e:fb:78:15:55:ae:50:2e:91:8e:d3:a8:
4b:dc:67:f7:ee:e4:e9:24:81:6c:04:49:c8:c2:3c:
bc:75:1f:af:ae:61:9b:08:91:f1:57:2d:06:5b:75:
bb:e1:6b:22:cc:8b:68:84:db:44:de:80:e8:7d:ba:
84:0e:38:fa:4a:4e:28:29:a7:bd:30:41:fe:58:0c:
63:a6:bc:79:5b:88:24:9f:ea:6d:f8:9a:fc:0e:3d:
95:8e:53:9f:b1:56:be:84:a9:66:14:c9:33:1a:39:
e0:74:6d:b1:68:eb:51:fb:6e:f3:62:b5:d1:41:b9:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:8D:99:1C:C4:0D:9F:29:93:4D:FF:E3:96:A8:49:D9:2D:59:3D:75
X509v3 Authority Key Identifier:
keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e0:9a:5e:02:e2:8c:13:8e:6f:a5:08:cd:29:ff:f2:04:6f:
9d:16:76:a4:67:8b:4c:88:53:a8:77:67:fb:09:1f:54:f1:43:
b0:fb:6b:93:79:b0:f1:af:56:5a:52:78:88:61:45:56:c0:79:
bd:45:95:9c:b1:26:16:82:f9:d5:8b:dd:b2:1e:74:8e:c2:1f:
a2:c0:1c:90:84:9b:f5:96:95:a7:37:ac:ee:ad:01:e6:86:ee:
85:92:d4:35:91:4a:d3:3e:d7:11:eb:a0:51:ca:8b:99:c9:d2:
68:8c:a4:a8:00:ae:1b:80:1c:56:e9:8f:fa:cb:06:90:f3:c0:
57:a1:c9:2c:56:a0:1e:19:3d:f5:fd:fe:fa:dd:e6:8d:3a:b6:
3e:b7:cf:a6:69:d9:0a:df:4f:94:aa:f7:b9:1b:8a:21:5d:0e:
09:d4:6a:6e:3f:3c:e5:70:08:1c:6f:25:4b:42:bd:cc:b9:f0:
dc:6a:45:60:18:93:da:bf:84:2f:3e:fa:e3:85:d2:f6:8d:6a:
bc:79:b2:7e:03:c6:2b:71:2e:9f:9d:34:97:22:72:0d:a7:fa:
c8:a8:c3:7a:bf:d2:17:19:1e:5f:9a:57:30:bb:ce:c6:52:e8:
d8:69:b8:6f:9b:70:63:48:1e:86:6b:7c:69:0f:d2:b9:13:36:
8d:c9:37:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:46 2025 by rpki-client