Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
File: 48hcN60lJ0xxLCRHPgeK3Ocywd0.mft (raw, json)
Hash identifier: QpPlTAIaysT+dtQgcfX63zm7CJ0MOW6azE14Dl96waE=
Subject key identifier: 62:D0:6B:33:E1:D3:08:D6:85:29:F4:47:A7:27:27:00:25:CA:58:85
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial: 019882430EAF2C6F6373FE9A8ABE3895E7A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
Manifest number: 161D
Signing time: Thu 07 Aug 2025 02:01:29 +0000
Manifest this update: Thu 07 Aug 2025 02:01:29 +0000
Manifest next update: Fri 08 Aug 2025 02:01:29 +0000
Files and hashes: 1: 48hcN60lJ0xxLCRHPgeK3Ocywd0.crl (hash: kMzghXTvy0OVxDEHoaWmGgZmUb3yp2y3cikNvzMLbjU=)
2: hJ5sZUOMGApiiMH37Q-gblMKBjo.roa (hash: +30CmnrceOA2bqCeJhU0G7gVLpkPsWKM6KjpzenYbWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:43:0e:af:2c:6f:63:73:fe:9a:8a:be:38:95:e7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
Validity
Not Before: Aug 7 02:01:29 2025 GMT
Not After : Aug 8 02:01:29 2025 GMT
Subject: CN=62d06b33e1d308d68529f447a727270025ca5885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:15:61:fe:57:69:c3:27:d1:30:48:72:de:1c:
bb:47:12:b4:8e:e3:0b:a4:45:df:3e:cb:6f:3e:89:
96:a1:aa:f0:cb:e6:e5:02:49:c5:ad:f2:35:15:cf:
35:a1:26:fa:6e:01:05:57:f4:28:17:2a:53:81:6f:
68:4f:28:22:0d:1e:6a:42:a4:98:76:cb:88:de:b6:
9b:83:f6:43:23:96:f2:59:2f:3d:48:a4:6b:a6:ae:
82:2d:4e:d9:e7:91:1a:6c:4f:9d:bc:75:f8:5d:f0:
28:c2:6e:aa:fe:ff:1b:ae:3a:d5:64:e2:0b:e2:c1:
19:bb:05:74:b5:90:e4:d2:6a:03:1c:21:67:45:83:
8d:9f:47:e1:1b:0d:1f:67:72:31:9b:6c:1b:3a:b5:
4f:8a:b9:d2:1c:3f:5c:2d:90:d4:04:62:b7:ce:ca:
60:4c:25:63:f8:a3:ca:1d:41:3e:3f:eb:46:b9:5b:
92:62:8d:f3:45:ed:5d:56:9c:d3:12:c6:b6:d2:db:
1c:76:60:f1:ee:3d:cd:6b:b6:be:7e:97:92:a5:2d:
68:6c:25:4a:28:03:da:60:02:a6:62:af:df:90:3d:
57:a7:e3:b6:d0:c9:ab:45:59:98:c5:fc:a2:5a:e2:
f8:12:c7:9d:2d:94:bf:31:48:dc:61:88:e3:db:7f:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D0:6B:33:E1:D3:08:D6:85:29:F4:47:A7:27:27:00:25:CA:58:85
X509v3 Authority Key Identifier:
keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:67:d3:e3:c0:ae:98:36:ea:ff:99:88:cd:89:5f:0b:05:bb:
fe:b3:99:09:fc:c4:c2:aa:22:8e:bd:89:85:32:b9:d9:b2:81:
bc:4c:d1:8d:bc:90:1e:1f:3a:b8:d1:39:cd:0e:98:66:88:6e:
4b:5f:23:02:5d:9c:7c:d7:9d:b7:70:1f:3a:df:1f:18:59:fd:
3e:27:97:cb:9c:b6:46:b8:a8:46:40:20:a9:0b:71:c8:11:9a:
6d:53:9a:8f:d9:c5:b6:85:d7:bf:3c:69:23:ea:af:0e:eb:e2:
37:1c:a1:9b:b8:ab:b6:f4:bb:b3:4b:31:a1:61:13:6e:8b:37:
e0:e1:36:f8:42:f6:e8:89:13:4f:83:14:fd:8e:23:54:79:8f:
22:75:e7:66:db:40:58:d9:d4:5b:98:65:b1:d9:64:6f:47:3f:
ed:c6:82:4b:1a:2e:2f:65:3b:05:4d:bc:ab:fb:46:76:41:1e:
f4:82:88:e8:8f:3b:d0:00:01:d3:ad:50:3f:e2:8c:20:fb:c7:
74:6c:00:13:a6:07:52:ae:77:a5:5e:2b:29:05:27:4a:15:8c:
57:cb:86:e4:76:c7:be:b7:57:8d:65:49:51:57:30:b3:48:d2:
0f:9b:38:9c:71:16:54:23:34:bf:1e:7d:12:39:0f:3d:b9:08:
9d:8b:74:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:01:58 2025 by rpki-client