Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
File: rd0qgVBgqn5iGiCUNJdYsgNolvA.mft (raw, json)
Hash identifier: TQLnmp49w9i3RYdC7Ejc4X6mbt116akqQ3iTw867Dsw=
Subject key identifier: E7:55:2D:CA:20:AB:8F:F8:8A:82:71:37:B4:7E:6B:2E:94:A6:AA:D0
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 019770E367AF96281147F597CB7B7CD1C466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
Manifest number: 01EC
Signing time: Sun 15 Jun 2025 00:00:40 +0000
Manifest this update: Sun 15 Jun 2025 00:00:40 +0000
Manifest next update: Mon 16 Jun 2025 00:00:40 +0000
Files and hashes: 1: 1-B4mnYUsJDtWU5_HUQ7FJC6tCSw.roa (hash: sHcyd6IuGZiLkLEHDVFO8zkeKGMSe2epXGrDt7jtZiY=)
2: kIgDZb1mJNxoy-31G2UkNHRwWx0.roa (hash: zPGGaXstMh703tXkFi/JyzFhGqACNCTHmmN1tjIc6M0=)
3: rd0qgVBgqn5iGiCUNJdYsgNolvA.crl (hash: 1JGb86Cge80tMVsVJ2mm79Qyo48Nr3wjiRF1A5eNcGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:e3:67:af:96:28:11:47:f5:97:cb:7b:7c:d1:c4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Jun 15 00:00:40 2025 GMT
Not After : Jun 16 00:00:40 2025 GMT
Subject: CN=e7552dca20ab8ff88a827137b47e6b2e94a6aad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:05:27:04:16:44:32:47:6b:d8:36:52:4f:
9f:94:29:0e:c8:5a:c9:54:2b:2f:92:79:73:81:b4:
2c:b8:9f:12:67:4c:4c:59:aa:e5:85:91:f5:07:8f:
d0:e8:a3:15:da:56:9e:41:ca:5d:fb:98:18:0d:d3:
53:5d:fb:36:8a:4b:db:9e:6a:a2:54:70:76:73:c6:
ae:3c:98:78:d0:f9:6f:34:5c:22:e1:bb:8d:dc:31:
57:82:b2:bc:9c:b3:bb:a0:a1:12:b3:7f:7e:8b:de:
cd:61:2c:f7:16:db:5d:c9:19:06:36:b1:bb:18:f1:
3d:61:62:9f:15:8d:eb:bb:de:f1:78:96:d1:aa:a7:
27:06:39:5e:49:ef:02:88:48:69:cf:71:44:95:9c:
b8:ca:55:e9:2e:03:da:3b:0b:38:8c:5c:5f:8d:c3:
ac:37:58:f9:84:ef:d1:6d:cf:5a:94:a7:cc:0b:f6:
b6:a1:d7:83:77:94:60:0e:14:de:85:b8:15:c1:7d:
9c:a6:47:5d:a2:47:5e:c1:ab:2e:2f:c2:3e:69:50:
20:48:c9:f4:44:65:5f:96:44:6c:fa:e0:ee:31:25:
42:f0:76:f9:91:d8:a6:3d:2b:ad:9b:06:79:a0:4a:
07:3e:12:06:9e:03:aa:68:00:0c:d0:28:02:af:b1:
2d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:55:2D:CA:20:AB:8F:F8:8A:82:71:37:B4:7E:6B:2E:94:A6:AA:D0
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:36:42:82:69:2b:02:73:75:58:59:e4:7a:ce:b3:de:0d:db:
08:6c:7f:c5:31:41:29:4e:97:e6:81:fd:92:19:48:9b:8c:44:
78:ab:51:2d:b4:c8:33:37:9b:ed:f7:ff:bb:e4:ee:ec:57:b9:
bc:c8:7e:45:94:e3:d4:11:ec:ec:2c:48:7e:34:da:91:3e:6d:
9c:f7:0b:cb:b4:74:82:8f:fe:a8:7d:39:8b:9a:f9:fa:12:00:
d1:44:b5:49:de:41:9c:38:30:9e:bf:eb:c5:4c:bc:06:cd:0b:
ac:cd:7f:5e:23:47:fd:7b:ba:ea:4c:55:af:7b:9f:b8:f3:ec:
66:bb:26:51:30:39:80:70:55:8d:0a:37:e8:65:94:fa:93:77:
5f:89:75:e9:7c:d4:fa:2a:44:62:6f:70:e6:ec:b1:05:33:3c:
d0:17:ad:d0:2c:58:b3:bc:96:a6:f9:b6:6b:68:9b:45:4d:3a:
fd:b4:69:52:1d:f0:62:29:d3:1a:2a:1d:c5:10:34:56:b2:ae:
3e:67:73:26:d7:bf:b5:3e:8e:36:8b:85:e6:fe:14:aa:85:b7:
d0:d8:35:cb:b5:60:d5:1c:dd:92:3f:7f:c5:3f:6f:14:28:f9:
18:8d:72:1c:cc:70:7a:ab:73:52:4a:f7:aa:47:f4:32:c5:a8:
90:8b:26:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:08:42 2025 by rpki-client