Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json)
Hash identifier: O3FhnswcKlub0vh1qjA7K4nuYPxgqgiuZbpPvGg8VH4=
Subject key identifier: 30:26:57:76:BA:37:54:C6:AD:0B:15:CA:FB:C5:CA:D3:FB:BF:40:E7
Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Certificate serial: 01977640F4F1D75C4C444E4550C0CD729E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
Manifest number: 1595
Signing time: Mon 16 Jun 2025 01:00:57 +0000
Manifest this update: Mon 16 Jun 2025 01:00:57 +0000
Manifest next update: Tue 17 Jun 2025 01:00:57 +0000
Files and hashes: 1: 3SOTukwSWrR1Nu1I7c8QHUHDj5Q.roa (hash: 4YWkgAQs57y3jWp09RgMoPwSBLEZe+2Hmh3qEftE0D8=)
2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: RE+nC38OLceKYjdtGxQX5fbl/CckIdsaub5GArxvIbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:40:f4:f1:d7:5c:4c:44:4e:45:50:c0:cd:72:9e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760
Validity
Not Before: Jun 16 01:00:57 2025 GMT
Not After : Jun 17 01:00:57 2025 GMT
Subject: CN=30265776ba3754c6ad0b15cafbc5cad3fbbf40e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:5a:e9:19:56:70:08:16:69:c6:a0:70:3b:
89:51:d4:3d:8d:5e:7c:39:a5:f9:30:d5:d1:01:e8:
44:2f:50:ad:72:04:82:fd:d5:dc:e0:dc:e5:1a:91:
38:80:b0:11:bf:b7:8e:19:77:5e:9e:f3:a8:a5:52:
d9:5a:22:c2:de:54:d1:15:3c:1a:18:f3:9d:58:be:
1b:53:1b:2b:4b:54:c3:8e:40:44:72:37:03:61:0d:
4b:eb:d1:6f:4a:c1:72:e6:bb:5e:6e:cb:a8:05:37:
3f:50:8e:38:9c:7b:3f:5a:c8:16:3d:49:72:bc:40:
1c:85:45:fb:98:d5:01:3d:74:b7:f4:01:b7:d5:8a:
ab:c3:f3:32:35:f5:84:b8:ab:6b:f6:e5:b0:83:64:
5b:c3:d6:42:e7:4b:e6:7f:3b:b7:88:0f:6f:78:d6:
8b:c5:f6:bd:23:7b:47:61:d7:d7:5c:cc:cd:ef:07:
0d:3f:f7:ec:24:3c:b9:11:f0:4e:75:a0:e3:9b:aa:
80:45:9d:58:03:16:a4:44:bc:7a:df:db:18:7f:8a:
83:71:57:35:c8:ff:02:23:19:8c:3a:2e:64:0c:6c:
b9:bb:d5:56:c0:36:ff:26:d4:6e:37:cb:3a:04:f6:
a4:43:2d:e6:d9:b3:73:12:77:e1:e4:79:8b:e8:b3:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:26:57:76:BA:37:54:C6:AD:0B:15:CA:FB:C5:CA:D3:FB:BF:40:E7
X509v3 Authority Key Identifier:
keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:65:90:bb:42:d5:87:34:15:4e:ac:9e:e9:b1:58:f1:2c:c5:
0d:4f:8d:52:1e:9b:8f:27:98:b7:17:23:72:ed:88:36:27:46:
08:79:76:eb:20:5b:b6:6c:71:06:1d:0d:77:44:bf:5a:91:e9:
b6:45:93:86:03:ef:06:66:44:5f:05:11:75:a0:f3:36:38:c3:
b7:0b:e7:96:be:a6:46:04:0a:c1:e5:ee:dc:e3:6a:71:f4:83:
54:48:d1:93:aa:b4:86:bc:51:01:91:12:ec:2d:78:14:1c:39:
bb:4a:06:f7:7e:c3:18:04:0d:cb:fc:ee:7e:d1:5a:2a:82:2d:
2c:8b:84:6a:0e:54:c2:60:21:0b:81:bb:34:9e:e8:30:03:e7:
0a:29:df:c3:c1:bd:62:7b:1b:b0:0a:83:70:b2:6b:72:e4:4a:
74:8b:09:a8:b9:bc:de:68:9e:3a:ed:e5:4f:4e:72:b2:15:c2:
0c:2c:bc:78:c3:c0:63:f1:fc:b8:90:80:e5:7c:46:d3:58:9f:
4a:f8:d6:c3:66:1d:cc:e3:51:28:f5:58:17:ce:eb:80:a6:63:
d0:68:9c:42:d6:7d:eb:51:0a:53:52:8d:e5:2b:b2:87:73:1d:
91:38:22:29:02:4f:52:11:26:75:11:cb:b4:2b:59:0c:65:46:
5a:77:58:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:23:37 2025 by rpki-client