
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: 8ta8y2WYx/2yt/WjC+k3PkgaO3vsnLicQ7zeOU1eJ3g=
Subject key identifier: 92:A7:F5:93:8C:74:7D:7B:17:93:43:BD:EA:52:21:E2:54:F0:8E:A9
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 01977489461C452A39F989AD3A7E2FD55323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 09FD
Signing time: Sun 15 Jun 2025 17:00:42 +0000
Manifest this update: Sun 15 Jun 2025 17:00:42 +0000
Manifest next update: Mon 16 Jun 2025 17:00:42 +0000
Files and hashes: 1: 0k2RQNwafgZ-e81VbpAz2vrqb3k.roa (hash: F4mQI6q3szQ65tq8yOXleP2UVhZpsKUbEGpteoYml/c=)
2: 8V7ejxEv_GEeH4w675eVpJxAMGA.roa (hash: dpmJ8CsMRM0G3BSxOyWtbvqZ7FYrfuSdRQhIjIL3rWg=)
3: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: e5XnSI0YHDswOOyZRkAbsY8vDBV8WbIU92Eq1dCZroA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:89:46:1c:45:2a:39:f9:89:ad:3a:7e:2f:d5:53:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Jun 15 17:00:42 2025 GMT
Not After : Jun 16 17:00:42 2025 GMT
Subject: CN=92a7f5938c747d7b179343bdea5221e254f08ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:35:c4:7d:37:81:2b:61:41:c8:5b:79:5c:
26:fb:79:ee:1d:59:68:25:1c:94:36:cb:22:97:3f:
7e:bf:9c:11:e4:a2:89:cb:45:74:a2:8f:df:c5:2d:
d1:56:13:7d:6d:04:23:5d:04:16:3d:b7:41:da:91:
0c:b0:57:60:f6:11:88:48:fc:fc:a1:7f:90:b3:80:
e0:24:fd:87:4d:cf:b0:87:a0:55:2a:3d:66:7a:c2:
e2:2d:99:9f:7e:44:84:b7:c5:2c:44:cf:a5:9c:88:
a8:87:6b:8d:64:1f:a2:1f:6b:a1:11:07:4f:2d:0c:
a4:46:6d:20:00:fb:70:76:7b:bc:e1:3c:6c:df:16:
08:a7:3b:e4:51:7e:c0:da:1f:17:98:92:a6:1f:7c:
d1:4a:ce:48:79:f2:86:8c:b2:09:ac:af:a2:7d:bb:
db:e8:6c:13:76:98:91:65:fe:7a:0b:7f:71:34:73:
3a:fc:37:1c:bc:b1:a5:fe:f4:0d:ac:27:7a:a1:ee:
f2:95:0d:ca:aa:83:16:59:1a:f2:cd:0b:ed:53:91:
33:c6:4f:8e:d0:38:36:8e:36:00:e7:88:81:79:f2:
8c:14:28:2b:01:ce:64:b6:c3:2b:7d:46:88:49:76:
78:ff:60:b2:24:df:eb:7c:fe:54:31:ea:f0:9b:5f:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A7:F5:93:8C:74:7D:7B:17:93:43:BD:EA:52:21:E2:54:F0:8E:A9
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f8:11:39:90:73:b7:68:05:46:33:af:02:8f:db:14:8e:31:
f9:cc:5c:1c:01:70:f9:4d:89:f9:3b:5b:49:fb:01:03:f8:18:
a8:c8:93:f6:74:10:04:74:63:27:43:b5:d3:de:c9:e3:a6:7d:
25:e7:2e:55:71:59:c8:52:bc:db:7a:5b:2d:4b:c4:fc:da:8f:
45:d9:9b:f2:ed:2b:3d:4b:a1:d5:7d:33:90:99:4c:13:03:dd:
e2:47:be:e4:83:b6:61:69:fa:c9:37:7f:c8:ba:4e:86:a6:26:
09:63:9e:e4:d8:bd:68:5e:63:49:a1:1a:6e:7a:3d:34:3d:75:
4a:64:cf:18:3d:3c:cd:0f:47:bf:b7:ba:a7:47:ac:a0:ea:ab:
9b:de:6c:23:db:ba:32:00:3a:a1:87:5a:37:bb:ee:fd:67:4b:
1f:3a:f5:b5:68:83:9d:97:f8:c9:d1:2f:6b:10:b6:a5:38:4c:
7f:70:9f:eb:9d:7c:76:eb:9f:ae:c8:ec:5f:4e:3c:95:3d:7e:
2e:6c:34:84:fb:bf:78:d8:59:d5:d7:be:5c:15:ef:a1:63:f1:
ef:f6:7e:ef:9d:f5:0b:b4:d4:88:f6:bc:68:ef:37:9d:4c:1d:
7d:ca:74:62:69:a1:fa:d6:31:8a:a3:17:c9:17:43:63:4a:57:
68:fb:50:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:05:33 2025 by rpki-client