Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
File: Rg0xSfxQypeX9Q_engKggxNMUBk.mft (raw, json)
Hash identifier: Sj3x/BuxWR0AyQN+f8bTSBCW+XRz1y6koCLTcwDaZ20=
Subject key identifier: 20:97:6A:4D:AF:C2:2A:8B:EA:8E:45:92:BC:8E:2E:2F:D5:87:9D:57
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial: 019745F94126E5A636FEF02200BDE3802CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
Manifest number: 1441
Signing time: Fri 06 Jun 2025 16:00:52 +0000
Manifest this update: Fri 06 Jun 2025 16:00:52 +0000
Manifest next update: Sat 07 Jun 2025 16:00:52 +0000
Files and hashes: 1: Rg0xSfxQypeX9Q_engKggxNMUBk.crl (hash: 6A9CmhVGwqPvLfIo/dyySihC/95pQ4y46yos++R3Ru8=)
2: rFN0KDBiljkvhFQ66hAH56Hsc84.roa (hash: 2lh/B/WXfyLgwdob+PT24RTvz83sEjoawwppCzC07qk=)
3: ttl4gF5H4xVOsldpEtY--5SUL-g.roa (hash: SbdB5263yFvJJDlQfuHRPnaHcrA2J/RblHkI32JVk8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:41:26:e5:a6:36:fe:f0:22:00:bd:e3:80:2c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
Validity
Not Before: Jun 6 16:00:52 2025 GMT
Not After : Jun 7 16:00:52 2025 GMT
Subject: CN=20976a4dafc22a8bea8e4592bc8e2e2fd5879d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:ef:8f:1e:00:5b:23:73:0d:6c:13:e0:fe:
0b:d0:87:64:a1:56:dd:af:a3:0d:78:05:2a:19:92:
0d:d6:0a:84:19:d7:ef:37:24:71:11:f9:4d:f9:e5:
28:7a:24:38:f0:47:0c:cd:2d:9e:b3:76:a7:58:f4:
f5:bf:7a:fc:93:5b:6a:dc:ba:4e:55:84:38:b4:43:
2a:36:7d:c0:08:c3:74:b8:e2:c3:75:4d:1c:c9:c4:
50:50:28:62:78:05:c7:7e:b8:80:5d:e3:f4:69:bd:
fa:3f:ed:c6:10:be:e4:35:a1:11:2a:5b:07:68:eb:
a7:59:17:ea:97:00:ef:2f:ec:f2:c3:a7:4e:c4:e4:
f8:5a:45:22:3b:b7:1d:13:b5:62:a0:aa:09:54:8d:
57:9b:53:dd:20:a9:9f:99:77:da:75:9d:57:58:99:
a9:47:6f:5a:72:32:24:88:8b:cd:db:ac:b5:f7:48:
48:77:26:2d:81:7a:a7:1a:01:78:53:00:4f:e0:56:
77:c5:2c:8c:c0:da:db:09:b5:a1:39:65:34:7b:05:
3f:77:30:29:de:e7:3c:52:d1:0c:35:0f:06:a7:be:
60:fd:ec:6c:28:18:97:1f:16:f3:55:b1:72:95:e7:
33:b8:64:ba:5f:e9:cd:12:e3:15:01:54:39:ab:3b:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:97:6A:4D:AF:C2:2A:8B:EA:8E:45:92:BC:8E:2E:2F:D5:87:9D:57
X509v3 Authority Key Identifier:
keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0d:50:b6:66:03:2c:3c:50:78:3c:83:5b:a1:6e:ba:c4:b2:
a5:55:4e:09:86:77:f7:71:5f:fa:5f:1f:f5:73:d1:69:30:7d:
6c:af:6b:c3:00:bd:b0:d6:86:55:ef:7a:91:f1:62:f7:f8:fb:
47:ed:e6:eb:05:37:e5:23:1d:96:f7:a5:44:fb:2a:4c:b1:71:
bb:06:27:d7:e5:68:3a:4c:91:f0:a2:df:16:39:56:f1:a3:0d:
56:5a:38:19:06:0b:1f:e0:12:83:0d:d9:55:3d:04:6a:fb:40:
be:09:62:35:9f:35:85:cd:4f:d4:55:49:81:1c:37:31:37:64:
54:c9:75:57:37:14:59:a6:eb:d0:c4:c6:63:ab:db:00:d6:23:
2b:fa:3a:0a:6c:03:94:5d:38:df:1b:96:42:e3:bc:19:ba:6c:
f1:3a:77:aa:0b:22:b9:4e:13:ae:87:e5:f5:51:8b:20:83:aa:
44:0c:f4:42:b9:60:5e:ec:8e:f3:62:27:e2:af:b7:de:ca:db:
96:66:b6:eb:23:9b:a0:8d:57:e5:fe:aa:86:a2:81:5d:b8:34:
d5:b7:91:99:76:86:6a:88:4c:be:a1:25:04:56:01:14:d9:f1:
59:5a:80:ce:8e:d2:9e:90:a0:2a:15:83:d9:ce:8c:a2:9c:e5:
b3:a6:8a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:55 2025 by rpki-client