Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: OOiig9kS6Q3P9N91FGB5yr4hh3sSj+zvPBOHMWqRxBg=
Subject key identifier: 13:09:DE:57:E1:73:8A:4A:9F:54:22:20:88:AE:5A:C4:0D:C3:E8:80
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 0197499F26792F7769F1948098C8EF9B3899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 1589
Signing time: Sat 07 Jun 2025 09:00:56 +0000
Manifest this update: Sat 07 Jun 2025 09:00:56 +0000
Manifest next update: Sun 08 Jun 2025 09:00:56 +0000
Files and hashes: 1: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: Nc+ckRIrX4D7Qsb+efOwT2sGSIASvRt3QUBbaiuSNNs=)
2: SFYQtUf8h78RR3sYV-5vV65d0GI.roa (hash: k8VC+Pkqjm+Q/34YSS05tLomED6YZDaGOWiNO2M8zlM=)
3: cQWK86wyTE6QykBYGD0IQXVxmGU.roa (hash: YU+GQaBeZSBZ4pnqlkuWqIUXGdhcGs2HRIrroMn5n04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:26:79:2f:77:69:f1:94:80:98:c8:ef:9b:38:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Jun 7 09:00:56 2025 GMT
Not After : Jun 8 09:00:56 2025 GMT
Subject: CN=1309de57e1738a4a9f54222088ae5ac40dc3e880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:e2:f9:ad:d7:21:a1:d5:8b:5f:3a:b3:24:
9a:c9:ce:42:fb:e4:40:01:7f:f9:29:ae:a9:b9:8e:
a2:63:36:b5:92:eb:0c:ad:aa:06:81:fe:f0:46:43:
e3:fa:33:d1:20:10:06:59:3d:69:9d:14:81:41:f6:
59:30:cc:8c:eb:9d:7c:a4:87:6c:7d:67:4b:26:6a:
b0:4e:55:a1:38:a7:56:b9:84:46:7a:0a:f0:34:2c:
2d:6a:91:3a:59:fd:76:2c:61:4f:d6:21:dd:99:d6:
5e:23:3d:f3:7e:9b:ed:34:61:e1:0f:2b:c4:17:9b:
2d:02:68:cd:0e:a5:a8:67:ac:f4:1a:9e:aa:32:b6:
67:84:65:cc:a5:25:7c:44:79:7d:ec:e7:00:aa:bd:
9d:35:3d:25:4a:c7:b9:63:5b:b9:92:83:20:4b:15:
ab:6b:60:e2:c7:7d:c2:8c:0a:83:f0:61:89:69:cd:
bd:be:59:77:f0:4b:d5:ac:bd:75:73:dd:b2:53:fb:
7c:99:8a:dc:0c:77:ee:34:9e:f8:68:7f:bc:0b:28:
61:78:57:aa:bb:7b:64:0a:0f:f0:1c:56:1b:23:2b:
da:43:7e:ff:4f:d6:85:8e:77:69:f3:c0:38:63:54:
ef:2d:1f:4a:2b:63:5a:4f:76:99:6a:ad:33:80:fd:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:09:DE:57:E1:73:8A:4A:9F:54:22:20:88:AE:5A:C4:0D:C3:E8:80
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8b:74:e5:39:72:5a:3f:41:db:84:0b:0a:7f:5c:67:d3:27:
d3:74:03:65:93:8f:8c:fd:df:07:98:0e:8b:3e:b1:65:2d:0e:
13:1f:ef:8a:a2:db:e3:b4:85:ff:c6:91:53:60:ba:19:e8:15:
9f:90:63:f2:e0:08:5c:bb:43:05:14:5e:0b:d9:14:c8:dd:73:
59:83:8b:29:64:84:b4:2f:75:34:57:8d:04:e8:72:14:bb:fe:
cf:91:8d:df:c3:01:b2:13:00:82:3a:83:60:d0:fc:9a:c3:43:
70:09:be:19:99:89:d5:ea:f3:99:9b:09:fa:ef:86:9f:8d:82:
04:b2:50:3d:52:db:18:6d:3a:93:f9:d5:ea:c7:ec:c3:7d:ad:
d6:c6:14:fc:ed:e4:2d:d9:d4:59:19:04:ba:e7:64:00:4a:a2:
8d:f0:ff:3c:67:e3:61:f5:68:2b:bd:2b:a3:29:7e:90:c3:fc:
71:71:cc:00:79:8c:db:92:96:83:a4:53:64:45:cf:65:26:3b:
78:bb:ad:22:da:16:22:68:58:cd:2b:18:91:f7:fb:38:2b:ef:
50:30:6d:41:2e:56:c2:eb:d3:05:9b:0b:0e:4c:ae:c2:1f:20:
cf:22:0f:1a:ec:7c:d6:fe:3c:53:4b:46:cf:f9:b6:5c:65:6b:
22:f9:77:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:02:10 2025 by rpki-client