Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
File: rvHu-qdX046xBPpMuk2WK3LlK1I.mft (raw, json)
Hash identifier: AbNHAijlTz0Enhqetk+9KwhwfrbllemB7FA7N9izO20=
Subject key identifier: F4:A0:E3:53:38:34:6A:8C:29:7F:91:B6:FD:21:52:42:92:B0:0E:DD
Authority key identifier: AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
Certificate issuer: /CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Certificate serial: 01976D3DA967DEF972135EC84103247D5CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 07:00:47 +0000
Manifest this update: Sat 14 Jun 2025 07:00:47 +0000
Manifest next update: Sun 15 Jun 2025 07:00:47 +0000
Files and hashes: 1: jtrE-ZquFgpFsUyQd2ruDZJ4V1Y.roa (hash: DLSZmdArA6I562nrgAPaSvfYMqezrmvR6p+K4KjZ8d8=)
2: rvHu-qdX046xBPpMuk2WK3LlK1I.crl (hash: KqfwpBJRxv/Bi1tiSN2xQAurkPhmS1audUOlcxAMElc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:a9:67:de:f9:72:13:5e:c8:41:03:24:7d:5c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Validity
Not Before: Jun 14 07:00:47 2025 GMT
Not After : Jun 15 07:00:47 2025 GMT
Subject: CN=f4a0e35338346a8c297f91b6fd21524292b00edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:54:f7:07:17:7a:a0:76:a1:41:07:f3:fc:
ac:13:4e:4d:4c:4a:01:1f:9b:f8:78:28:55:ee:4e:
6c:b0:e8:65:27:ae:6a:e3:4e:95:c9:cd:64:9c:14:
aa:61:36:a5:00:20:bf:56:8b:8e:61:8d:fb:28:79:
8d:fa:91:6d:9f:1a:1d:7f:b3:95:f1:49:d9:24:f6:
05:1e:e6:69:c8:1d:68:7e:64:70:5c:54:1f:94:32:
4f:65:16:6e:9e:1f:6e:f8:88:c8:6c:6c:69:cb:a7:
ab:cf:e9:81:18:43:de:fe:40:00:fd:3b:14:c0:8d:
6e:6a:6d:51:be:4b:b9:ec:40:17:b0:72:f7:64:8c:
40:28:3f:9b:94:90:3c:f3:fe:05:5d:72:9e:54:5b:
19:0f:fc:9a:05:d0:17:54:d5:0b:d1:b6:2c:85:24:
82:a5:1e:13:47:34:99:2e:f8:ef:e8:3c:12:ca:b3:
82:15:c2:3c:2f:68:d9:90:8d:10:30:ca:5e:7d:a4:
54:02:4b:bd:1e:2e:bc:f9:65:c7:1c:9c:f3:da:e4:
a9:83:74:a1:e4:99:1b:e7:62:a6:dd:fe:8c:37:b4:
64:74:56:63:45:6c:f9:26:e0:11:dc:c9:e5:44:06:
28:26:fc:0a:eb:32:16:8b:64:7b:89:1d:f0:5c:ba:
fd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A0:E3:53:38:34:6A:8C:29:7F:91:B6:FD:21:52:42:92:B0:0E:DD
X509v3 Authority Key Identifier:
keyid:AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:61:d8:52:f6:a6:6f:d2:b5:d3:fc:9a:70:80:d8:c9:10:79:
1c:e9:8e:2e:c0:0b:81:a2:ea:ca:7a:bd:b7:28:e4:4e:4d:76:
57:0c:44:97:de:17:91:ed:58:b0:9b:d3:bb:56:b2:6e:4a:a9:
0a:bd:f7:a7:87:7d:49:aa:91:35:80:57:8a:d9:4c:98:61:e7:
00:e1:7f:42:cb:75:fa:1b:0d:0f:af:ab:97:77:95:02:6a:db:
97:81:bd:11:f3:eb:de:42:e6:d5:fb:1c:03:63:7f:f0:21:8e:
62:53:a5:c3:12:61:82:02:91:06:78:4d:67:21:54:d1:53:2b:
fc:78:8a:a2:40:d8:be:5e:fd:7f:57:3b:48:51:14:19:73:b4:
98:97:8f:89:28:d6:3d:38:a6:51:76:d1:3e:c4:3c:34:e0:f5:
fa:6b:e2:44:c4:22:bc:41:6d:97:46:d5:7f:c6:56:e1:db:5a:
8a:61:a5:cd:6f:ce:54:01:7e:f7:04:f3:81:78:e0:01:8a:f0:
e8:8f:c3:05:de:94:a8:ee:b0:58:cd:52:4d:fb:43:5c:89:53:
82:dc:b4:6f:0c:f6:a8:6f:63:68:a9:57:3e:c0:04:d6:58:34:
c1:2a:9f:3a:39:38:ed:fd:ec:ea:c3:e0:13:a6:af:6b:4d:37:
68:82:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:28:22 2025 by rpki-client