Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
File: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft (raw, json)
Hash identifier: 5OLAarED9BPWo7zUWSASws16E7XF7Oph2/V3u+OTtkw=
Subject key identifier: DD:B2:90:94:A0:CF:58:CF:DC:03:62:4F:22:9C:94:97:CF:DB:BF:40
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Certificate issuer: /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial: 0197488C05F8E218FEBF71C6DAD639E86640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
Manifest number: 11AF
Signing time: Sat 07 Jun 2025 04:00:25 +0000
Manifest this update: Sat 07 Jun 2025 04:00:25 +0000
Manifest next update: Sun 08 Jun 2025 04:00:25 +0000
Files and hashes: 1: CInCW1-lseNxjR1N7IQV758AByA.roa (hash: WQM0UCIORrjfQkm9SW+GVd+jlu9ooi0KVsLj7jyMiok=)
2: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl (hash: V+ZmVeZQo3hKqIAA165tWgU+/LxgC/7gv4hLBBW0cqk=)
3: U2paNb4m2qyQATbnhVbTs0-s6jM.roa (hash: S1RxCh/LJopZIJfT5SmUwql4+1cPwTZJIOK40saTkcw=)
4: zbSAdSSsmOU8X5iO-yfCK2-GsNo.roa (hash: qlcz7bJ9k+K7bMbtiBCeKabs37EBPQzpy/kDcVYHEOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:05:f8:e2:18:fe:bf:71:c6:da:d6:39:e8:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Validity
Not Before: Jun 7 04:00:25 2025 GMT
Not After : Jun 8 04:00:25 2025 GMT
Subject: CN=ddb29094a0cf58cfdc03624f229c9497cfdbbf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:00:53:ab:b3:33:c0:98:06:78:c6:d6:12:
fb:c0:d6:5c:2a:38:91:07:f9:cc:d4:b2:d3:fd:e6:
0a:f0:cb:f9:19:6f:38:08:b4:70:2f:e7:21:4a:1f:
f2:0b:4a:c3:67:a8:5e:fc:52:65:59:11:55:69:10:
dd:f8:d2:fb:24:8e:a1:eb:1e:1c:d8:55:ae:2e:1c:
e1:01:01:65:57:e9:ca:3d:6f:45:68:0e:bd:55:f4:
bf:22:72:54:64:9d:aa:6c:9f:7f:b9:35:27:4c:6d:
fc:54:b6:a3:0a:f6:ef:07:33:7a:0f:ea:9c:ed:da:
7b:80:4a:f1:97:5b:f8:10:39:60:74:3a:ed:70:a1:
ba:8f:fa:f1:09:13:c8:da:0b:ef:d2:be:05:b8:51:
8f:9b:0d:18:c7:47:db:42:f5:84:0d:c1:4b:e8:3a:
a7:74:87:30:3e:00:36:1a:10:2b:28:fc:42:3e:9a:
a1:c4:3d:55:7f:24:c7:e6:fc:5c:02:04:25:30:72:
ac:01:50:51:6b:03:b0:8c:90:dc:a6:80:17:fb:81:
bd:11:b3:cd:13:fa:ee:b1:32:dc:9a:76:36:06:4a:
1c:a0:4c:5d:5f:90:51:19:66:b5:9e:4e:7c:b5:1b:
ba:4b:85:1d:c0:a0:76:d1:54:f3:98:ed:88:37:7f:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B2:90:94:A0:CF:58:CF:DC:03:62:4F:22:9C:94:97:CF:DB:BF:40
X509v3 Authority Key Identifier:
keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:85:ce:d4:d1:f5:89:df:4b:55:ae:95:48:f8:79:53:82:e3:
39:c9:65:a7:25:de:d1:19:dd:e4:b7:d6:06:06:47:d1:48:6c:
44:ac:b3:4f:58:99:ad:ce:63:c2:0b:87:12:93:38:73:7c:a2:
87:17:f1:4f:dc:8f:72:f1:c3:5e:e7:02:ef:79:ca:86:1d:a9:
37:a0:33:27:30:b0:69:7a:61:f1:7e:98:f2:62:de:a1:ef:4d:
df:f7:75:a2:e4:ae:c4:dc:e1:1d:24:42:cb:77:7f:94:29:62:
c5:e8:5c:e1:d5:cf:e8:da:e9:5c:28:20:f4:ab:86:a5:ef:91:
00:a3:9c:c6:87:6b:51:fd:d5:15:1a:2e:a9:46:2a:e3:12:a8:
df:e9:ac:4b:b8:1c:fe:d7:06:9a:cb:ea:17:16:41:67:8f:3a:
77:55:e6:6e:3c:c2:75:f7:3c:08:20:2d:9e:c9:71:22:44:34:
78:19:be:9b:7c:f8:8c:0e:e5:dd:63:49:f0:6a:c1:49:3a:a4:
f6:d1:a3:25:ed:8a:a6:e8:38:22:df:1d:01:d4:2b:2d:cf:ad:
a6:e9:af:df:aa:ef:30:10:0a:68:97:a8:83:34:62:fc:91:d6:
c6:64:1e:4e:a6:3d:86:22:af:94:31:b0:62:b0:b2:86:02:2e:
bd:6f:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:06:44 2025 by rpki-client