Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
File: mnRIG4fez2ODfiaXRiyeRHANS90.mft (raw, json)
Hash identifier: MmPRMdr6A0X++9769m+8E9zwDThrVIWASLhzV0rC3A4=
Subject key identifier: 54:28:34:01:E6:20:89:90:DA:14:02:D5:83:29:BE:22:F3:EF:A7:BA
Authority key identifier: 9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
Certificate issuer: /CN=9a74481b87decf63837e2697462c9e44700d4bdd
Certificate serial: 019769613BAE70D74717FB22BF9E8463BC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
Manifest number: 0545
Signing time: Fri 13 Jun 2025 13:01:09 +0000
Manifest this update: Fri 13 Jun 2025 13:01:09 +0000
Manifest next update: Sat 14 Jun 2025 13:01:09 +0000
Files and hashes: 1: CK4siPWBYfHEvMudVxcsDQPxAR4.roa (hash: YhDnpIVqIiFTzSv32iL9GB9Nu0H7+HMcl1R+Eah/CyM=)
2: mnRIG4fez2ODfiaXRiyeRHANS90.crl (hash: z/SZryaXveu2xdU+9c5AAhRsv0YAKvaQ8kbJiXCf5/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:3b:ae:70:d7:47:17:fb:22:bf:9e:84:63:bc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a74481b87decf63837e2697462c9e44700d4bdd
Validity
Not Before: Jun 13 13:01:09 2025 GMT
Not After : Jun 14 13:01:09 2025 GMT
Subject: CN=54283401e6208990da1402d58329be22f3efa7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:b4:f4:2b:b3:70:58:ac:2d:94:cd:8c:13:
e3:cf:e1:a7:0b:c7:4a:be:dd:20:e6:fe:69:d5:78:
5a:aa:3a:e7:e1:73:d1:1f:9f:ae:62:df:b0:9e:10:
db:a2:43:11:63:b0:5b:83:0e:92:17:38:c7:34:92:
7b:61:78:51:b6:2b:70:0e:78:73:86:00:e6:99:39:
64:fa:ce:40:82:c5:0e:08:b8:05:65:2c:51:96:c6:
ab:65:03:c7:52:55:d9:e3:3a:e1:e8:54:97:b3:bf:
98:e7:92:8d:d8:b6:ae:f2:d2:80:a5:4a:2e:67:aa:
b1:82:da:00:71:4c:11:2f:a6:17:c0:8c:24:bb:22:
ca:7d:8c:f7:a0:79:68:c8:55:e8:8f:a7:af:ac:6e:
e4:64:f1:0e:8f:df:e0:b3:8f:7a:a0:e0:69:db:91:
9a:40:e3:54:04:d0:90:8f:69:d2:be:90:47:1e:fe:
ca:db:c8:97:2d:b6:8c:b7:52:44:b6:d3:e6:f5:63:
82:10:8e:3c:79:4f:0c:5c:2d:71:eb:5f:a7:0c:a0:
eb:c8:31:d3:e4:83:56:29:65:20:c8:e0:0b:a4:59:
7c:68:fb:f3:5d:00:08:78:8d:1a:fb:d4:93:cc:1d:
f9:af:07:43:2c:18:91:7c:4e:5f:46:57:ff:d9:5e:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:28:34:01:E6:20:89:90:DA:14:02:D5:83:29:BE:22:F3:EF:A7:BA
X509v3 Authority Key Identifier:
keyid:9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b0:89:44:17:f4:ea:4e:ca:41:3d:03:08:46:07:40:6e:93:
91:8b:aa:94:9a:e4:16:3b:57:10:b0:d2:e7:59:89:5e:64:fe:
76:f8:2b:19:fb:5b:a9:ae:2d:7f:68:7b:77:9c:0c:07:ff:9b:
c3:98:79:fb:35:8c:10:86:94:84:8b:55:a5:9b:20:6c:d2:7b:
29:d9:ca:86:3d:d9:3e:b1:1f:01:b3:e0:31:28:7c:ea:c7:7a:
46:38:e5:0c:fa:8c:f2:4b:4c:b7:11:1b:e5:58:59:de:ec:bb:
18:75:7e:61:ed:5d:a8:2c:79:8d:04:ea:1f:ef:3c:11:53:4a:
a1:46:82:d1:aa:b9:a2:5b:c0:ce:78:4f:97:76:58:62:7c:72:
fc:03:92:f8:41:60:39:ba:1e:b7:1c:d0:0e:c4:c7:b2:0c:e0:
fb:2c:f8:63:b2:27:1d:e2:77:67:72:80:b7:ee:b9:75:a1:13:
c3:aa:5a:5a:7a:90:6a:03:aa:f8:65:7e:4b:1d:2a:ee:54:07:
1f:f5:40:a7:2d:c4:7a:b7:0c:1f:d0:c9:73:71:29:cb:51:68:
41:b5:8c:84:71:2c:1e:8e:4b:d5:a6:52:1a:49:55:3d:85:78:
f7:29:7e:dd:b4:6a:38:6a:78:aa:22:84:fd:05:5a:77:88:17:
04:82:4f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:22 2025 by rpki-client