Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File: RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier: MZ0GReqEmGIeF51ZiUmH5f9D8dnbJxXY23TEJhntOo0=
Subject key identifier: 6D:60:EF:F8:98:3A:6D:76:DC:A3:0C:E9:DF:61:87:2B:2C:43:22:75
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial: 019770AC4A5D62DF72C4788B6CC43F191E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 23:00:28 +0000
Manifest this update: Sat 14 Jun 2025 23:00:28 +0000
Manifest next update: Sun 15 Jun 2025 23:00:28 +0000
Files and hashes: 1: HUIjR9WK2Lr5ogt7lVoiyA1Q06s.roa (hash: PMZpn3mSe7dzqUCZsgF/pY1r/L52E+g3ibBHFvHVhL0=)
2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: +4hSfGSp9s9r0Fkqkl/Uz1IRdJAAAjZoW4Ex5p+Us0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:4a:5d:62:df:72:c4:78:8b:6c:c4:3f:19:1e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Validity
Not Before: Jun 14 23:00:28 2025 GMT
Not After : Jun 15 23:00:28 2025 GMT
Subject: CN=6d60eff8983a6d76dca30ce9df61872b2c432275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:d0:af:bb:f0:30:76:12:18:be:35:3a:9b:
9d:09:77:8d:d1:34:b2:55:87:8b:4b:a2:f1:1e:1c:
20:9b:8c:ec:f3:6d:48:09:23:10:ce:66:5a:b6:13:
29:84:a7:55:f8:a4:80:0d:fd:69:2d:8d:5f:9c:6b:
e7:76:13:8e:93:23:15:cc:28:f7:4c:bc:66:26:2d:
64:9c:2e:e7:8f:e1:ff:51:35:a2:30:b4:73:28:41:
b7:bc:21:e2:51:9d:4a:71:88:11:49:32:33:d0:01:
c3:84:c2:92:db:5c:97:f0:43:92:6d:82:dc:71:1a:
32:d1:7f:38:a4:b6:b1:15:4e:91:44:14:f5:8e:f9:
b5:c9:ab:13:3d:7d:21:36:33:f7:59:80:24:54:4a:
eb:23:63:23:d6:8a:bb:e9:d8:71:63:e1:db:eb:9e:
0e:38:a0:bb:de:dc:bf:99:5f:4d:9f:c6:58:18:ff:
4f:cf:3a:d1:50:7d:94:06:f1:95:03:33:d5:5c:25:
d6:f9:a1:f2:02:59:a2:5a:7f:96:6b:09:2f:f3:d0:
17:15:98:2a:03:07:6f:0d:96:9c:06:8a:54:76:a0:
2f:e1:e5:ab:d0:21:7e:74:56:3d:94:e7:52:07:9f:
3f:5b:ea:20:e1:96:5c:bd:65:22:db:05:d2:03:b1:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:60:EF:F8:98:3A:6D:76:DC:A3:0C:E9:DF:61:87:2B:2C:43:22:75
X509v3 Authority Key Identifier:
keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:dd:45:a6:84:d6:ca:91:cc:5d:b1:80:a2:b1:09:12:40:bc:
5a:7c:57:55:c9:20:b9:5b:d1:26:14:63:d6:08:3e:7c:a5:04:
6e:2f:46:a6:f9:fe:a9:e0:0e:91:22:7d:c3:37:f1:45:1e:48:
02:73:f8:4d:47:85:23:f9:5d:16:58:c6:37:f1:f0:ae:d0:36:
b5:e6:33:09:ef:e6:3d:46:ca:c0:7b:15:97:6d:e9:14:20:e4:
83:aa:70:be:b1:81:b1:0a:ff:36:b7:f6:80:5e:9a:f3:a8:df:
f4:10:5a:75:27:a2:d4:b8:28:31:50:16:9a:45:7b:14:7f:d9:
32:43:96:ea:16:6c:5d:42:99:d0:e6:56:c6:b3:da:9c:66:5e:
1a:24:7b:da:4d:d8:d0:30:21:26:b6:a6:0f:da:57:6a:02:16:
14:2d:f5:65:e6:42:4a:c2:f3:1c:bb:66:07:fc:db:70:7e:74:
07:26:01:f9:39:b0:4c:83:41:54:f5:4f:14:be:ac:a2:aa:8e:
a4:fc:60:7e:01:9e:3c:b2:a6:bb:c2:af:77:53:a7:b9:ec:08:
c1:8d:9d:cb:6f:c4:51:af:0a:0d:f1:2b:9a:e2:64:15:a0:85:
d6:00:61:cb:84:99:48:eb:93:23:f1:84:ad:8b:6d:00:1b:22:
c6:ed:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 01:56:19 2025 by rpki-client