Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: GHacmNKvMsh/Kh5rT0kxiY1D7T7i9cazazMed510GDQ=
Subject key identifier: D2:CD:EC:F2:03:79:53:CF:6F:50:22:B8:3B:83:BB:6D:16:9C:47:10
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 01976884E2FA81EB42F7917E3277840CC46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 08C1
Signing time: Fri 13 Jun 2025 09:00:28 +0000
Manifest this update: Fri 13 Jun 2025 09:00:28 +0000
Manifest next update: Sat 14 Jun 2025 09:00:28 +0000
Files and hashes: 1: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: 28DCczloVXDOo1Iu8+VwB5xYMXixFgm4EHmDqT7aOpc=)
2: sZ5FQpagRRLFHDrCpC-6uU_GQt4.roa (hash: R0iOrEjpTafz2w87NNGxT/0GFxwmG8GgeDCdte91gUA=)
3: uIQg-k4QoyqXWfTy_MZ6BVQABQM.roa (hash: Cx2jyvv/VKruIg91hf3AtutnP6nMOk9qU6tmjgX9EqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:e2:fa:81:eb:42:f7:91:7e:32:77:84:0c:c4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Jun 13 09:00:28 2025 GMT
Not After : Jun 14 09:00:28 2025 GMT
Subject: CN=d2cdecf2037953cf6f5022b83b83bb6d169c4710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:83:23:5e:57:21:7f:b4:93:18:d1:2a:18:19:
b0:8e:e0:1d:42:be:04:a9:60:4f:26:0d:14:ec:89:
b0:5c:9b:38:fe:5d:f0:b6:0b:87:cc:fc:67:59:4e:
27:a1:d9:45:64:be:9e:f6:65:74:6f:9f:e8:91:55:
0d:1a:49:d1:e5:cf:7c:b0:00:0d:00:1b:b7:1a:77:
ed:70:23:31:3d:1b:be:2f:73:91:4e:e5:12:d6:68:
d7:fb:e2:08:4e:29:f1:92:0b:56:f3:a3:ca:da:33:
05:3b:c6:37:4c:99:4c:4a:0b:ca:6d:3b:9a:70:ca:
eb:0f:3f:0c:cb:0e:42:b0:4d:97:5b:44:e0:60:a4:
bc:c6:bb:f3:ce:07:b5:b0:80:13:60:7a:06:73:39:
d6:c3:24:7b:ed:f0:93:66:8d:ad:72:d9:a8:8f:a7:
cc:00:b0:b0:17:9f:49:1a:76:f4:71:44:ef:07:e6:
23:1c:4a:c1:81:ca:c1:b5:bb:e4:2d:1e:e9:a2:ec:
41:d6:17:ea:8f:2c:5a:fc:79:74:c5:a9:65:6a:df:
51:f0:49:ea:13:69:cc:c0:a4:70:8c:be:9c:b2:43:
bb:a1:f5:29:54:0a:2e:e2:50:54:44:9e:fb:ed:58:
e4:ee:89:9a:aa:29:6e:d1:c2:73:46:22:0a:77:08:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CD:EC:F2:03:79:53:CF:6F:50:22:B8:3B:83:BB:6D:16:9C:47:10
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a5:9e:66:f4:2a:76:15:8b:e9:bc:67:d9:41:eb:f3:c4:94:
5d:6f:e9:b6:96:5a:e4:f5:ba:64:1f:3a:c7:37:f0:ae:cb:65:
23:c6:9b:d6:a8:5e:33:80:38:ed:85:25:eb:77:38:92:84:35:
65:fe:d6:e9:14:69:21:db:ff:32:aa:e7:a9:67:4c:aa:c5:ba:
37:97:45:c0:a7:3c:5e:1e:96:f4:0e:4d:e8:34:d2:4d:8a:3c:
30:72:8c:cb:bd:82:89:05:0b:e7:ed:8c:28:09:95:bf:53:69:
bc:cd:5c:47:b9:74:c9:79:b0:e9:aa:75:a9:63:45:5e:1f:0e:
2d:07:b1:0f:3d:17:31:96:ed:a7:63:6b:1c:2b:4a:c0:88:b8:
cd:68:9a:51:82:56:19:71:50:0c:7f:56:3d:24:af:b2:2b:10:
3c:36:ca:2a:eb:53:ab:af:3c:92:bd:6c:9f:cd:cb:56:c0:f8:
c4:03:a7:35:ae:d9:1b:dd:be:f5:4d:0b:18:7a:8e:f8:85:f4:
6b:98:82:21:1f:7d:66:ca:e0:f1:be:ff:9d:76:d5:cb:1e:e2:
09:44:f9:58:e7:5c:00:48:07:2c:1f:09:3d:cd:67:68:33:f8:
8c:60:d3:eb:2f:72:2a:ac:19:2e:fc:c2:9f:dd:b4:10:13:1b:
a2:9d:2e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:06 2025 by rpki-client