Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
File: rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft (raw, json)
Hash identifier: upcJjzQWqYEsoY9sV2mJOOBG43JM6I+ON33EzR9bnsU=
Subject key identifier: 00:15:23:C3:51:93:78:F9:0F:9C:3C:FE:2D:7A:FB:4C:64:2F:CC:6E
Authority key identifier: AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
Certificate issuer: /CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Certificate serial: 019785B44BC9FA96A1DE2FBCFDC0EC2ACFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
Manifest number: 0F99
Signing time: Thu 19 Jun 2025 01:01:14 +0000
Manifest this update: Thu 19 Jun 2025 01:01:14 +0000
Manifest next update: Fri 20 Jun 2025 01:01:14 +0000
Files and hashes: 1: 8Wti1PH3KuI5W3Ps9JfxSql0m7Q.roa (hash: CpKe22p+vfF1GPX/Ydl6oGQUK80PsEj4zMJRNQ1KdVw=)
2: ON3iIV_oOMJOwBGtDykVdsbeibU.roa (hash: 9WvGCqlVAIcwLRzryj0uvMHkAzQLE90GQaNR429D0NE=)
3: rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl (hash: Bvr88j7ExGTG8VptAPbUX9A5NY/sxheb272Fz7LHRUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:85:b4:4b:c9:fa:96:a1:de:2f:bc:fd:c0:ec:2a:cf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adce3c2aafc7783cce8234551f3e9661d27eefbc
Validity
Not Before: Jun 19 01:01:14 2025 GMT
Not After : Jun 20 01:01:14 2025 GMT
Subject: CN=001523c3519378f90f9c3cfe2d7afb4c642fcc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:e2:f4:f1:79:4a:42:3b:15:ac:cf:e9:63:
fc:01:97:1a:db:5b:11:40:45:4e:8a:4f:64:5b:97:
e3:d3:5c:bc:f1:8b:a8:2e:e3:fa:1e:44:6a:7b:32:
e4:38:a3:e1:08:e3:c6:92:7f:14:64:d0:33:10:37:
12:55:47:26:9c:ae:d7:36:78:52:2e:08:e8:03:9b:
cc:95:20:c0:38:4d:cd:e8:4a:7a:dd:87:0e:bc:23:
f0:b8:27:7f:9f:31:c2:a9:40:94:66:7d:e3:3e:0c:
d6:b8:bd:81:ba:12:1a:4c:a0:0e:4a:7e:bc:58:b2:
ab:2e:0d:7d:e1:43:ed:19:9c:a5:01:cd:5c:41:ae:
28:da:a1:d7:16:00:07:0d:82:86:f9:83:c9:9c:df:
c9:74:a3:7a:53:bb:fd:c0:d0:16:09:72:46:e1:40:
e1:c2:4d:cd:38:71:8d:40:bc:71:30:10:7c:c4:62:
a0:6f:f2:b8:b0:02:4f:fa:eb:a3:f5:b2:ef:30:3a:
9d:ec:b5:4f:89:ae:bb:42:d3:9e:5c:da:b9:40:67:
1e:f0:f2:7f:62:77:6f:74:78:66:13:21:9a:81:48:
c0:d7:a3:bb:1f:94:a8:47:30:4b:79:d7:6a:8d:98:
88:81:c9:c1:8c:6f:93:47:d9:8b:d8:5c:14:00:ab:
26:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:15:23:C3:51:93:78:F9:0F:9C:3C:FE:2D:7A:FB:4C:64:2F:CC:6E
X509v3 Authority Key Identifier:
keyid:AD:CE:3C:2A:AF:C7:78:3C:CE:82:34:55:1F:3E:96:61:D2:7E:EF:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc48Kq_HeDzOgjRVHz6WYdJ-77w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/824ccd-bc9b-4a82-be91-63104db6a7a5/1/rc48Kq_HeDzOgjRVHz6WYdJ-77w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f9:4f:bf:d9:e1:ed:e8:b9:22:3c:46:19:e2:d3:58:6e:65:
60:21:94:11:15:be:97:73:76:c8:82:e5:1d:90:6d:75:e1:39:
ac:4e:fa:23:a5:38:14:f3:50:c9:c4:69:96:0f:72:10:d0:ce:
9b:c7:1f:2f:9e:71:2a:76:7a:71:8f:ee:29:61:bb:05:7e:9d:
83:b2:76:f2:0e:08:da:7a:07:e1:09:e0:9b:f7:53:36:44:19:
01:26:d0:26:28:60:96:51:42:cb:82:70:9f:f0:e0:33:d2:d3:
e3:32:4d:91:f4:b5:e0:f2:8a:40:ab:49:ba:e6:10:f7:0e:6f:
14:91:85:4e:4d:09:fe:be:4c:24:34:39:bc:dd:45:b6:df:31:
3d:27:8f:0e:de:c6:ab:17:41:3c:91:10:ef:f2:2b:c9:0b:aa:
d3:f9:92:b3:08:57:63:87:d0:b5:47:1c:85:fe:e3:e5:20:3d:
d9:0b:f1:dc:a7:19:18:b6:cc:19:b4:9f:1f:0d:f2:5f:b4:12:
22:67:b0:2e:46:15:c6:16:0b:61:f9:3b:09:0d:55:b3:14:75:
1f:83:08:16:77:76:41:51:d5:69:11:2d:73:4f:a5:3b:54:11:
c4:e9:47:fe:22:d2:a8:1f:b7:03:d4:8b:76:a5:98:32:0c:e9:
35:94:80:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 05:43:28 2025 by rpki-client