Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: WVskbilo7c/hdmiEFL865qkLxyrR9ZwGhgG0Mrm8RBY=
Subject key identifier: AD:74:11:14:7C:8D:9F:72:88:5C:BB:D8:39:28:B3:3B:11:FF:F2:A1
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 0197832056F06D6BAEB372DBAFB433CDF5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 02D9
Signing time: Wed 18 Jun 2025 13:00:24 +0000
Manifest this update: Wed 18 Jun 2025 13:00:24 +0000
Manifest next update: Thu 19 Jun 2025 13:00:24 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: +ajhO3pkGnR7xuhZtRwiyM394GkzcON8+zcBz7jb+mM=)
2: Gv4EnRb88MY5aVLEY17_OZ0Wl08.roa (hash: WkS34pHH/XzAUtEopuzXUXT2LtpQyPdLz2PYfITDjLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:20:56:f0:6d:6b:ae:b3:72:db:af:b4:33:cd:f5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Jun 18 13:00:24 2025 GMT
Not After : Jun 19 13:00:24 2025 GMT
Subject: CN=ad7411147c8d9f72885cbbd83928b33b11fff2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:10:fc:84:51:79:79:c1:2e:11:ba:2a:b2:
16:f7:ff:59:ac:64:b7:4d:a6:0e:b8:04:bf:a4:96:
c4:cd:7c:c3:65:d1:17:50:31:58:32:cc:df:05:9a:
a9:05:9e:9e:d0:3c:c0:53:8b:1b:f8:25:1f:dc:ea:
4f:bc:c6:07:8c:6c:a9:87:82:54:d5:a6:29:b0:85:
9f:4c:1b:22:84:4e:73:16:a9:0f:e0:aa:40:66:2b:
cd:36:86:31:53:39:7e:49:7e:37:56:80:ac:2c:1c:
c3:7a:59:ef:e4:f3:8f:77:ed:ce:ae:3c:d3:a8:9c:
17:9f:ca:b2:dd:6f:0c:93:95:0b:f8:84:79:3f:ba:
78:ff:f8:d4:d6:c1:37:84:19:45:e9:b7:83:21:46:
15:25:7e:d7:94:8b:6d:40:2e:c5:98:4c:4c:1e:63:
e8:12:5c:d9:fa:f4:5f:44:b3:7e:0b:b2:bc:12:10:
64:82:f1:73:08:eb:c3:db:c6:01:15:c4:2c:0d:5e:
fc:3b:ad:4f:d8:32:7f:26:63:25:0e:cf:c5:4e:1c:
a9:4f:16:ee:7d:d3:57:80:f2:20:f9:77:cb:57:cc:
76:de:f5:58:42:be:2b:4a:4a:01:b1:76:78:72:7a:
40:38:c3:8e:a8:5f:91:40:c7:fb:22:f1:ef:ec:ec:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:74:11:14:7C:8D:9F:72:88:5C:BB:D8:39:28:B3:3B:11:FF:F2:A1
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3d:66:e5:c8:15:d3:f8:16:22:1a:08:33:05:01:70:15:92:
2a:56:fe:00:4d:72:c3:d9:26:9d:d7:1e:51:57:29:33:57:6e:
da:17:e9:6a:1b:73:23:d4:99:1f:68:5e:73:b2:4e:d2:ee:b5:
c8:9e:d3:e2:7d:6e:71:69:dc:c5:a2:4c:8a:19:bc:af:7d:71:
28:90:38:58:7a:07:94:7a:2c:72:0e:e7:06:84:6d:c6:3a:ff:
81:df:59:37:98:b0:68:67:40:c3:56:fb:0a:16:22:1d:20:68:
3c:ea:77:c7:dc:eb:80:a1:3a:b2:dd:a3:35:0c:c7:c3:de:0f:
84:61:e1:0f:ce:33:b0:dc:02:cc:0b:f6:bf:86:a2:e9:b5:3e:
ab:ef:14:e6:e4:41:40:20:fe:a3:e0:3f:fc:01:dc:66:05:59:
ff:b8:9b:38:aa:dc:4c:74:ef:d9:36:08:97:68:f7:4e:a8:3c:
c2:37:f5:8d:99:6f:e6:5b:d6:f7:d4:19:d1:4e:a9:c6:34:87:
14:1a:72:d0:f8:38:53:ec:b2:59:f1:fd:22:2d:00:44:39:eb:
fd:8a:93:59:bd:f1:dc:84:3d:24:9d:6b:54:d0:47:f9:0a:8c:
69:7d:3a:14:2b:c7:d1:59:cc:81:14:bc:5b:8b:1a:97:49:64:
5a:bd:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 20:26:14 2025 by rpki-client