Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: 4tdUEcMWN8sulG04RbHl7zCpQlxc0fowOWDTdJmSPOE=
Subject key identifier: A4:03:C0:7D:BB:CF:FF:EB:A1:F9:23:49:F5:A7:95:13:E5:66:86:69
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 01984889491FD079B7B18A8C2674E4828ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 160D
Signing time: Sat 26 Jul 2025 21:00:13 +0000
Manifest this update: Sat 26 Jul 2025 21:00:13 +0000
Manifest next update: Sun 27 Jul 2025 21:00:13 +0000
Files and hashes: 1: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: Z6NE4qvy/ETKtlWmSkS+Px8l5w3wTADZv/YkMtT6HAY=)
2: SFYQtUf8h78RR3sYV-5vV65d0GI.roa (hash: k8VC+Pkqjm+Q/34YSS05tLomED6YZDaGOWiNO2M8zlM=)
3: cQWK86wyTE6QykBYGD0IQXVxmGU.roa (hash: YU+GQaBeZSBZ4pnqlkuWqIUXGdhcGs2HRIrroMn5n04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 21:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:49:1f:d0:79:b7:b1:8a:8c:26:74:e4:82:8e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Jul 26 21:00:13 2025 GMT
Not After : Jul 27 21:00:13 2025 GMT
Subject: CN=a403c07dbbcfffeba1f92349f5a79513e5668669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:97:84:99:28:51:d9:5a:8f:86:1a:82:37:21:
a3:8c:08:9f:77:6c:10:a9:84:1c:96:9d:cb:ba:5b:
6d:e6:98:a3:98:d9:62:29:0b:0e:9f:06:e3:63:9a:
3f:16:50:70:80:b6:59:c1:f0:ed:e3:7b:a3:b9:6d:
a4:fe:be:4e:22:2e:b0:11:e0:4f:7d:a4:91:34:34:
6c:14:68:41:91:81:6c:f2:46:c3:3d:db:e4:00:eb:
9c:99:69:08:bd:fb:0b:bf:bf:a5:fb:cd:53:58:6e:
24:a0:13:a8:d9:ae:a1:aa:db:04:be:e3:2f:6f:af:
5d:83:c3:dc:03:6b:ed:15:32:2a:fd:63:87:c1:df:
a1:fc:91:c7:13:b6:9b:22:55:d8:0b:6d:b8:b7:a4:
f0:58:f0:d0:c8:f9:08:03:f1:c9:97:e5:b5:d8:28:
30:38:fb:ca:ea:f5:ff:03:d0:81:2b:76:88:dd:68:
50:5e:87:38:32:a5:42:13:a6:26:00:5c:74:89:ce:
6e:a2:09:9f:a1:f8:d4:64:8f:03:0b:ba:4d:ed:13:
c8:18:e6:ce:ba:cc:c6:d8:4d:db:79:12:f6:2b:84:
c2:2c:54:7d:e4:4b:74:96:74:d7:66:16:ab:ff:42:
a1:99:c6:39:30:18:11:50:1a:21:2a:cc:46:65:09:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:03:C0:7D:BB:CF:FF:EB:A1:F9:23:49:F5:A7:95:13:E5:66:86:69
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e8:80:15:fe:55:12:ab:0a:70:36:bf:dd:87:53:4d:99:51:
5f:d4:95:2f:b0:35:51:16:27:9d:a3:49:37:91:b8:1e:ad:9d:
78:81:02:5d:5a:db:81:e8:b6:bf:6c:9d:7d:52:df:4c:58:be:
35:ff:13:45:50:16:d0:37:63:bc:eb:e4:7b:d6:83:ef:c2:8a:
5d:36:63:a3:60:35:6c:c9:69:5c:b2:ea:45:34:2d:a5:c7:51:
be:7c:b8:5b:8d:ce:6a:1d:86:fd:ef:32:18:a6:aa:44:e0:9a:
b0:07:a1:ef:0e:99:22:24:90:68:c5:e8:1e:9b:6d:85:df:eb:
ca:da:ed:3b:10:eb:a5:2f:06:4b:72:3d:8d:70:79:06:86:ba:
dd:f3:de:a6:c6:35:b2:bf:fb:54:98:44:5c:7f:d0:9c:a5:c0:
34:71:2e:0a:5d:fd:82:bf:eb:e9:e7:86:9b:b5:0c:b9:69:6b:
f4:a8:2f:a5:84:4b:e7:d8:f4:ff:b5:31:d8:d0:29:b3:7e:f3:
2c:2f:b6:2d:45:34:04:9b:9f:08:14:2b:3d:2f:05:5d:f0:78:
0d:76:70:d6:4c:db:3e:d4:28:e0:1a:fb:df:4f:5a:2e:7b:d6:
37:5b:9a:2f:7c:17:9a:60:b7:f2:92:62:47:5f:5d:16:da:1e:
dd:52:3d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:23:08 2025 by rpki-client