Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
File: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft (raw, json)
Hash identifier: 7V63tM0HXE8B3466+f7pC6bCPtAi8ZM/hC9wMwcCy20=
Subject key identifier: 0C:5B:7E:E7:31:8A:35:7E:3E:8C:8F:54:5B:B6:78:07:87:52:FC:AE
Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
Certificate issuer: /CN=ac08da139b56f998be24665db14ad1e156768fc3
Certificate serial: 0197700768470C0C93E495E71C6910557C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
Manifest number: 027E
Signing time: Sat 14 Jun 2025 20:00:22 +0000
Manifest this update: Sat 14 Jun 2025 20:00:22 +0000
Manifest next update: Sun 15 Jun 2025 20:00:22 +0000
Files and hashes: 1: YtEd8YCCc2z1I29jS88Pyzvdbak.roa (hash: evRpvoMqfORfl1HiyuiXKz+wbjxY32bzO48vEqf95co=)
2: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl (hash: r692EvbsR5Cv0o35E1hHce/nx3YtlIkOiO0MOM8Athw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:68:47:0c:0c:93:e4:95:e7:1c:69:10:55:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3
Validity
Not Before: Jun 14 20:00:22 2025 GMT
Not After : Jun 15 20:00:22 2025 GMT
Subject: CN=0c5b7ee7318a357e3e8c8f545bb678078752fcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:b1:62:31:7d:1e:12:60:e1:42:c0:97:74:
71:3a:dc:9a:7f:c3:30:e5:5f:9d:dd:f4:bb:44:7e:
8f:f6:0c:43:7f:8a:ca:4c:07:ab:24:03:5b:8b:db:
72:33:de:5e:0c:5f:cb:66:20:d2:7f:96:3b:34:a2:
4e:76:f2:79:cb:c3:71:08:0a:51:ba:8d:5d:25:f9:
a8:5e:15:af:f9:05:3d:72:a2:3c:2d:f9:9e:8b:20:
2c:eb:1d:1c:6d:8d:84:a9:63:b3:e3:3c:7b:6c:3f:
d3:93:07:23:50:17:1e:a5:ef:f8:ba:a8:8d:38:56:
9b:74:df:db:31:cc:c3:56:ef:09:5c:db:3e:7c:5d:
bd:56:a8:72:f6:e2:92:d0:a4:ea:7d:ce:d4:c0:97:
1b:24:bc:7f:16:59:0e:cf:eb:e7:48:88:6c:ff:e8:
b6:3f:a0:a5:8f:00:cd:74:e8:d9:29:f5:f1:8e:4b:
40:38:8a:19:f8:7b:e8:c2:a9:17:f5:57:e8:c3:f5:
ae:73:b9:71:61:2e:b6:77:7a:e4:55:82:60:03:98:
b0:a3:fd:71:e1:b6:f2:5d:9c:4c:e0:f7:b2:bd:dd:
cb:6a:dd:6d:de:ae:c3:8d:08:f5:49:55:60:78:ed:
93:3b:7e:4f:41:20:3d:c8:d6:8b:42:a9:95:85:2d:
61:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5B:7E:E7:31:8A:35:7E:3E:8C:8F:54:5B:B6:78:07:87:52:FC:AE
X509v3 Authority Key Identifier:
keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bc:dc:2d:6d:99:99:b7:7f:1f:87:52:d7:79:76:9b:f0:b5:
6a:0c:45:55:af:95:7e:d7:a3:b5:29:72:5e:a7:c1:c3:af:65:
9b:fb:66:2a:08:96:e2:03:44:d3:02:9c:a1:fd:49:90:ab:92:
d1:3e:0f:47:74:d7:8d:ed:bc:9b:1f:48:5d:41:84:5b:1f:09:
43:da:41:a7:d9:b7:43:d4:08:61:45:61:79:36:6e:21:a1:4b:
1c:71:11:b5:e3:14:33:6e:ed:d7:a3:3c:a1:1c:42:23:e4:36:
51:03:ac:15:fb:11:47:0c:63:2f:29:cb:b2:5e:4e:b2:94:76:
07:5a:89:7e:b6:7b:7a:57:d1:80:d0:11:66:19:db:d2:b4:a9:
e1:a9:b9:f3:38:50:cb:d1:60:f7:01:0e:c9:ee:5b:85:0c:dc:
da:1f:a2:b0:5e:75:ae:8f:6b:38:3b:ac:65:53:17:73:4e:b2:
f4:1e:0f:72:2c:71:91:7b:84:5e:ca:ff:c8:ce:7c:85:ca:5a:
b5:12:51:0b:5f:cb:08:58:3a:45:73:9e:2d:db:aa:6a:f0:17:
76:73:57:2b:65:a4:a7:10:b9:b0:90:47:0a:22:cc:fb:ce:e2:
d7:93:5b:74:4c:8b:fe:7c:da:e8:87:1f:71:e7:49:2f:64:ac:
49:83:15:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:03:05 2025 by rpki-client