Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
File: Rl73vS6z3NurBJCDgNSKjy_rxiw.mft (raw, json)
Hash identifier: BysNzXjVbCa2oQ24VwyDT7Hn7KKNqq/giNS4AVC00n4=
Subject key identifier: FE:E5:78:9C:05:2E:C4:4F:62:AF:A4:CD:EF:2D:AC:C5:99:56:EF:F7
Authority key identifier: 46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
Certificate issuer: /CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Certificate serial: 01988B45E35C25A019EB08268B51C7053FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
Manifest number: 1020
Signing time: Fri 08 Aug 2025 20:01:09 +0000
Manifest this update: Fri 08 Aug 2025 20:01:09 +0000
Manifest next update: Sat 09 Aug 2025 20:01:09 +0000
Files and hashes: 1: 0-c9PgPd1_wXhamWThnKHlQbGGs.roa (hash: t9blZuOAI0IrEr32bYa6e5eRP1KzQCe8vHG6m5RDWu8=)
2: Rl73vS6z3NurBJCDgNSKjy_rxiw.crl (hash: aMR6CTPA1hlN51NOnEuBTENUWTd2Y2MZN46kjMooN5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:e3:5c:25:a0:19:eb:08:26:8b:51:c7:05:3f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Validity
Not Before: Aug 8 20:01:09 2025 GMT
Not After : Aug 9 20:01:09 2025 GMT
Subject: CN=fee5789c052ec44f62afa4cdef2dacc59956eff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:e0:88:5a:e1:3f:4f:2a:10:66:14:b0:06:
fe:e6:4c:c6:55:7d:f1:34:a5:4d:64:14:ba:da:fc:
d3:9c:5f:df:11:36:0e:c0:f0:10:88:19:55:67:20:
b3:34:5a:3d:6a:3f:1e:51:86:54:9c:61:c8:57:77:
6c:44:77:91:3d:1f:dd:bb:2f:d0:9a:23:38:3a:6e:
06:83:4c:b7:98:56:d6:55:10:99:0d:a6:70:a6:a6:
f3:7e:8b:56:82:56:fe:12:e9:f0:3e:db:2a:ad:95:
19:0b:ca:72:26:74:99:98:5d:72:6a:21:6a:80:f4:
a8:5f:3b:1f:e2:a1:7f:5f:1c:3f:1c:c4:63:f3:e2:
a5:df:75:30:e9:3e:24:1c:92:63:b3:de:3a:68:fb:
41:64:0b:db:e4:ca:da:1a:84:6c:a8:0b:89:f3:6a:
74:be:a7:ff:d7:07:b9:65:e5:b5:3e:c3:0a:3d:e6:
f4:73:11:1d:39:81:be:1b:ef:a7:86:8a:0b:0a:02:
62:d2:ce:4e:c4:5e:db:1d:86:45:e4:89:a8:5e:ff:
33:7b:77:93:3a:b2:c9:77:24:a6:29:9a:e0:a8:30:
82:7a:7c:db:6d:96:1e:9f:73:d4:b5:9a:76:36:49:
f5:51:95:a2:93:72:24:3a:d0:f9:e1:77:cb:ef:36:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E5:78:9C:05:2E:C4:4F:62:AF:A4:CD:EF:2D:AC:C5:99:56:EF:F7
X509v3 Authority Key Identifier:
keyid:46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1d:bb:31:c9:34:dd:64:b4:25:0b:df:c2:5b:e4:1b:25:16:
89:81:98:f9:e4:03:9b:8f:e5:fd:9a:41:b4:89:50:d2:c8:59:
9d:a9:43:25:bb:83:06:f1:24:1d:5e:d2:ae:4d:a8:eb:e0:e7:
cd:a1:9f:92:00:4c:02:36:58:8a:35:4e:a7:79:e5:eb:8d:92:
06:6f:6e:5c:a6:91:f8:41:2c:1f:ed:f7:33:c4:aa:c4:64:bb:
1d:3c:50:0f:7d:53:e6:d9:2f:45:a6:8e:61:6e:53:ec:68:ef:
94:f9:4b:eb:b8:fe:e7:1e:dd:cf:6f:37:ee:f1:0d:b9:d2:1e:
02:cf:74:7e:a9:28:87:aa:cf:fd:76:87:49:9f:e0:79:00:fd:
6f:a9:52:23:54:09:51:0a:58:1a:4a:2b:04:37:d7:69:84:84:
29:83:b6:12:6a:88:46:4d:10:d7:50:64:11:b3:3e:7b:79:9e:
de:db:da:a1:2a:8f:d4:dc:1e:b7:42:c1:12:cb:d4:c2:14:a1:
ca:6a:51:7d:f0:53:c1:00:ad:29:34:d3:76:56:21:89:05:a2:
b2:c3:65:9d:33:37:fe:45:fd:87:f6:b4:bc:c4:e5:b2:61:9a:
9e:92:57:a7:c1:12:47:01:42:d6:8f:c8:c2:72:1a:50:cb:51:
4d:9f:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:09:48 2025 by rpki-client