Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: gA9aNRm64ziYLQaos8VPSejzl5Rf1dPP/QX8FeUf8Pk=
Subject key identifier: CA:C8:60:10:AB:C3:EC:1C:22:64:9B:EA:EC:54:DB:28:81:91:B9:03
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 01976C61C2CB47F68A7B1BA6932FC2BF2F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 1597
Signing time: Sat 14 Jun 2025 03:00:35 +0000
Manifest this update: Sat 14 Jun 2025 03:00:35 +0000
Manifest next update: Sun 15 Jun 2025 03:00:35 +0000
Files and hashes: 1: 4x6rjkazNCLflUWUlsTwU4cxca8.roa (hash: ow7cUKut6886qX9EXf4fCgAMPFDIEd+yoCgqSPSsnlI=)
2: 7h9PVYRfpJWQVe6p_fUNqkMIVJM.roa (hash: 0F7e9cMMXcDHwo+/3DX5egozFHFiaYZUkpRfNYs9hic=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: jI0Rq+GB37UjMz2Hw3NoqLLjqXQeEQOtyIF2j1g/g1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:c2:cb:47:f6:8a:7b:1b:a6:93:2f:c2:bf:2f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Jun 14 03:00:35 2025 GMT
Not After : Jun 15 03:00:35 2025 GMT
Subject: CN=cac86010abc3ec1c22649beaec54db288191b903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:6d:8f:2b:c6:ce:a4:bd:7d:8d:ca:4e:9c:
9c:6b:f2:ea:32:ef:43:06:3f:da:72:15:64:4d:dc:
b8:08:d6:0b:e7:a7:a5:b9:99:38:6e:d3:69:c3:92:
7f:41:fe:7a:94:f4:f1:6c:22:3b:bd:b9:73:5d:06:
6b:ff:7d:60:92:54:0c:69:46:21:0c:06:23:be:d7:
b8:f4:b7:70:8f:1d:ab:74:d8:db:54:86:25:b8:b1:
d9:84:92:75:94:cb:62:4f:21:d5:03:7c:ae:ee:79:
95:3e:ed:34:6f:a4:d6:f1:c6:88:46:01:b3:ee:84:
60:07:86:ca:d5:c8:5a:17:56:9c:5c:8d:88:bd:1c:
ed:a0:cb:96:90:2d:c4:7d:ed:24:ad:47:8c:7d:c8:
61:5b:d0:f2:bd:df:b3:ca:8e:b7:76:78:75:54:f9:
5b:4e:2b:5d:1c:e9:57:a4:f0:a4:4d:b1:8c:f7:a4:
3c:51:21:75:f0:64:98:24:81:97:24:76:df:f0:65:
f6:01:c5:e4:f4:9a:a4:1f:ac:a1:8b:ed:4c:c0:47:
36:a2:c7:25:6e:23:62:c6:31:1a:e4:8d:37:b4:07:
97:87:44:61:fa:db:2d:86:19:f9:ea:de:f9:3d:f4:
49:4d:94:e9:19:86:3a:ab:cd:73:31:fe:7c:8a:04:
9d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C8:60:10:AB:C3:EC:1C:22:64:9B:EA:EC:54:DB:28:81:91:B9:03
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2b:b1:a4:75:4d:36:19:37:22:dc:15:f2:20:b7:73:74:de:
56:a8:9a:26:07:65:1f:63:4b:07:7f:38:4a:cc:f7:3f:7f:ad:
e9:57:61:4b:92:00:0e:dd:83:43:47:ca:04:ca:54:e2:55:d3:
58:8f:74:3a:85:9b:35:15:2a:e1:54:97:00:ab:15:37:ff:54:
02:5b:f0:1a:3e:9e:31:53:d4:ef:51:c4:41:dc:ed:53:d7:34:
79:14:17:7d:e2:39:ea:a4:b7:e1:21:ea:16:06:7e:5c:44:f4:
01:7d:17:41:ad:23:c7:13:ca:47:2b:08:de:01:87:29:d7:13:
7b:c0:c4:99:10:6a:39:bf:0a:a7:a9:eb:bc:4e:7d:86:3b:ee:
b1:e6:00:9c:33:e6:7e:13:29:5e:32:00:fc:29:89:ad:95:24:
f0:b9:3e:2f:80:9c:4e:95:de:c4:51:48:df:6a:10:39:5f:13:
d1:75:1a:bb:23:bb:be:ab:34:26:97:8b:74:79:d5:2c:8e:11:
dd:15:f6:05:27:a4:ca:0b:0c:48:42:91:31:6a:15:05:25:d6:
ce:22:3a:dd:c5:e5:db:59:d8:c0:f5:e2:29:e7:ef:57:df:c6:
db:f9:2f:e9:e4:1f:c0:9b:2e:1a:6a:80:1f:24:26:1f:71:e7:
29:af:5a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:07:41 2025 by rpki-client