Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier: sZo8cigIYvAwIM+OUWdENATR+pKbnuV5ENPejKbSlWM=
Subject key identifier: 8E:DA:91:DA:27:17:00:61:F3:36:A8:A5:CA:94:A3:08:40:85:39:FA
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 01977075B5CDDF5ED14AD1CA1EE08DABFBFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number: 085E
Signing time: Sat 14 Jun 2025 22:00:51 +0000
Manifest this update: Sat 14 Jun 2025 22:00:51 +0000
Manifest next update: Sun 15 Jun 2025 22:00:51 +0000
Files and hashes: 1: IhFmVxbE3gn_IPAxvOuH1Dxlo9o.roa (hash: oKXrmB0pSBgjznKzRYUFbiw4D9My9SBHtgqoNaUCBKA=)
2: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: X0jsUnYGcbxAUZeJZ6F+6fSCrov9MHhldtaw4dhQexs=)
3: wbXeB63VhLi_7WMIhOdMpk0lCW4.roa (hash: d7dOr+7PutspTBpcReyCrf+E8CzcxyNVV7Zc8qzo3dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:b5:cd:df:5e:d1:4a:d1:ca:1e:e0:8d:ab:fb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: Jun 14 22:00:51 2025 GMT
Not After : Jun 15 22:00:51 2025 GMT
Subject: CN=8eda91da27170061f336a8a5ca94a308408539fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3e:96:14:d1:de:f7:09:4f:66:cd:b6:e0:ff:
83:cf:b2:24:e2:ac:4e:28:cb:a7:23:39:d3:77:de:
c8:83:e6:c5:d4:c8:4b:af:e5:fe:de:fc:7b:30:d5:
38:f1:0e:b2:00:b2:59:ae:54:4f:a3:45:71:0b:70:
eb:6d:65:d7:fa:54:0b:27:6e:8d:74:d4:f9:e7:98:
05:89:df:26:b2:71:d8:a8:20:2e:e3:2e:da:5b:6a:
18:cd:5c:d2:ea:87:8c:59:44:af:19:11:67:de:48:
0b:77:9b:6e:91:4d:6c:96:f9:ac:f2:9c:43:22:ed:
df:f6:c0:87:04:b1:06:71:69:be:f0:43:b5:3a:1a:
20:ee:f0:ba:ce:96:d9:db:ea:5e:0f:cd:be:b4:08:
7c:99:98:6c:c5:98:c9:3f:d9:59:81:6f:14:de:18:
1b:a4:0c:94:78:6e:a5:c5:54:db:9c:33:7b:5b:7e:
3f:3c:d7:e8:cc:38:f9:67:1f:e1:2f:32:a4:63:6d:
91:6c:73:02:c3:77:89:1a:5d:6a:2a:93:4c:87:1b:
9d:1a:5b:7a:eb:71:a6:59:22:79:3f:22:84:91:51:
1a:8a:45:cf:68:41:50:b4:37:db:b7:e3:0d:64:e6:
4f:51:ff:9c:be:1e:fc:e0:e4:03:e0:53:ac:6e:08:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DA:91:DA:27:17:00:61:F3:36:A8:A5:CA:94:A3:08:40:85:39:FA
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:cb:90:e2:30:e8:22:d7:fd:0a:cc:72:d4:11:f1:bd:3c:02:
68:45:0c:27:b2:4f:a1:fd:30:94:29:49:e7:d6:46:5e:dd:c4:
23:73:ae:14:11:12:0e:07:12:49:79:45:89:cf:11:8c:db:35:
a5:dc:ec:01:a5:78:bc:4e:4e:32:8d:dc:8e:c6:54:cb:08:e5:
f4:a5:38:9c:8c:13:5a:6e:50:32:a0:bd:95:64:c6:72:e0:70:
51:91:d7:cf:6f:6b:49:d9:87:81:7d:3f:f8:75:11:14:b8:0f:
6e:1d:58:cf:49:79:2e:3d:95:69:37:7e:37:f2:72:ac:38:18:
df:10:05:37:6e:ab:bf:32:c8:cc:e3:64:ab:d4:8f:d4:4a:ce:
2c:77:0e:12:db:da:14:98:a3:5d:af:a5:41:87:4b:15:f3:36:
0c:4a:7d:b9:03:41:d4:4f:71:f8:86:ff:61:61:d5:da:04:11:
d0:e8:e0:9d:88:9f:f6:96:55:30:b7:77:46:a1:e6:11:bf:e9:
2a:18:82:03:68:54:47:f0:a6:47:a5:7c:e3:e5:04:ff:7f:b7:
fd:83:31:d6:b5:16:a9:04:46:a9:42:01:33:f9:29:66:aa:be:
13:15:b3:df:fa:22:11:0c:c1:de:1e:d1:a0:6e:0f:e4:0d:e6:
60:7d:57:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:43:17 2025 by rpki-client