Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
File: rEvdnpfyEDcMwwElesFfrrj6Uk4.mft (raw, json)
Hash identifier: qlbNWQmmjYI3iVgl95UkLEK/txEoI/2eMbKQpmpjKYo=
Subject key identifier: BA:E1:C6:41:8A:4A:DA:72:7F:3F:F5:11:DC:1A:B9:8F:BA:BB:98:B8
Authority key identifier: AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
Certificate issuer: /CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Certificate serial: 01976D74380A799047239D1238EB2BBF1D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
Manifest number: 0A3A
Signing time: Sat 14 Jun 2025 08:00:22 +0000
Manifest this update: Sat 14 Jun 2025 08:00:22 +0000
Manifest next update: Sun 15 Jun 2025 08:00:22 +0000
Files and hashes: 1: Qh3mzL9VUkWkolAH9jB_GpWhLg0.roa (hash: LSjP0eVYXjK72XpL0ynKNA9slIHH17di2BQFA3XHSqk=)
2: rEvdnpfyEDcMwwElesFfrrj6Uk4.crl (hash: pguunhJRRvXGdqUGuWLaGADoVZHKDbDGHGnNb+kruow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:38:0a:79:90:47:23:9d:12:38:eb:2b:bf:1d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Validity
Not Before: Jun 14 08:00:22 2025 GMT
Not After : Jun 15 08:00:22 2025 GMT
Subject: CN=bae1c6418a4ada727f3ff511dc1ab98fbabb98b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:41:a7:4e:38:c5:c2:af:35:1e:f0:09:f0:
25:91:7f:44:8b:47:17:de:ec:66:c4:dd:cc:05:86:
41:e5:78:9c:92:f0:43:11:f0:03:00:c9:5c:12:66:
d9:b2:61:70:13:3c:a7:69:c7:0a:35:84:b3:b5:ac:
07:f0:97:e1:58:5a:d1:e2:24:00:c9:5e:4c:34:12:
57:94:09:bc:ac:92:25:96:a6:e1:d0:18:b3:6d:95:
f7:8c:cb:ad:d0:1b:fc:ff:ad:66:e9:39:7f:c7:84:
ee:3d:12:d2:a4:18:79:e1:99:7b:fd:6d:63:e5:9a:
b8:45:79:82:c5:31:96:6b:05:05:b3:ff:a5:11:88:
96:ba:a7:b3:c0:ac:76:70:70:84:1d:f2:bc:2d:92:
59:11:eb:f2:8f:10:39:b2:e6:77:6f:20:77:33:9c:
f2:c0:35:5c:ca:1f:10:1e:71:4d:22:30:97:b0:71:
2b:90:d4:8f:87:74:74:5c:46:54:d2:46:77:79:13:
1e:fa:83:01:d9:16:27:f7:f9:94:ea:61:94:b6:db:
91:51:c6:b7:82:49:76:1c:50:fb:64:29:6e:80:7e:
f5:fe:2b:87:c0:5b:d0:06:7e:fc:73:4f:9f:8d:12:
d3:01:c6:7d:34:89:eb:a8:ed:dd:80:90:49:4c:fc:
eb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E1:C6:41:8A:4A:DA:72:7F:3F:F5:11:DC:1A:B9:8F:BA:BB:98:B8
X509v3 Authority Key Identifier:
keyid:AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:41:bf:4f:d2:39:df:26:2d:53:14:6b:fe:f8:8e:1a:d5:0b:
50:5e:79:e3:8f:ff:c8:14:40:8a:f4:26:28:55:38:26:e0:e8:
08:04:1c:37:d0:27:9f:9a:ec:4d:44:66:01:c9:7f:50:4e:15:
2b:5b:b3:a6:a7:56:23:49:cc:86:67:24:4c:b2:f2:9a:5b:92:
6b:85:02:00:a5:81:f4:2f:b4:ce:ca:9e:59:cb:db:0c:8f:e5:
2d:74:f8:2b:64:72:3a:b9:4a:4d:44:cb:9b:90:d0:1d:71:62:
30:c4:03:87:77:ba:c7:46:d4:83:de:1b:fa:1e:82:2e:85:d7:
50:f4:00:a7:a8:8d:61:4e:0d:28:86:9d:4c:2b:28:49:0d:d4:
06:a5:8b:4b:18:bc:a7:5f:de:db:76:55:3f:3e:27:06:8c:03:
9f:63:c8:96:10:8e:6d:8b:a5:cb:89:e9:27:11:68:42:09:00:
0c:4b:95:32:0b:bf:81:85:fe:f5:33:99:81:12:04:30:0e:55:
12:25:ea:71:ce:2c:11:80:5a:33:c1:1a:cf:bc:e2:0b:7e:17:
46:d6:e5:5b:48:b2:1b:d9:85:82:c4:5e:81:2e:72:2b:e7:c6:
d9:fe:71:b6:41:12:f3:1b:8f:71:0d:ae:e8:2c:c0:ac:a6:8b:
84:b3:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:45:57 2025 by rpki-client