Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: EBZS83b+GRE9Ul1NUOE7gOE99uOms88gE6Smn6MD4Ek=
Subject key identifier: 42:70:E6:15:38:F8:6E:36:F5:A9:16:30:FB:DF:DE:8B:09:DE:95:74
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 01987CADF57EBC0267BEBA7ABC5AE2F3A502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 1628
Signing time: Wed 06 Aug 2025 00:00:31 +0000
Manifest this update: Wed 06 Aug 2025 00:00:31 +0000
Manifest next update: Thu 07 Aug 2025 00:00:31 +0000
Files and hashes: 1: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: oibB1QATc+S1yxu5V1WQ6ACMp41vYj7q9MDzwwZemvE=)
2: SFYQtUf8h78RR3sYV-5vV65d0GI.roa (hash: k8VC+Pkqjm+Q/34YSS05tLomED6YZDaGOWiNO2M8zlM=)
3: cQWK86wyTE6QykBYGD0IQXVxmGU.roa (hash: YU+GQaBeZSBZ4pnqlkuWqIUXGdhcGs2HRIrroMn5n04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ad:f5:7e:bc:02:67:be:ba:7a:bc:5a:e2:f3:a5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Aug 6 00:00:31 2025 GMT
Not After : Aug 7 00:00:31 2025 GMT
Subject: CN=4270e61538f86e36f5a91630fbdfde8b09de9574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9a:80:ce:eb:b3:ce:cd:ad:72:8d:79:90:bd:
25:d3:28:85:b3:c0:3c:f5:ce:a1:e9:ee:06:67:c0:
1e:c0:0d:fb:e2:5d:6b:81:4b:71:19:71:d6:e3:dc:
6f:61:a2:74:94:d8:96:e0:10:3c:0f:dc:4c:da:86:
5d:8c:25:0c:ad:e6:f8:96:b1:30:af:78:b2:42:61:
53:22:fa:ac:22:40:49:d1:4a:e0:66:84:46:69:7c:
51:31:47:31:a4:ea:a8:22:37:9d:2d:95:f9:b7:22:
75:52:07:a3:39:c0:75:88:1f:1a:5f:70:f9:ab:a1:
fd:98:c2:bc:c7:66:4a:4b:52:56:36:5d:74:4d:d1:
0d:37:d0:79:ac:85:ff:66:f3:89:a9:77:25:8f:64:
07:9c:96:54:ca:be:03:b5:c9:ec:58:45:4d:e8:82:
14:3f:8d:c7:f6:2a:e8:dd:58:c4:19:2a:0d:b4:49:
0b:62:5c:b4:34:89:eb:4a:dd:63:66:88:5d:f2:e5:
00:3a:73:2b:00:69:2e:d0:56:8d:a2:be:37:fa:79:
08:49:d0:79:a7:45:ca:0d:6c:84:c4:c9:40:53:1f:
f5:f1:3a:6e:75:48:6c:39:3e:8b:89:ec:91:df:69:
c6:60:24:ca:7f:41:de:84:2d:ab:4b:91:8f:6f:17:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:70:E6:15:38:F8:6E:36:F5:A9:16:30:FB:DF:DE:8B:09:DE:95:74
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b2:8d:4d:85:42:e3:bf:bd:4b:3d:f6:e7:ec:75:e8:e9:52:
27:55:21:08:0b:c0:90:9d:25:ea:cc:74:c8:cf:ce:1f:3f:11:
83:a5:5d:2b:07:34:49:c7:4f:a0:4a:36:c2:95:48:eb:d4:cd:
ef:42:e0:0c:5f:07:41:f8:03:1a:1b:31:a5:2a:cd:c4:a7:c7:
b8:03:64:52:30:71:56:d9:80:4d:08:9d:56:6e:74:75:94:b9:
54:c8:5f:1f:b2:6d:6f:20:f1:26:cc:70:9c:1a:6e:3c:9b:f7:
32:7b:bb:bb:82:01:f2:59:75:da:09:0e:89:5f:73:80:81:5a:
2d:7a:2e:db:c8:03:9e:98:37:ae:ad:35:e6:1e:34:a3:22:b0:
40:0c:aa:4a:0b:a3:d5:e5:79:ba:bd:20:b7:cc:f7:c7:3f:86:
b4:f7:0a:3b:4e:21:bb:4a:4b:55:2a:e4:6f:08:5d:c0:1b:31:
5b:91:92:0b:d5:e2:ae:9c:8a:c2:77:ae:e9:92:e1:18:af:e1:
31:a1:0f:1d:ca:ec:22:81:b3:13:50:75:5f:3c:46:c1:89:ab:
1b:1c:0f:d4:3a:b2:46:45:f4:03:2f:1d:73:20:1c:35:03:50:
3f:87:49:2b:ae:fc:bb:0b:77:e3:e2:50:db:37:b9:c5:00:46:
b0:c8:d3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:51:55 2025 by rpki-client