Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
File: rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft (raw, json)
Hash identifier: N2cjIRsNOndTyP94uqq7pe8Gc7zqpeVUphDxKYTQ0vA=
Subject key identifier: 52:51:52:D9:CC:46:F5:4D:72:05:69:96:33:98:94:95:54:FA:A2:FA
Authority key identifier: AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
Certificate issuer: /CN=ae04106f302c0077e90b66762ebb222e611b33dd
Certificate serial: 01976A06160D9AEC58CB752DF1AD02371943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
Manifest number: 04C0
Signing time: Fri 13 Jun 2025 16:01:13 +0000
Manifest this update: Fri 13 Jun 2025 16:01:13 +0000
Manifest next update: Sat 14 Jun 2025 16:01:13 +0000
Files and hashes: 1: GOFFPgaA_FNPo8jH9LLALXPdKRA.roa (hash: JZqDVZ5TyXAW6arfyTRJvqhjtcPlVF0bW1jBuVqcZ2U=)
2: rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl (hash: EoE56yRfFD1oOVxJmrqKUov5Wph2fWmcbce+IvQ7DDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:06:16:0d:9a:ec:58:cb:75:2d:f1:ad:02:37:19:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae04106f302c0077e90b66762ebb222e611b33dd
Validity
Not Before: Jun 13 16:01:13 2025 GMT
Not After : Jun 14 16:01:13 2025 GMT
Subject: CN=525152d9cc46f54d720569963398949554faa2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:76:b7:f2:4c:e3:47:95:47:66:6b:69:ea:af:
8e:db:52:ec:4a:dc:fe:df:29:34:4d:77:72:5b:32:
3d:7d:f7:b5:9d:01:2c:f5:5f:40:bb:d3:3b:09:76:
5f:6c:89:e7:b0:11:9b:80:a7:3a:a7:f8:ac:1d:24:
ac:c7:5e:91:c2:da:79:4a:fe:dd:8a:ec:cc:43:62:
16:b6:10:cc:03:f0:54:b6:17:88:8b:fa:69:3c:a2:
4a:35:d0:2c:fb:48:b6:80:86:98:26:ff:bb:3c:0e:
d4:05:6d:89:b1:60:c2:c3:3c:95:7f:86:81:37:20:
5d:4d:6e:44:28:aa:e3:91:71:0e:5e:d0:35:97:51:
b7:cd:85:49:be:6e:37:6b:00:18:9c:23:27:ae:10:
71:ff:87:52:7d:80:1f:c9:56:10:a5:4a:af:22:9e:
23:c6:dd:de:bf:7b:b9:18:d4:71:ce:38:6c:c5:68:
a7:ef:e7:6a:77:13:a2:9b:3b:73:81:2b:d5:83:a1:
23:14:e1:9d:d6:c9:9f:c0:0f:32:a0:b4:1f:59:87:
96:97:0a:f7:da:37:38:b3:34:b6:6f:69:63:94:41:
ca:4d:a2:63:e1:f2:e6:d3:da:e8:88:60:1a:8d:a6:
70:a3:cf:b0:ef:32:9d:5c:3c:a3:63:59:fa:9a:c3:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:51:52:D9:CC:46:F5:4D:72:05:69:96:33:98:94:95:54:FA:A2:FA
X509v3 Authority Key Identifier:
keyid:AE:04:10:6F:30:2C:00:77:E9:0B:66:76:2E:BB:22:2E:61:1B:33:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgQQbzAsAHfpC2Z2LrsiLmEbM90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b90729-83d2-4c18-8063-11fe27d8e170/1/rgQQbzAsAHfpC2Z2LrsiLmEbM90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:66:ef:93:4f:a9:e5:c5:03:ad:76:ff:14:bb:ca:b2:de:c1:
48:ce:c3:ee:19:41:b1:75:88:20:65:20:16:b2:b0:93:b2:a5:
41:c8:37:98:2e:a0:9a:6f:38:5a:a5:f2:c9:c5:9d:2a:cd:5d:
5f:6b:54:55:9a:e2:c7:a5:9b:69:33:fd:f2:38:28:a6:5a:cf:
9c:e9:37:6d:be:34:ce:e6:97:b9:71:fd:e6:6a:e9:e4:be:ce:
cb:ad:39:52:83:10:07:d6:e7:34:00:b2:42:e2:19:51:86:84:
42:58:98:52:2b:c6:79:b6:2f:9e:e3:4e:43:10:46:4d:0e:de:
42:ef:f1:1f:44:a4:f7:43:56:10:41:92:58:8f:ee:17:82:7b:
9f:41:b7:74:45:97:6f:90:d3:2a:60:52:0a:64:9a:eb:26:57:
23:68:e1:94:fd:38:f0:5f:df:5e:a3:e9:24:c2:79:a8:e4:e3:
12:df:17:e3:43:da:d0:de:5e:b4:5b:e2:d8:85:5a:cb:50:25:
cf:bb:9b:65:d5:68:b1:80:4b:a6:92:cf:b7:d0:bf:1a:44:8c:
b6:2e:d3:13:a0:fe:0e:2e:5c:06:19:27:15:be:5b:01:6b:22:
6b:26:30:1a:ef:25:b5:85:4a:cb:ff:16:b4:8c:df:b9:62:e9:
a2:20:ea:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:07 2025 by rpki-client