Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
File: riCckmRq40LKpdRtwdNzWg0uexQ.mft (raw, json)
Hash identifier: yxaE6H/2rV9Pva2UEeo2kBNkIsV9jKZg+T5X6VkrKms=
Subject key identifier: 84:51:CD:7B:8A:30:DF:FE:E3:54:4B:F0:B0:7D:54:96:14:7F:EA:A9
Authority key identifier: AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
Certificate issuer: /CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Certificate serial: 019770AC3B7E4E107E9E63412CAAF251676A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
Manifest number: 0D94
Signing time: Sat 14 Jun 2025 23:00:24 +0000
Manifest this update: Sat 14 Jun 2025 23:00:24 +0000
Manifest next update: Sun 15 Jun 2025 23:00:24 +0000
Files and hashes: 1: WE4vStdUw7e2RexA2uVQrcHSC4Y.roa (hash: UJ9it5wcaDKphifUsLvzyU+8UhqAc1r+2HZRVAecKf8=)
2: riCckmRq40LKpdRtwdNzWg0uexQ.crl (hash: EtuYKnh+e70gFfMnGQ7jvFTZeuxamtA1jYqfQngvtRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:3b:7e:4e:10:7e:9e:63:41:2c:aa:f2:51:67:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae209c92646ae342caa5d46dc1d3735a0d2e7b14
Validity
Not Before: Jun 14 23:00:24 2025 GMT
Not After : Jun 15 23:00:24 2025 GMT
Subject: CN=8451cd7b8a30dffee3544bf0b07d5496147feaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:0e:04:ed:e7:55:0f:50:7c:4a:e8:ca:b0:
8c:08:0a:42:49:4c:03:d3:8b:c1:72:17:dc:60:6b:
90:79:8b:4f:26:0b:ea:9a:ad:c4:c4:0c:dd:8b:e8:
6c:3e:17:98:a1:c0:50:d6:f0:74:a9:ab:90:9b:23:
c9:d5:e7:86:d0:1b:80:18:14:d3:04:0d:ad:48:bb:
4d:cc:70:fe:c7:8e:8d:a2:b2:32:52:3c:ac:8b:6f:
8e:73:9c:0c:b5:fa:2c:d9:ce:86:72:ac:0a:c5:b9:
7f:78:9a:b1:d5:c1:ae:c2:bc:fb:f9:83:b0:a6:b5:
6c:2d:dc:39:33:2f:59:1f:c9:9b:33:d0:09:7e:9b:
a7:73:ba:4f:cc:28:c5:8c:b2:c6:de:18:cf:bb:65:
5f:2b:ef:2e:9b:6c:94:16:a9:74:09:de:a4:1e:bc:
eb:60:a9:ff:a6:69:6b:eb:48:77:31:f0:e7:51:6b:
5e:bd:d5:3a:07:76:e7:9b:44:79:2d:52:61:e0:01:
f1:93:63:18:35:bb:fa:ed:b1:f1:47:03:a6:71:e2:
38:8e:1a:f1:51:e8:6a:3b:d0:50:46:1e:03:47:45:
e4:61:3a:bd:85:3a:52:52:dc:03:3f:b6:30:1c:98:
63:69:eb:1d:57:f5:53:84:f8:e2:9a:7b:84:d1:0c:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:51:CD:7B:8A:30:DF:FE:E3:54:4B:F0:B0:7D:54:96:14:7F:EA:A9
X509v3 Authority Key Identifier:
keyid:AE:20:9C:92:64:6A:E3:42:CA:A5:D4:6D:C1:D3:73:5A:0D:2E:7B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riCckmRq40LKpdRtwdNzWg0uexQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3f3a30-3e64-4380-a148-e0a23da5e628/1/riCckmRq40LKpdRtwdNzWg0uexQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fd:14:ff:2f:35:fe:b7:4d:16:dd:24:16:9f:d0:9b:d5:00:
6a:91:23:d0:87:ed:58:c0:50:5c:a2:1a:0f:8f:2f:12:ef:31:
88:2f:43:87:36:13:f4:72:b2:1e:8a:ad:f1:62:22:8c:bf:72:
54:71:e6:8d:75:4e:84:bb:34:05:5c:77:f9:45:7d:a0:20:86:
00:a1:93:4f:14:45:5a:ac:9c:00:d8:25:ee:1e:15:4f:31:fa:
b2:53:d9:71:1b:68:36:f7:42:07:a9:f6:5b:1c:24:3d:9f:99:
f1:6d:50:08:2c:f2:f9:e0:c5:23:82:00:b2:16:0c:06:d7:9c:
a5:d1:87:89:4c:5f:9b:22:91:c8:50:88:41:63:2f:10:08:b3:
9b:62:95:3e:6f:b5:6a:2f:4e:69:0e:7b:b1:e0:ea:7a:f8:88:
e4:69:bf:d8:69:58:e3:7b:f3:ce:a7:19:29:78:99:6d:31:9f:
8d:05:bc:21:b9:9a:bf:db:7a:23:3c:a0:24:98:5c:fc:77:2a:
c8:d8:1c:fa:0f:37:df:ed:9c:b5:0c:66:b1:b2:29:27:5f:88:
61:a3:ab:11:0f:e6:b0:df:07:0e:5e:06:c4:4a:98:f2:54:8a:
95:3d:77:8f:3b:f3:0b:ed:d1:82:a6:17:bb:91:db:ba:3f:bf:
6d:83:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:03:13 2025 by rpki-client