Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
File: RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json)
Hash identifier: lJfB4cpDIE90ZLIrpZ1oCJLn/eKPauBtAoWux/0dhcc=
Subject key identifier: D0:3A:DD:37:C5:5E:B0:71:1E:4C:F6:1B:9C:55:97:8F:11:87:DF:0F
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Certificate issuer: /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial: 0197B5C4F8473171BFB6E6F949F211E3EBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 09:01:13 +0000
Manifest this update: Sat 28 Jun 2025 09:01:13 +0000
Manifest next update: Sun 29 Jun 2025 09:01:13 +0000
Files and hashes: 1: 4Fc8DyjVSWCEsU_EUG8kyZV4jp4.roa (hash: f+6PC2+8l4GQP1uSjRq7ZupGlBtpnFIedMNKrq+WMR4=)
2: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: BA7A6Hon6NLorgoGAmMGZUAetYn5CmZuwwJU9byajUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:f8:47:31:71:bf:b6:e6:f9:49:f2:11:e3:eb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Validity
Not Before: Jun 28 09:01:13 2025 GMT
Not After : Jun 29 09:01:13 2025 GMT
Subject: CN=d03add37c55eb0711e4cf61b9c55978f1187df0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:b7:7f:ee:aa:b8:9f:2d:c3:32:92:c8:76:
74:b8:a8:74:e1:a1:83:59:67:1e:02:5d:62:26:0c:
86:a8:7d:63:71:94:8a:f6:83:a5:74:7f:7b:2b:64:
ae:c6:34:98:d6:92:11:fb:db:fe:57:dc:4c:a2:c5:
f7:ec:71:c7:1f:a2:47:18:3c:92:31:68:ea:a7:15:
41:bc:53:33:8f:1a:00:ca:80:a6:d1:3f:c8:cf:96:
db:d1:2b:4d:71:64:b4:97:5a:8d:7f:19:a6:75:ac:
5d:8f:34:53:70:b6:09:8c:8b:55:4e:cc:69:10:72:
fa:77:76:88:53:63:e0:e4:20:f0:8a:92:8f:82:10:
31:d6:b8:6a:6a:ba:6a:cc:46:3c:55:7a:f1:1e:22:
0a:55:ea:a8:53:09:07:60:2f:8c:e1:86:9f:a8:97:
60:c3:ad:3e:96:61:c3:f9:da:0d:57:bf:d1:71:86:
45:a1:f7:c2:07:e5:8a:3f:aa:d0:ba:07:8f:da:d6:
c4:89:b1:de:51:dd:99:01:40:f9:0f:2a:64:e6:3f:
9b:d4:e0:21:9e:3c:d9:f6:39:25:af:f6:7e:87:74:
e5:75:e7:2d:58:bc:37:f2:59:58:b5:4a:ac:50:39:
76:23:7d:cd:1b:19:88:1e:24:c8:0f:a9:1e:81:01:
4c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3A:DD:37:C5:5E:B0:71:1E:4C:F6:1B:9C:55:97:8F:11:87:DF:0F
X509v3 Authority Key Identifier:
keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:40:72:06:c2:9e:72:fc:7e:7e:20:1d:b8:f6:3d:c6:b2:d3:
b0:f7:fe:35:6a:44:01:37:f0:48:21:d1:17:af:10:ec:74:10:
b3:35:7a:5f:9b:94:4a:b7:d7:87:21:5a:b9:c5:3b:12:d5:02:
22:fe:54:18:7d:b6:f3:b2:64:3b:e4:8e:49:a1:1a:a3:e2:79:
ba:83:50:6f:72:22:2b:3e:ab:cc:84:ae:6f:5d:ed:ee:85:c6:
ce:99:9f:1a:57:fe:d3:29:7a:27:f6:4e:b7:5d:e0:a2:6b:4b:
2a:12:65:1b:03:d2:18:dc:9f:64:0f:a5:e3:0a:08:77:a2:9a:
0c:47:5c:f6:f4:6c:bc:83:61:89:4e:63:22:70:aa:5a:8e:b8:
03:54:98:3a:40:04:89:9d:15:69:cd:d9:9c:57:84:f8:d7:96:
0e:15:4c:15:c8:44:cd:d0:44:f9:e0:0d:01:37:83:f5:c9:28:
1f:a6:a8:7e:4d:4f:72:de:b1:ec:14:6a:f6:61:d9:a1:24:75:
e7:92:93:96:33:34:d0:8d:08:e4:20:78:0d:43:6a:e2:b7:57:
c7:99:ed:57:ab:84:1c:bb:74:59:33:cf:53:bf:c3:50:dc:91:
c6:e3:50:70:d8:53:6f:d6:76:ac:6d:8f:21:5a:b1:d7:c0:80:
b6:75:41:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:46 2025 by rpki-client