Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
File: Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft (raw, json)
Hash identifier: KSKalwbRzF/BOv1ULCAllSKIfFy/N3A5CeqFQ5vV9Og=
Subject key identifier: 91:C3:D6:F3:02:FE:C2:13:8E:80:03:ED:C0:06:70:52:11:0D:80:4D
Authority key identifier: 45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3
Certificate issuer: /CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
Certificate serial: 01977A1D6683C978C91003DD7D40D2FCEB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
Manifest number: 1019
Signing time: Mon 16 Jun 2025 19:00:36 +0000
Manifest this update: Mon 16 Jun 2025 19:00:36 +0000
Manifest next update: Tue 17 Jun 2025 19:00:36 +0000
Files and hashes: 1: Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl (hash: h7mDMh9+vFI2tZqSWwOky8hceIcT8FUZGYi7+C117tQ=)
2: o6lJ-qfhS9C09IpxbbRvCOiFoHM.roa (hash: s9YF0YMackzUIop5+kUK7Z2zh1o4IPsYyQyvrXKhSCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:66:83:c9:78:c9:10:03:dd:7d:40:d2:fc:eb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45cf9dc0c7b7fc4a336e4eee57b1ec1948c8ddf3
Validity
Not Before: Jun 16 19:00:36 2025 GMT
Not After : Jun 17 19:00:36 2025 GMT
Subject: CN=91c3d6f302fec2138e8003edc0067052110d804d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:d1:dd:f8:e6:35:3d:62:5f:b5:26:84:af:
05:8e:bc:19:5f:20:69:1d:d2:d9:ca:d3:09:fa:47:
d1:2c:10:a2:cc:17:98:1d:84:8a:8e:d6:ed:0d:18:
0d:cd:f6:fa:fe:a3:a4:f7:f8:89:62:cc:f6:62:a2:
be:25:f6:1e:5c:12:6b:79:70:d2:31:cb:15:53:7e:
1e:c1:b8:c8:4d:da:b1:f8:41:fe:ca:98:c6:ad:a6:
28:83:a8:93:0e:28:d8:d7:86:de:39:ab:d7:5c:fc:
f1:2e:e5:3e:32:03:f0:32:a0:a4:11:53:23:bf:d4:
82:c5:17:bf:86:db:f7:40:d7:69:4f:91:23:f9:af:
5c:2a:33:7f:a2:8f:36:18:35:68:32:19:da:20:07:
58:80:d7:48:9c:de:3a:45:a8:8e:55:60:31:2b:40:
e1:7f:cb:de:ba:aa:eb:15:fd:30:9d:ad:9e:76:92:
e3:13:29:23:66:88:f3:5e:cc:c2:41:d8:87:0e:86:
51:4e:4c:e0:6e:28:11:ab:f0:fc:ca:d8:9f:2c:19:
2b:4f:0b:ac:91:6e:0c:4b:ac:f5:ce:44:88:83:84:
b6:81:dd:77:5b:9d:b8:0e:6f:fc:5f:93:8d:bd:47:
09:25:e2:bc:46:4e:ab:49:44:4d:d5:a4:06:c6:d9:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C3:D6:F3:02:FE:C2:13:8E:80:03:ED:C0:06:70:52:11:0D:80:4D
X509v3 Authority Key Identifier:
keyid:45:CF:9D:C0:C7:B7:FC:4A:33:6E:4E:EE:57:B1:EC:19:48:C8:DD:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8920fc-bbae-4132-b752-ee72f2b3a473/1/Rc-dwMe3_Eozbk7uV7HsGUjI3fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:25:53:f2:e3:bb:20:58:95:d2:6d:3f:b6:1f:3d:7e:0b:55:
04:06:3d:d5:70:dd:55:8b:29:bf:73:79:fc:9f:f8:fc:a6:7c:
49:b5:58:9c:63:07:00:43:c9:73:d8:9e:6c:ce:ca:c4:14:1d:
ef:04:df:ec:5a:db:2d:a9:ba:5c:99:40:f3:eb:b0:b6:e8:ee:
8f:ab:fd:a1:cf:ed:93:d9:41:bf:d2:00:64:ed:d7:cc:b7:aa:
82:d8:cc:79:eb:20:59:db:c4:50:0c:2e:18:08:42:63:41:eb:
e2:99:6c:ff:48:44:48:5c:bb:10:d5:06:ff:69:23:22:3c:c4:
42:8f:d9:c7:2e:55:0a:a4:08:66:63:41:32:a6:50:88:82:bc:
d4:a1:b2:9a:e4:c9:ee:a6:f0:ee:82:22:58:64:7c:75:d7:aa:
4c:46:f8:ed:23:30:f5:a8:0f:82:82:e3:1a:7f:89:03:25:c8:
a2:00:7b:32:02:91:e4:18:ed:7f:64:38:04:53:24:03:e0:c0:
b4:8b:23:88:7a:33:cc:3e:a5:64:07:f9:c8:67:5a:16:ec:fa:
de:88:03:92:a5:7d:7d:14:51:79:b3:02:38:a7:ac:6e:75:23:
f6:e7:04:24:c2:f2:d4:88:e5:dc:b2:11:eb:7e:52:1f:ac:d7:
6d:34:e4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:59:09 2025 by rpki-client