Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier: Wa3wngi2eAnio9OdJTHaaFN+bJcUUJHkBuTgY/8GjZA=
Subject key identifier: 73:C2:6D:82:5E:0A:E0:F7:AA:AB:DC:FD:91:4A:77:3F:A6:DE:51:B3
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 01976E50C249CD0EB4C9584417FE0572F3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 12:01:15 +0000
Manifest this update: Sat 14 Jun 2025 12:01:15 +0000
Manifest next update: Sun 15 Jun 2025 12:01:15 +0000
Files and hashes: 1: Obsiy3NGEoUjL-DLQo0yhLx4KAI.roa (hash: p9j2sVfI93AXLXtc3YNcT/Xcs3W13x3825+kRDw3Ko8=)
2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: gPaM2FT2OCwIV60cugCOrVSl9AgMtZg6FhwjVhAhqGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:c2:49:cd:0e:b4:c9:58:44:17:fe:05:72:f3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: Jun 14 12:01:15 2025 GMT
Not After : Jun 15 12:01:15 2025 GMT
Subject: CN=73c26d825e0ae0f7aaabdcfd914a773fa6de51b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:83:82:0c:7b:48:26:b2:46:52:1a:b0:83:
1e:f2:b7:da:9e:c6:64:25:50:fc:53:8d:af:39:81:
b9:31:98:be:56:f4:f2:02:10:ae:dc:75:8c:1b:18:
68:e8:63:52:e6:a1:c8:37:9a:68:62:22:91:eb:59:
de:c6:bc:5b:80:b1:c8:29:a1:c9:a3:1f:22:67:bd:
a1:90:50:1b:ce:9d:14:3e:7e:26:2c:f5:7b:f5:88:
5a:00:d0:3f:e9:e4:3d:6a:06:2c:8c:d1:29:ae:64:
f3:6d:b1:39:2b:d9:da:57:e4:5c:cb:2d:68:1c:1d:
43:8a:6a:55:cd:9a:58:ba:c9:a8:52:d9:f5:fb:2d:
15:b6:1d:71:ef:19:0f:51:31:b5:e7:7b:3b:f6:f1:
af:18:a8:f6:4e:36:28:96:5e:21:14:68:3b:2a:fb:
bc:8b:9e:66:1b:cd:cb:64:5f:01:80:3e:5a:94:87:
4a:83:bb:50:f0:f9:a8:e9:7b:da:00:f6:1c:96:c9:
7a:d2:54:44:5f:e0:c3:c1:e2:d7:5c:69:9c:fb:08:
d7:a7:c8:20:c8:92:e2:2e:59:7e:58:e3:0b:b9:dc:
82:b8:9c:7d:c4:70:c7:f7:1f:63:6e:82:8e:03:73:
03:68:34:5a:42:18:45:0d:34:24:ef:9c:8d:6b:22:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C2:6D:82:5E:0A:E0:F7:AA:AB:DC:FD:91:4A:77:3F:A6:DE:51:B3
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:23:b3:14:71:03:bc:04:88:40:58:f5:cc:ba:5c:d7:30:58:
0a:88:71:9d:27:c0:f0:62:46:62:fb:43:d2:9b:0e:74:45:3e:
10:ed:e7:9f:a8:43:9d:48:73:b2:03:14:85:58:cf:e6:e0:63:
46:91:ea:35:2d:0d:09:3b:25:73:cc:9c:df:5c:e5:c9:93:07:
f0:ab:a4:3c:fe:53:e2:5b:76:b8:64:ec:40:1c:20:1b:80:bd:
72:70:70:48:05:be:6e:c7:05:66:ff:06:95:17:0f:5e:a0:28:
eb:fb:cf:6a:ff:c8:82:91:9f:89:66:fd:9a:87:61:11:d6:da:
df:d3:07:41:20:d2:d8:74:90:d7:7d:a7:ff:ba:16:d5:54:d2:
37:ec:13:60:f8:3c:bd:5e:64:0f:89:7c:d4:a6:ff:34:a4:1a:
80:f0:76:68:bf:48:2b:50:b4:f8:c5:e0:6a:3e:ab:fe:46:44:
ac:0d:a2:f0:c0:e0:95:7b:14:28:8c:ed:f4:5a:cf:27:c8:c9:
e4:5d:82:c1:93:a2:12:a8:e4:9d:66:5c:84:0d:ac:eb:d3:99:
53:28:ef:48:b0:02:f6:c9:4c:7b:1d:b9:31:4a:3a:c5:76:c7:
d6:fe:d3:b8:76:6d:0a:ea:c2:40:63:83:02:4b:da:1d:03:d8:
54:90:f7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:31:09 2025 by rpki-client