Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
File: r0j2f1P86YkdQVk6yEyuMEq_y88.mft (raw, json)
Hash identifier: E3hiaRKxASyPqGXPWhKgHxaD7rEczMo6rPBYgIkya1A=
Subject key identifier: C6:87:A9:E7:D5:70:F9:82:9C:10:56:21:F0:13:C7:C7:12:DA:81:E1
Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
Certificate issuer: /CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Certificate serial: 0197820DF047B68459A82090F2CE0E30F798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
Manifest number: 159B
Signing time: Wed 18 Jun 2025 08:00:40 +0000
Manifest this update: Wed 18 Jun 2025 08:00:40 +0000
Manifest next update: Thu 19 Jun 2025 08:00:40 +0000
Files and hashes: 1: LJm4ejx93tTGGSMSp9-CoJADCNU.roa (hash: enkxB1ym9D6j6OauD2B7/3J70MmuSWDzwk6AA84rwRE=)
2: Rx5Tk2OFD4AUCGaXo47NJtzGllk.roa (hash: comS5qd1rLPpE+d2v/ddO3rLzCRrN86e4IPWwWweF9Y=)
3: r0j2f1P86YkdQVk6yEyuMEq_y88.crl (hash: M7U+/G47ybFWazpS+3r4z3a6LlY7muiOFlGfjdRLDxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:0d:f0:47:b6:84:59:a8:20:90:f2:ce:0e:30:f7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Validity
Not Before: Jun 18 08:00:40 2025 GMT
Not After : Jun 19 08:00:40 2025 GMT
Subject: CN=c687a9e7d570f9829c105621f013c7c712da81e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:ed:d0:43:f2:41:f2:15:4a:aa:9a:7b:60:
d7:7f:e6:e8:bf:1f:d1:91:ff:c5:f0:c2:da:f7:8a:
73:95:a1:08:6e:1b:ef:ed:b1:01:82:51:eb:b6:4c:
55:4f:bc:dd:20:2a:82:4c:4b:03:9a:9c:10:ff:c5:
7e:6f:81:ea:ca:22:1a:44:2a:c6:92:f7:d0:e5:b0:
ef:8d:16:71:75:1d:72:19:84:69:ab:7e:4c:4d:af:
76:8a:42:30:37:d8:2c:87:c8:54:8e:c7:65:25:e2:
16:0a:cc:53:f9:45:ad:04:b3:f9:b4:28:0c:c9:57:
5b:06:11:50:0b:aa:a7:8d:3d:0a:94:7b:6f:f3:de:
5e:5e:12:d6:53:68:81:43:06:3a:9c:ac:72:50:08:
e1:79:86:53:90:0a:ca:f9:df:cf:57:00:78:ef:12:
eb:f3:ad:82:15:6f:6d:62:29:ed:38:0b:b3:f8:81:
1b:52:9d:27:a7:fc:54:91:12:29:d7:7c:1a:29:45:
15:80:d6:05:85:33:26:dc:ca:4b:4b:e2:ca:fa:29:
45:dc:23:a9:ee:14:2f:f2:5c:74:81:65:e3:f5:15:
53:b7:b5:73:a8:a9:57:82:46:57:20:64:e0:82:db:
84:a0:c2:17:94:ee:27:54:9e:87:b7:83:0c:f6:24:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:87:A9:E7:D5:70:F9:82:9C:10:56:21:F0:13:C7:C7:12:DA:81:E1
X509v3 Authority Key Identifier:
keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:2d:76:ad:3a:b6:d4:f2:41:fe:2a:40:b8:78:c2:3b:5d:aa:
87:d9:31:77:5a:36:27:80:18:e3:9e:c1:a1:86:97:25:55:4b:
48:2c:01:ea:8e:a2:5e:66:90:48:a7:fe:5e:f7:62:4f:cf:ae:
30:fa:47:34:f5:6f:ca:40:5c:0b:63:0d:46:f5:1b:70:51:12:
bb:9a:10:71:76:4c:83:56:6a:4e:a4:88:12:d0:39:07:50:e7:
6e:4d:c0:e8:3f:70:4e:75:46:f3:aa:8a:0c:9c:6a:ac:d3:3a:
45:b0:fe:ac:43:46:14:46:59:10:71:0f:c3:1f:a2:c7:86:cb:
b9:36:9e:27:44:9a:24:fd:26:5e:aa:7d:50:95:7e:5c:84:f6:
0e:e9:98:f9:01:2f:91:c0:ba:c6:c0:8a:7c:dc:15:4e:fb:11:
9d:6f:4f:5f:fd:9b:8a:f7:07:ec:28:85:79:b0:19:c3:58:41:
e8:35:f4:8c:ea:9f:a9:a5:46:c2:b2:ec:80:6b:f7:13:57:ba:
90:0c:ca:6e:5b:f4:87:db:5e:05:f8:de:ef:fa:fe:49:38:a4:
70:00:cc:99:96:a8:40:4e:fd:c5:60:38:22:15:94:5d:92:59:
d4:3f:a5:e0:c0:8b:19:16:83:e0:9a:15:f9:56:f8:f3:81:22:
aa:ef:3a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 11:23:12 2025 by rpki-client