Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
File: RFZsGig9VT7z9lb1ciOYTdp8NV8.mft (raw, json)
Hash identifier: oi7tWC2E/7quj8euSrUzMDEPaZ9x1E9LdG/mmlmQ0h4=
Subject key identifier: 8D:1B:C3:F2:08:DA:B1:08:C3:94:FD:A3:08:B3:FF:66:95:DD:FF:B6
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial: 019747E7C31A9D3762EB81F47AC5511D1298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 01:01:00 +0000
Manifest this update: Sat 07 Jun 2025 01:01:00 +0000
Manifest next update: Sun 08 Jun 2025 01:01:00 +0000
Files and hashes: 1: QH5h9kNEtNvkMnKSihJPtcTs0HE.roa (hash: AsA1najb9bXe/1fdz6nmzffABId2n/zsPH7Cbk4Xzqs=)
2: RFZsGig9VT7z9lb1ciOYTdp8NV8.crl (hash: fgqg3rYqhwcBhoOQJw1zzywgKmROKL8YtURqvFBJVPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:c3:1a:9d:37:62:eb:81:f4:7a:c5:51:1d:12:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
Validity
Not Before: Jun 7 01:01:00 2025 GMT
Not After : Jun 8 01:01:00 2025 GMT
Subject: CN=8d1bc3f208dab108c394fda308b3ff6695ddffb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:af:2e:79:3e:93:e5:cf:f3:76:32:d4:d4:
b9:dc:f6:de:35:20:d3:88:d9:6f:21:7b:4a:e5:79:
20:68:25:c7:2c:37:39:c3:bf:fe:a6:38:ac:14:72:
08:db:b3:c3:42:b9:78:3f:32:38:92:d3:8d:4d:a2:
4e:02:bb:a9:ac:93:40:64:10:67:86:27:b3:99:2b:
49:77:eb:09:20:2f:f8:66:53:29:75:c0:75:93:5a:
94:ae:19:cf:4b:10:1c:df:90:54:90:3a:0d:1a:a6:
bf:d7:4c:e3:3a:7a:5f:fd:4b:4e:62:4f:8c:8e:ee:
c0:0f:e3:89:dd:a9:fd:eb:99:70:e1:61:09:d0:67:
d2:f7:81:c8:24:8f:d8:81:b7:72:c6:e4:fa:55:9b:
79:02:8e:84:4e:65:6a:5a:20:b5:6b:94:ee:e7:2a:
1c:8e:f8:2f:22:b9:95:e3:84:22:5c:ae:d0:cb:58:
8d:1e:02:38:d0:c9:1d:af:23:27:40:02:60:54:99:
01:4c:9a:04:8b:f4:a0:4a:3e:c7:be:d0:1a:ea:1b:
b9:41:6b:02:e7:6b:ad:d0:4b:8a:cf:35:71:e7:e7:
6a:9e:07:d5:93:f6:65:8c:05:96:21:69:7f:fa:35:
19:5f:a7:da:77:14:de:19:de:5d:d2:66:6c:43:32:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1B:C3:F2:08:DA:B1:08:C3:94:FD:A3:08:B3:FF:66:95:DD:FF:B6
X509v3 Authority Key Identifier:
keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bc:96:8d:c1:2d:57:ae:2f:43:68:08:89:09:e2:85:0f:ed:
4e:e7:ec:12:77:16:39:16:e8:b3:c1:29:e0:98:40:8e:83:6f:
16:3e:21:c9:71:08:32:65:03:3d:5f:2d:a7:61:79:88:17:bc:
c0:34:22:da:27:2d:aa:ce:76:c6:75:67:0d:c7:b3:fc:18:8d:
d9:fd:aa:ac:53:48:cb:f7:0f:99:84:5d:d4:4c:09:f9:c6:3a:
7b:e2:7a:c3:0f:d7:4a:e5:e7:81:57:bf:a0:8b:d3:64:df:bb:
bc:eb:79:bc:fa:ff:d1:81:0f:a0:23:e9:12:1b:61:42:de:dc:
29:b3:82:0e:14:e2:35:b2:ab:cc:d9:77:11:5f:54:d1:78:1a:
d5:a2:44:41:08:b3:93:35:44:f1:11:d0:ea:d3:89:d4:ea:82:
df:ea:8e:38:9d:b3:93:db:f5:16:3e:05:21:59:fe:bc:02:23:
b2:22:fc:44:f7:7e:96:22:bb:12:5a:da:1b:9c:42:6c:2a:e7:
e7:4c:1b:4a:cb:ef:1b:f6:99:8d:0e:db:e6:45:3e:57:36:ad:
b6:20:f7:02:ce:4f:29:59:f1:78:dd:d1:34:ff:9c:04:ff:df:
38:52:df:b0:87:c1:20:48:55:09:0a:d1:df:5e:e6:da:e8:8d:
fb:85:d3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:34 2025 by rpki-client