Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier: xKvLFIC/jSmIpUfHotGN582uVelRgV04fOGpb/lwMBs=
Subject key identifier: 4A:FC:76:45:A4:3E:00:61:CA:42:26:F3:0E:2F:FD:9B:11:96:F7:CE
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 019774F7C31692BEB6260E5BA18B73D3207D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number: 1540
Signing time: Sun 15 Jun 2025 19:01:23 +0000
Manifest this update: Sun 15 Jun 2025 19:01:23 +0000
Manifest next update: Mon 16 Jun 2025 19:01:23 +0000
Files and hashes: 1: DuTLHmPWVWziogaT97oFAa9mDRE.roa (hash: PMtNyjUzQWlQv3rVcKbrWnO8Vocq0JKKdYATvPbNA78=)
2: X3CBuLjI2iLdZV3cmRV8Xr8zH-8.roa (hash: nRhR1UBTZd6YJqMwitmIM+7shNJ21X2SOgFJgRIoWfs=)
3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: 31XTqEt+2FMT8iSMmgCUd7WU5gmDqI47y6qc/5kJWNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:c3:16:92:be:b6:26:0e:5b:a1:8b:73:d3:20:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Jun 15 19:01:23 2025 GMT
Not After : Jun 16 19:01:23 2025 GMT
Subject: CN=4afc7645a43e0061ca4226f30e2ffd9b1196f7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4f:6b:15:29:3c:92:08:1d:c3:5d:08:71:d3:
62:bb:4d:f7:90:51:7c:a1:29:4c:31:44:1c:eb:2c:
97:4e:7e:79:07:e9:b6:41:29:88:01:fe:8e:03:16:
6e:9e:f1:03:06:16:44:a5:b8:1d:a0:f0:e3:31:12:
e3:32:66:da:bb:0b:89:6f:d9:a6:91:32:c7:1e:d8:
e7:49:97:af:d8:da:28:fd:df:2b:4a:16:c4:31:32:
da:9c:5e:78:5e:8a:fa:58:e7:9e:55:1a:70:2c:dc:
1e:97:ea:42:b6:0d:78:7b:40:1c:0a:85:b4:91:96:
18:81:d5:c9:57:58:15:66:7a:e3:75:e3:79:e9:35:
4e:ad:22:8b:bc:da:6e:04:74:25:14:b2:bf:51:bf:
89:e4:9d:d7:48:c6:04:a9:7f:d8:d5:06:2b:69:b2:
f8:b6:8b:6a:65:67:6f:49:c5:15:59:eb:6c:e4:af:
04:42:22:2d:c1:e2:58:a3:2b:56:46:ea:aa:89:ca:
29:cc:0f:bf:58:ae:3d:10:ed:f8:a4:a0:e7:78:f1:
7a:ea:0f:b5:9b:26:81:1b:6f:05:4b:af:c4:2d:6e:
3d:a9:35:61:29:fa:18:0e:13:66:85:c3:0a:ae:0f:
ea:f4:2d:8b:da:8a:da:56:bf:fb:53:a0:5c:c5:d7:
91:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FC:76:45:A4:3E:00:61:CA:42:26:F3:0E:2F:FD:9B:11:96:F7:CE
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:79:80:52:ce:43:e7:df:b9:a3:59:ca:8a:10:e3:33:1e:b6:
67:ad:da:59:8f:b6:53:e0:fd:2d:8c:76:ea:0c:31:a6:f5:a6:
98:ef:03:bd:60:72:91:87:71:21:d2:1b:cb:c3:bd:98:2d:68:
e9:92:66:9f:13:21:2f:7b:5b:3c:21:34:99:be:11:39:38:5c:
a4:82:b1:11:cd:e1:55:16:58:c0:dd:89:36:ac:a2:49:e6:fa:
9b:b3:b1:b1:f0:9e:95:7f:ed:26:8c:47:9e:83:c7:4a:cc:65:
47:53:fb:bb:d2:f9:2c:e7:87:f9:4f:d5:ce:62:9a:cb:b9:2a:
f3:39:e9:c5:c7:5d:ac:ba:c5:c4:01:55:26:ec:7b:af:61:68:
02:3c:56:01:55:f3:cc:42:05:48:22:14:65:3a:49:4b:d8:ba:
1b:7e:ee:90:64:2f:95:32:9f:a4:3f:a2:d2:78:4d:b9:d0:8e:
0d:19:8f:18:81:38:0c:d8:87:37:26:d0:7f:8f:5a:f6:7b:16:
6c:fb:5f:b1:26:be:74:40:18:fc:ae:9e:2c:b8:c7:7d:cc:02:
3b:82:7a:22:83:5f:95:fd:31:13:7b:b7:82:dc:2d:de:1f:a0:
37:a0:4e:c8:10:18:bd:c5:8f:9e:3b:ac:98:f2:a4:8a:4c:23:
09:73:27:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:29:19 2025 by rpki-client