Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier: r97+fe5TYYpkxNRGLhL3CmeHM7CjxEjQrnYhF+fUi9M=
Subject key identifier: 23:B0:77:69:77:CC:C6:4E:F5:B9:9E:32:DA:44:03:18:F3:2A:2E:CB
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 01984A779D3DA2AD688881A20653BF225513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 06:00:09 +0000
Manifest this update: Sun 27 Jul 2025 06:00:09 +0000
Manifest next update: Mon 28 Jul 2025 06:00:09 +0000
Files and hashes: 1: Obsiy3NGEoUjL-DLQo0yhLx4KAI.roa (hash: p9j2sVfI93AXLXtc3YNcT/Xcs3W13x3825+kRDw3Ko8=)
2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: jWDkkR4FCF5UGWQCJf4xEyk1HwuV8bjsreXGW2wUfNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:9d:3d:a2:ad:68:88:81:a2:06:53:bf:22:55:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: Jul 27 06:00:09 2025 GMT
Not After : Jul 28 06:00:09 2025 GMT
Subject: CN=23b0776977ccc64ef5b99e32da440318f32a2ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d3:13:36:38:a7:f8:d8:f3:b0:c4:43:0e:6f:
8e:89:2c:35:f1:9b:46:2b:20:69:43:67:6a:e5:be:
4e:1c:fd:df:72:99:67:d7:89:42:e3:c2:1f:94:91:
42:9b:7a:17:aa:a9:a8:9c:57:b8:31:b8:7d:44:a8:
84:b5:8c:da:67:61:b1:2a:9a:cc:7a:72:f7:3c:1a:
f1:1e:93:8b:c8:25:65:a1:9a:f6:6b:14:bf:3f:f7:
a9:07:ee:59:23:c2:4f:61:f8:6a:8d:5b:ad:db:bf:
0b:22:a3:8f:f4:20:84:3f:21:3a:f3:c4:d1:92:6a:
37:5b:d9:10:47:14:ec:17:2e:08:8e:97:47:fc:37:
33:2b:9f:b1:69:27:0e:6a:21:a7:3c:fe:3e:0f:0b:
48:c4:9e:b0:ea:2e:38:ad:8b:f6:e6:0e:98:5c:3a:
02:20:25:04:50:ea:f8:c7:f4:db:a1:32:b5:51:50:
02:f4:93:ce:85:2d:93:3d:05:38:11:60:4d:23:c7:
94:64:05:1e:0b:d2:7d:aa:6f:91:66:28:66:32:40:
bd:98:15:cb:85:bc:e8:f4:d0:24:65:a5:26:ca:f7:
7a:64:c9:e9:c9:7e:3b:d4:da:eb:e9:6d:a2:ce:18:
bd:61:fa:23:a6:ac:fd:08:b8:19:84:ac:d4:cc:d7:
ee:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B0:77:69:77:CC:C6:4E:F5:B9:9E:32:DA:44:03:18:F3:2A:2E:CB
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d9:0f:58:d2:d1:33:b5:5e:78:ba:94:81:2a:df:03:7f:e5:
0b:a1:93:77:07:df:6a:60:b6:c8:76:d3:a9:9a:be:f6:11:e1:
8f:f8:b2:55:bb:5a:71:fe:e7:ba:16:71:8c:d7:27:20:7b:e3:
f5:21:fb:01:d8:3a:f0:a4:5f:78:ec:4b:e0:2c:b4:59:b6:46:
b8:cc:29:06:75:9f:87:40:9b:4c:82:fe:bc:ff:47:1f:bc:95:
6a:50:d7:70:0a:99:e0:ba:76:37:87:09:90:70:7c:2a:bd:3c:
07:6e:49:0c:81:51:a3:bc:f7:77:97:0e:14:59:12:39:ff:35:
81:f7:77:38:1f:d2:35:28:3f:65:8e:c6:7f:bb:32:2f:55:cc:
70:65:e9:33:22:e1:45:16:be:44:15:4e:8e:f0:42:0d:55:7e:
6d:aa:36:28:bb:2e:60:9c:77:4e:ef:64:78:9d:88:7d:0c:4c:
94:14:10:ad:2b:c8:47:15:c9:b9:34:12:4a:3d:a7:b3:dd:cf:
8d:1e:ed:90:f3:26:37:21:52:7f:5a:63:94:71:88:53:36:01:
fd:45:0b:aa:3e:ef:b8:f8:53:48:bc:39:a7:d5:7e:3d:e9:86:
86:d8:72:e0:84:7b:d7:6e:d9:15:68:74:f4:90:e8:b3:e7:8d:
47:b9:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:34:15 2025 by rpki-client