Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
File: Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json)
Hash identifier: VK+QZ3FLcWRkn20kbCPyutyZkv329T5i3sSQl2giEe0=
Subject key identifier: 85:1D:25:CA:D3:FC:3E:48:9C:CF:2E:A3:8F:4F:76:2A:CD:8C:76:86
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial: 01976C61F387B0BAA7EF93E354FA56C31608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
Manifest number: 0B39
Signing time: Sat 14 Jun 2025 03:00:48 +0000
Manifest this update: Sat 14 Jun 2025 03:00:48 +0000
Manifest next update: Sun 15 Jun 2025 03:00:48 +0000
Files and hashes: 1: 1-DjrG4WtOf5mfvjc_0ex1qmM7_0.roa (hash: hnXFvQKmTthNRY+MRdmK+ICiF4IvzT+rwNQnD35oyyk=)
2: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: NqnisHQSlrPXEVS6tqLM9Ja1897NmKazwU/MgWDwIzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:f3:87:b0:ba:a7:ef:93:e3:54:fa:56:c3:16:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Validity
Not Before: Jun 14 03:00:48 2025 GMT
Not After : Jun 15 03:00:48 2025 GMT
Subject: CN=851d25cad3fc3e489ccf2ea38f4f762acd8c7686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:be:e2:9d:60:8b:a5:bf:d5:45:e4:06:7f:
eb:c3:0f:55:ef:72:01:5e:1e:2b:fa:27:7e:3d:f6:
f8:2a:aa:c3:9a:2c:98:40:56:e5:2a:25:6a:ab:e5:
76:d6:30:fa:f9:7d:50:a9:69:44:e8:2d:53:6b:35:
fd:f8:ea:49:4e:96:10:4c:be:57:69:38:a7:bc:c9:
53:cb:cf:4b:db:67:65:76:07:e8:12:c5:bd:65:98:
6c:0c:1e:82:e7:6c:aa:f3:11:c6:e6:c2:4f:9e:c0:
d5:80:d3:11:f4:6d:3a:03:a1:b1:be:bd:49:cd:ad:
a8:4b:50:f5:e6:83:1c:6c:40:97:3d:68:cf:25:4d:
6a:72:62:2d:11:53:32:1c:03:68:dd:4e:e5:7f:21:
8d:13:09:a3:2e:b5:a3:61:70:d2:4f:36:30:11:2c:
26:92:c6:b3:e8:38:b6:a5:16:37:bb:60:a4:fc:54:
2d:a3:99:1c:6c:96:ce:4a:0f:1b:f2:61:c7:8c:41:
15:a3:ec:9c:97:40:2a:d3:e7:8c:1c:42:99:a6:ad:
0d:c4:b3:dc:21:c7:5c:ab:92:fa:61:15:35:f6:04:
ba:f2:f9:98:83:7b:c3:fc:93:47:6b:77:4e:64:a8:
45:d4:bf:ef:52:26:3b:48:04:1a:41:1e:8b:3c:c2:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1D:25:CA:D3:FC:3E:48:9C:CF:2E:A3:8F:4F:76:2A:CD:8C:76:86
X509v3 Authority Key Identifier:
keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:35:b0:d4:86:c5:d1:6e:ce:aa:2c:9e:8e:a3:bc:34:da:49:
11:b5:a1:3b:61:58:6f:13:dd:2c:70:02:e9:73:c7:20:2c:cb:
ff:b7:02:d1:cb:d2:17:f5:cc:90:4f:e6:c1:c5:eb:9d:78:8d:
8e:85:02:1c:25:09:98:c9:54:97:e9:17:89:b0:0d:15:9f:58:
af:c4:8d:29:4d:21:80:4c:bb:d9:59:ab:32:cd:15:d8:91:50:
00:8f:d7:68:96:28:ed:e1:3e:17:a5:69:d6:64:56:1e:50:ee:
a4:2b:5e:b1:0a:68:dc:21:9b:5c:65:f7:36:77:eb:ef:e9:5b:
3d:4d:8d:28:bc:2f:49:2d:63:60:eb:98:c3:bf:ec:88:26:42:
a2:a4:0c:1a:58:cb:54:97:eb:ee:fd:7d:53:48:8d:1d:e6:79:
11:2e:91:10:b1:db:00:15:19:51:2a:a3:0f:13:e4:90:e0:ea:
85:f4:6c:21:a8:44:59:ba:28:3f:ff:9b:3a:7f:3e:83:df:0c:
f1:2f:4b:c4:e4:9a:fc:46:3e:cc:31:21:b8:1b:3e:38:37:ab:
9d:ab:a2:fa:79:ec:a2:97:11:90:ec:b3:a5:fb:6e:df:00:61:
f9:d9:1f:45:e8:52:d4:98:57:79:0e:60:02:a6:7c:bf:88:36:
3a:fe:02:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:02:14 2025 by rpki-client