Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
File: rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json)
Hash identifier: MsPNBOco6RLN0ZAachD+rXmlAnd8m4woi/FolqMBjos=
Subject key identifier: 6F:EC:6E:AC:DC:97:C7:8B:F9:3C:76:7F:60:33:B9:87:BA:F9:B5:52
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Certificate issuer: /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial: 019779416D464937C3F51E86C48B6B3E31A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
Manifest number: 109E
Signing time: Mon 16 Jun 2025 15:00:20 +0000
Manifest this update: Mon 16 Jun 2025 15:00:20 +0000
Manifest next update: Tue 17 Jun 2025 15:00:20 +0000
Files and hashes: 1: crHez21ajs4tpxPy7D0FO2U5bxU.roa (hash: gCTLggUH/wf+1HoWxwo5Fpy8idWpj7d4gVSkhA0S2qM=)
2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: bHKuSt7kYPieeae+aqSmTpRrR7LXsNS21DOsi1A2MdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:41:6d:46:49:37:c3:f5:1e:86:c4:8b:6b:3e:31:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Validity
Not Before: Jun 16 15:00:20 2025 GMT
Not After : Jun 17 15:00:20 2025 GMT
Subject: CN=6fec6eacdc97c78bf93c767f6033b987baf9b552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3f:23:28:6b:a5:eb:ff:0d:ba:07:e8:9a:7e:
cc:9e:eb:17:3c:44:70:8e:bd:ad:fe:45:a4:54:b2:
a8:00:02:76:77:a4:36:51:0f:70:8e:0e:f0:28:b7:
9c:35:28:9f:df:c8:ff:71:db:4a:5e:87:cb:53:2d:
fe:e0:21:61:97:34:4f:f7:33:5c:ec:c3:d1:54:96:
04:86:94:35:7d:a4:77:97:2c:37:ac:5f:10:1f:2a:
9f:02:8a:4d:48:23:1f:26:28:7f:e7:27:d5:9b:6d:
6b:6e:b0:d9:e3:0b:0c:b5:09:31:1f:c4:b6:f6:a4:
ab:94:0f:f3:12:4d:49:2f:ba:1b:6b:14:da:30:ab:
e6:bb:da:b1:d8:70:cb:fe:5d:95:45:f6:07:94:ac:
3e:6f:ee:54:64:4a:af:b1:d3:66:a9:42:19:6e:d1:
be:9b:25:5d:56:95:f2:ab:82:17:3f:c5:4b:92:be:
d2:18:e1:53:34:b4:33:28:12:89:b1:08:dc:c9:99:
f4:11:6a:19:19:75:da:98:29:52:8a:d1:60:25:d2:
8d:0a:b4:ba:98:9d:49:dc:43:8c:5c:70:e0:2e:f7:
58:9d:86:6a:cb:f9:62:3e:aa:88:fa:6d:68:fc:d1:
5c:82:42:2e:9e:2c:dd:5c:3c:44:65:21:8a:8c:da:
42:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EC:6E:AC:DC:97:C7:8B:F9:3C:76:7F:60:33:B9:87:BA:F9:B5:52
X509v3 Authority Key Identifier:
keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:16:c7:22:b3:f4:83:5f:95:a6:73:5f:34:e5:23:e1:e7:b1:
b4:10:aa:a7:c9:42:39:99:d0:fa:e8:12:4a:9e:14:e7:53:a8:
9d:76:7b:4c:be:ee:2c:2a:ca:a3:66:f4:6f:3b:e7:0e:95:4d:
62:ce:3f:f4:ac:a1:a8:ab:93:16:95:3d:aa:57:27:3d:ae:49:
b6:5b:40:c6:23:76:0c:1e:ea:8b:3d:dc:82:9b:57:3d:80:f1:
f3:15:35:49:7a:33:54:e6:f4:ab:95:e0:68:3e:c4:54:5c:a3:
5e:ba:76:60:4a:35:b8:44:73:d1:ad:1f:56:84:46:f4:22:63:
7c:18:16:d6:12:37:43:90:4d:be:99:b6:4d:1e:ca:fc:d1:74:
b6:6d:35:c6:51:ee:62:1a:a9:9e:9e:26:93:25:53:8c:0c:34:
f0:3b:d4:10:bc:d1:82:6f:d7:ee:83:10:66:ac:a1:68:e4:36:
c4:24:47:63:f8:5d:f3:9d:40:89:3c:aa:66:a0:af:e9:c3:89:
7b:a2:3a:58:df:0c:1f:60:4e:d9:1d:30:e0:d2:18:af:54:17:
00:59:52:f9:ae:31:3e:dd:e9:d7:42:fc:bd:06:96:b8:ba:32:
83:33:47:d7:27:31:85:70:57:22:64:81:9b:cd:bd:0e:fa:e6:
fe:db:88:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:50:54 2025 by rpki-client