Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier: Bd4pWm5uWqN8Mffaio/awJrIvHgKQ/eBoItT+M3McxQ=
Subject key identifier: 0B:10:17:5C:CF:B7:43:E4:1C:3F:C9:FF:A6:A1:B0:5B:18:C4:74:E5
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 01976D74320AAA65EA64D3DB9157F22AC5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number: 15A2
Signing time: Sat 14 Jun 2025 08:00:20 +0000
Manifest this update: Sat 14 Jun 2025 08:00:20 +0000
Manifest next update: Sun 15 Jun 2025 08:00:20 +0000
Files and hashes: 1: H6es8_RNukCcmpKSU4VhKyWzlXU.roa (hash: MWVORumqBLMSV+ezNkSFN1TihrvCnAOWBchr7+/zYAg=)
2: dBMJpVLGRQoTKZQpQqDPu3BVMTw.roa (hash: y7lqJ7uW4lmOcL9eEyRfqx2SbaFMyQX43zjAsjfpk98=)
3: q9V7Xus9JaAOVqWDDUO8V0frUJg.roa (hash: BOqisVRqsjZEstDgk3UUu1R2Uohg8LTPrkUF2hoHl7o=)
4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: wffhIvzMPxFR/4alqjEUkQfXJ9xoRuDg1xKHoERXt5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:32:0a:aa:65:ea:64:d3:db:91:57:f2:2a:c5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Jun 14 08:00:20 2025 GMT
Not After : Jun 15 08:00:20 2025 GMT
Subject: CN=0b10175ccfb743e41c3fc9ffa6a1b05b18c474e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:72:df:85:09:ed:7f:01:2c:18:68:9c:48:
b2:b9:4f:da:73:8d:10:ae:e0:68:41:c1:19:e2:94:
f9:89:db:69:59:46:39:e5:8d:38:c5:5e:ba:98:80:
ef:01:04:37:96:ae:2d:90:fd:a0:b1:6e:ed:ab:10:
97:cb:a1:6b:d2:8b:3a:f4:45:60:c2:90:7c:9e:5c:
a2:0e:52:2d:95:48:58:47:ab:d0:27:e1:aa:ef:fa:
5b:40:8c:a0:e4:7b:06:0e:27:4c:1e:83:cc:4a:bb:
af:c8:b6:1b:bc:cb:e7:b1:47:cc:d3:6b:aa:4d:25:
c7:75:90:09:00:f3:c8:84:f6:03:78:16:30:03:12:
45:dd:21:39:7c:27:e3:59:2a:3f:d7:4d:ca:fc:53:
85:d4:f5:c8:9b:5c:55:e0:7d:bf:9a:fe:3c:ea:f7:
d8:92:46:91:a1:fb:d8:23:e3:4f:0f:ca:65:2e:52:
a7:e0:e0:35:90:83:10:de:74:85:93:cd:97:4d:75:
bb:3d:6b:6b:5e:f4:10:5f:da:e0:4a:ca:21:10:ab:
0a:49:43:b6:40:60:d8:e7:fb:91:ea:40:75:b3:4a:
07:2a:61:e3:bd:f0:31:b3:8b:1a:10:ab:bf:ec:ea:
4e:08:93:ee:7d:d6:e4:64:02:06:78:df:b2:50:00:
42:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:10:17:5C:CF:B7:43:E4:1C:3F:C9:FF:A6:A1:B0:5B:18:C4:74:E5
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:31:7a:11:45:75:7e:67:a9:e2:ff:eb:bd:45:6b:fc:7d:58:
13:0a:cb:dd:f1:3a:e9:70:75:43:b4:7b:a5:2c:ea:67:f2:d5:
a7:28:f1:5d:93:8c:e7:e5:9c:39:bb:d2:a3:b7:cb:30:22:d0:
f9:b3:40:5d:52:d9:a2:c6:97:7c:92:71:a6:81:8b:cc:a0:f7:
6c:91:e1:4b:d3:98:5d:0b:a9:08:fb:c7:a8:b8:33:19:29:70:
c9:33:51:35:9a:ee:85:f0:06:57:03:ba:cb:b4:26:d4:3c:3c:
7b:85:4d:c9:bd:c7:7f:fd:52:37:19:47:ae:6d:14:45:c5:ca:
c4:01:76:ce:ef:b3:6d:f5:e1:c6:f8:6f:30:2c:a9:b9:e3:38:
d6:11:94:e7:b0:0b:7f:77:10:13:22:00:7a:94:9a:7d:6a:7b:
1e:b7:b3:cb:9e:42:84:f4:bf:eb:74:71:5f:5e:6d:1f:ca:63:
eb:56:b2:c0:d9:14:ee:e2:ac:a9:21:bf:81:e6:69:74:7f:ba:
3e:11:a5:70:08:4b:a2:00:9f:41:b5:95:7d:89:37:96:81:73:
e8:a0:23:ca:85:5e:ce:d6:70:03:54:d5:bb:a5:72:04:f3:cc:
a2:3a:b1:11:6a:fc:94:83:70:d0:ee:b9:c5:e1:d1:04:9e:ba:
d9:2f:30:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:52:05 2025 by rpki-client