Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: AG8V8Pa2iCei9XOGiA/zI/3hxlDQyyv5uEyYuLfVN2s=
Subject key identifier: FA:16:9E:65:3B:16:8B:22:E4:62:4F:00:9F:A8:95:E9:DA:6E:34:D1
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 01976E19C05419E1C9D2CEE1C814A88591C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 11:01:10 +0000
Manifest this update: Sat 14 Jun 2025 11:01:10 +0000
Manifest next update: Sun 15 Jun 2025 11:01:10 +0000
Files and hashes: 1: Lddee0yGLa96EV9cff9j1b8lisk.roa (hash: 4wmS8bLLBI0yCHZS6lNJzngX25UoSHi3CPRXK8eiy+g=)
2: oFHxOR-gmoi2f8hzooiT2H5qGbs.roa (hash: v7L5BEVhrfX9YxGEPwkVKzRUyMYIDLUuZIRykF3hjrE=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: XppxPS7abKgy1+MssTw/+XAoapUmEI71RHiwt92YGZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:c0:54:19:e1:c9:d2:ce:e1:c8:14:a8:85:91:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Jun 14 11:01:10 2025 GMT
Not After : Jun 15 11:01:10 2025 GMT
Subject: CN=fa169e653b168b22e4624f009fa895e9da6e34d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:fb:6d:79:80:f9:10:ee:5d:68:1f:df:15:
13:25:90:32:de:9a:63:2e:67:11:6d:d5:15:a8:8b:
b2:67:ca:03:fb:3d:55:d3:f0:00:d7:40:96:a5:e9:
76:43:d1:c0:9c:f1:81:b1:18:b5:43:b1:57:42:f6:
4e:09:3a:ea:98:05:5a:cb:88:7d:f9:d1:a6:24:26:
1b:6b:6a:10:f7:24:7c:1e:cc:e9:48:d9:92:2b:88:
78:fa:88:d9:52:ea:f1:10:85:56:54:3e:20:d2:88:
64:5c:57:d1:9a:30:56:8b:a1:28:aa:0e:7a:8e:12:
b1:58:56:41:55:5b:75:aa:21:d9:4d:15:84:59:96:
80:83:70:1a:4a:83:dc:40:21:c9:8c:96:ca:24:85:
0e:75:88:51:4a:06:7b:14:5a:b9:56:14:05:5d:4b:
38:20:e5:33:c9:f4:5b:ca:4b:67:7a:a2:cc:eb:e7:
37:f9:b4:3d:e1:bd:08:e4:59:95:67:08:27:66:5f:
0a:56:2f:ac:e7:d5:40:d3:e4:94:ab:7f:ff:8e:18:
2d:04:4b:04:1c:88:2a:91:66:08:a8:a6:00:ba:b4:
fc:ae:c0:81:ad:2b:73:c9:6d:5c:f5:c4:44:53:68:
3d:22:a3:a3:56:40:92:0d:d9:44:96:80:54:78:2f:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:16:9E:65:3B:16:8B:22:E4:62:4F:00:9F:A8:95:E9:DA:6E:34:D1
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0c:85:0f:b2:33:7a:d5:ec:2c:5c:33:e6:ee:f4:cc:68:d3:
ea:b0:2d:0b:f4:04:83:e1:74:61:83:41:05:fb:14:a6:13:a2:
b6:96:46:46:6d:fd:f4:b0:71:58:d6:2a:11:6e:5a:e2:57:9e:
a2:48:af:45:ff:6d:8d:9b:f4:b8:d7:2f:72:92:a9:e5:f0:65:
65:68:90:f6:38:41:4f:f3:fa:55:16:75:b7:8c:2f:77:b1:19:
e3:c1:51:79:b8:5f:bb:d5:ec:93:85:44:b4:08:d1:d5:6e:ea:
1d:a0:01:7a:cb:be:ee:7a:25:d6:b3:ef:d2:32:d1:55:ab:a3:
ed:df:18:d1:ed:81:1c:a0:fc:9a:df:e6:3d:03:a8:67:84:90:
28:31:de:07:a0:94:99:8b:b0:41:25:9f:94:ee:b0:e4:d1:32:
e9:92:ac:03:90:7a:a7:09:6f:34:4c:8f:63:46:f9:e1:f5:8c:
70:2e:2a:9e:2f:85:ed:d9:7e:cd:87:7d:cd:d4:7a:bc:31:e8:
0e:a9:8e:81:86:62:b7:79:3c:f8:19:95:a6:81:60:4d:16:f9:
0d:04:a3:c7:d1:57:c8:af:4c:53:15:2d:8a:3c:0d:5d:6f:86:
04:dd:88:17:31:1e:6d:e6:2d:53:98:e4:fd:3d:e7:bf:ee:9b:
23:04:ff:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:01:54 2025 by rpki-client