Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
File: rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft (raw, json)
Hash identifier: HWvfsQyyM3juyq0yybHuuL1adKdhiOqV+RJhIAd6ruw=
Subject key identifier: FA:45:B3:D6:FA:DE:6F:C4:9D:0E:FD:A6:81:AF:A9:41:C1:C0:60:74
Authority key identifier: AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
Certificate issuer: /CN=ad393c63f178657821a237ba026ca5279233333d
Certificate serial: 019769977CB6B9DCC478448455F540B5A662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
Manifest number: 0E01
Signing time: Fri 13 Jun 2025 14:00:24 +0000
Manifest this update: Fri 13 Jun 2025 14:00:24 +0000
Manifest next update: Sat 14 Jun 2025 14:00:24 +0000
Files and hashes: 1: NRGRL-46NCSPaGi9AZCwzE3w5nE.roa (hash: u0L8t2q2EBStWXwxFZXL40Y75wNx2nDlIz7mo+UHSk8=)
2: rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl (hash: g1b06y3cj9ZviVaDpiKlkhyl21Tv/aEPSpXgG4qZ8yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:7c:b6:b9:dc:c4:78:44:84:55:f5:40:b5:a6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad393c63f178657821a237ba026ca5279233333d
Validity
Not Before: Jun 13 14:00:24 2025 GMT
Not After : Jun 14 14:00:24 2025 GMT
Subject: CN=fa45b3d6fade6fc49d0efda681afa941c1c06074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5e:c3:f5:69:9e:6f:38:a8:ae:cf:af:b5:1e:
08:fc:41:a3:5c:42:99:95:a5:4c:65:69:c3:42:7e:
1c:f9:b8:b9:11:07:bf:a8:47:d1:f4:a8:52:a3:d6:
90:5d:d5:a6:7d:24:80:59:1d:67:0b:b8:59:88:41:
0d:79:56:b0:12:af:79:eb:35:47:52:49:ad:f7:42:
35:32:b6:39:7c:0a:0c:6b:60:6a:b8:5a:13:60:a0:
50:ea:08:af:b0:40:fd:61:bd:11:f7:e8:44:0b:ad:
6d:db:27:39:02:ef:e5:f4:90:9f:b3:56:6d:14:f7:
c6:23:8c:a7:21:2d:25:80:30:72:1f:99:12:00:9f:
c7:e1:7c:91:08:b9:0d:28:aa:4d:d2:1c:50:7d:11:
a9:71:21:00:f9:ff:17:ae:f5:34:8a:78:3c:24:23:
7d:90:3d:b4:b3:01:9c:9e:08:96:f5:23:fe:ca:cc:
21:20:a4:9e:2c:af:65:19:90:7a:79:50:bd:26:91:
46:64:fa:65:d5:0b:96:21:b5:2a:c9:88:a3:0f:29:
b4:4d:1e:75:31:50:06:31:f7:74:c0:db:7a:3f:88:
37:74:dd:bb:2d:ae:01:26:71:e3:78:46:48:d3:0f:
00:c5:10:74:e5:29:15:2d:3d:cc:29:b1:f8:14:5c:
0d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:45:B3:D6:FA:DE:6F:C4:9D:0E:FD:A6:81:AF:A9:41:C1:C0:60:74
X509v3 Authority Key Identifier:
keyid:AD:39:3C:63:F1:78:65:78:21:A2:37:BA:02:6C:A5:27:92:33:33:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTk8Y_F4ZXghoje6AmylJ5IzMz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39e9ec-8fa5-409c-b1de-937e9d99cac2/1/rTk8Y_F4ZXghoje6AmylJ5IzMz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:90:77:ca:1c:ba:e9:3c:ec:2f:a5:71:68:60:44:8a:82:af:
a2:da:31:2f:d9:05:51:30:9b:8a:c0:07:ae:dd:57:2b:4b:c0:
3d:6e:0a:47:b3:67:69:60:08:de:72:79:f5:84:f0:3f:b6:28:
97:03:38:30:ea:6f:2e:66:fe:7c:ca:f3:53:00:4b:24:71:73:
94:23:41:2a:03:96:a5:b7:2d:e7:40:b2:97:4e:30:fd:76:3f:
23:d3:8b:e1:fd:c1:90:cb:75:c3:53:dd:25:e3:9d:bd:f4:fd:
d9:bb:f5:bd:14:7c:f6:3b:10:45:1d:6e:6d:2f:45:b3:9f:5d:
56:c3:e0:5c:6e:dc:94:fe:95:e3:93:e5:ed:0e:b4:f6:a6:79:
be:13:a6:40:04:17:2d:56:5a:1e:95:34:c1:39:d1:5f:6e:0e:
ae:df:c5:37:11:56:6a:8b:69:5e:99:98:06:1d:85:da:b0:c4:
a8:77:ec:02:c4:41:61:e4:dc:0f:62:31:a0:d3:05:4e:85:3c:
7d:f1:9b:32:49:f3:a1:0e:5d:53:fa:dd:d9:72:a7:80:cb:54:
49:3e:ca:22:cb:c6:f3:62:54:70:fd:6f:09:d9:75:a2:5e:86:
c3:eb:5d:30:76:98:9b:ec:d1:be:42:1f:2c:02:8c:7c:c1:f9:
8f:36:a4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:02 2025 by rpki-client