Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: 0AYvZVRhXyISMvMkaiSwlEjkLEC0V7JtVGvEblllVZY=
Subject key identifier: 15:EA:47:9F:0A:5B:A7:75:BC:46:9A:AF:7E:E9:33:46:B3:3C:B3:0B
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 01976D066085848F904EE2BBCC5AEFF1739B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 06:00:23 +0000
Manifest this update: Sat 14 Jun 2025 06:00:23 +0000
Manifest next update: Sun 15 Jun 2025 06:00:23 +0000
Files and hashes: 1: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: kWgw5kXBMUh9CaY829f2eEmZHbCB9Xz4/dLz5+vnQK8=)
2: zwiEAg55TtHyIaM_PRVFnX4DSAo.roa (hash: ylKaMThBpY1ZvZheIftHUUCXqnEHukLo3wFRWG0DpZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:60:85:84:8f:90:4e:e2:bb:cc:5a:ef:f1:73:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Jun 14 06:00:23 2025 GMT
Not After : Jun 15 06:00:23 2025 GMT
Subject: CN=15ea479f0a5ba775bc469aaf7ee93346b33cb30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a4:b3:99:4f:10:31:73:5d:ca:c2:93:69:2a:
d6:92:4c:18:86:d2:96:1f:c2:1e:d6:4f:ef:6e:ba:
92:94:87:7c:de:dd:cf:57:fd:2f:af:c0:26:75:3e:
fe:61:7a:2c:a8:cc:da:72:f0:46:a1:f1:15:11:4b:
91:be:0e:66:dd:32:c9:28:4b:85:18:ba:14:c4:2b:
42:2d:ed:73:ce:4e:5c:ef:96:86:c4:38:e4:fb:a4:
76:5b:81:c0:18:30:28:f0:63:05:b8:d2:3d:dd:34:
df:53:d2:cc:a3:d2:52:15:95:c2:9a:89:30:fe:8a:
94:d8:88:a0:10:1f:c2:d4:f0:aa:ea:ba:5e:71:25:
71:42:b1:4a:c3:57:86:96:9c:06:a8:3b:a8:f0:ea:
96:59:3d:91:21:3f:36:0c:46:ea:14:dc:eb:fd:fa:
e4:44:14:ba:4f:a8:9e:aa:bb:6c:a9:4d:48:7b:96:
af:15:86:d0:d6:e6:86:54:dd:2e:62:32:8a:06:c2:
f0:06:a4:ec:34:d1:c9:83:b5:e9:36:fa:e3:44:1f:
d1:72:1f:e5:80:6a:21:79:24:40:e3:89:91:de:bc:
30:0a:ec:92:03:db:67:b5:60:71:f3:d5:52:3b:00:
a9:79:24:cb:ed:05:c3:09:e0:0d:aa:2f:4f:9c:20:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EA:47:9F:0A:5B:A7:75:BC:46:9A:AF:7E:E9:33:46:B3:3C:B3:0B
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:48:52:ef:60:c8:79:47:40:f4:76:d5:40:44:d4:94:16:42:
07:a4:c9:a6:81:89:72:13:04:7a:9e:32:47:2d:a2:e8:31:b5:
6c:2a:ce:f9:ce:f5:a6:b2:76:ce:e7:43:f7:08:da:b5:62:85:
f6:68:34:46:97:34:0a:bb:68:c9:2e:ef:14:e6:8a:2b:07:32:
47:0e:fc:cb:da:fc:c9:b7:ea:ec:d0:2b:f0:32:bc:9c:eb:00:
0b:6b:20:92:63:ec:53:1d:b1:f6:03:ec:5c:00:2a:d1:47:a2:
db:3a:ad:4e:bf:e7:7d:52:b7:31:6c:63:5b:73:89:d9:3a:3f:
68:16:40:89:06:d7:bd:a2:c6:a0:37:fb:16:9f:b4:f3:81:8d:
6a:88:cd:f4:8f:41:72:5c:84:47:fa:e5:ef:21:30:2c:e3:f6:
ee:9d:20:cc:3c:09:1a:f8:2a:d7:ee:5a:26:c2:9f:7b:e5:99:
6e:68:3a:e8:f2:fb:66:ce:82:46:72:d7:ef:6a:31:82:ba:7e:
2a:7f:da:ad:dc:5a:5f:9c:e1:43:ee:62:15:f7:69:08:96:49:
29:9f:1d:8a:2c:a6:2a:ec:f0:f4:45:10:fb:05:d4:ea:6a:bb:
f1:88:d1:6d:c7:be:86:e6:88:6b:a9:46:2b:b7:9c:d8:ba:06:
ba:0c:2f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:00:21 2025 by rpki-client