Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
File: RfnjL_avPV5dd727mNo30LjkRRk.mft (raw, json)
Hash identifier: 26pzluuIDq9Duury4E8rh0o+bLWy4bE5RT0TD24IdeY=
Subject key identifier: 70:DA:91:11:24:73:5A:F2:8F:06:B3:FC:F6:DD:4C:49:63:2B:C2:5A
Authority key identifier: 45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
Certificate issuer: /CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Certificate serial: 01993424A1B2809A53149A9D087266023E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
Manifest number: 1687
Signing time: Wed 10 Sep 2025 15:00:39 +0000
Manifest this update: Wed 10 Sep 2025 15:00:39 +0000
Manifest next update: Thu 11 Sep 2025 15:00:39 +0000
Files and hashes: 1: RfnjL_avPV5dd727mNo30LjkRRk.crl (hash: sKycWFrMeQ/8HFenH3mLLeuAIITlr/dlclmKogvtU9I=)
2: SFYQtUf8h78RR3sYV-5vV65d0GI.roa (hash: k8VC+Pkqjm+Q/34YSS05tLomED6YZDaGOWiNO2M8zlM=)
3: cQWK86wyTE6QykBYGD0IQXVxmGU.roa (hash: YU+GQaBeZSBZ4pnqlkuWqIUXGdhcGs2HRIrroMn5n04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:a1:b2:80:9a:53:14:9a:9d:08:72:66:02:3e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45f9e32ff6af3d5e5d77bdbb98da37d0b8e44519
Validity
Not Before: Sep 10 15:00:39 2025 GMT
Not After : Sep 11 15:00:39 2025 GMT
Subject: CN=70da911124735af28f06b3fcf6dd4c49632bc25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f6:3d:61:e2:e8:d0:a7:78:54:24:a8:7b:13:
f5:b1:6e:8f:fd:7e:be:37:3b:f1:7d:45:80:ff:48:
a1:27:67:73:73:29:23:dc:54:56:34:ea:d5:02:9c:
14:4a:c6:fc:2a:33:f6:bc:0d:43:fe:97:78:ce:5a:
9d:a6:e1:f3:cd:85:cf:88:fb:09:96:1c:8f:4d:ab:
48:67:bf:f6:d9:65:9d:8e:a2:0a:c5:00:35:53:fb:
df:04:5c:f7:b9:a0:60:cc:ad:b2:4c:20:02:b6:c5:
17:fa:62:66:07:f3:80:e3:25:02:be:1a:e9:cb:27:
96:96:43:7d:0f:ed:74:81:04:bb:e8:5d:57:4c:0e:
0b:d0:1c:48:46:bb:58:e0:08:40:4f:7e:7c:bb:08:
50:6d:29:53:f6:af:16:5f:17:e7:99:cb:31:95:37:
d4:e3:f5:8d:35:a4:d3:ab:ff:c7:8e:ac:eb:25:b8:
67:65:6b:8a:af:40:f9:26:4d:b7:cf:aa:56:d7:3e:
5c:19:33:66:f6:7a:b8:34:a0:a2:9c:ae:21:cd:ba:
f5:9b:cc:10:55:55:eb:76:bf:db:b8:ba:b7:1a:99:
d1:8d:8b:3c:c2:79:37:a2:72:85:8f:93:98:5c:79:
ca:71:f5:02:68:31:b2:89:23:0d:8c:23:f3:cc:f4:
90:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DA:91:11:24:73:5A:F2:8F:06:B3:FC:F6:DD:4C:49:63:2B:C2:5A
X509v3 Authority Key Identifier:
keyid:45:F9:E3:2F:F6:AF:3D:5E:5D:77:BD:BB:98:DA:37:D0:B8:E4:45:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfnjL_avPV5dd727mNo30LjkRRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9def08-7552-4b5a-966f-8ee0a12a359b/1/RfnjL_avPV5dd727mNo30LjkRRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5b:ea:dd:ce:50:35:b9:11:f5:a6:25:b9:ee:66:81:6c:a3:
72:75:4b:d0:a4:d3:df:45:8e:e1:6f:d3:e0:11:76:d2:b4:36:
02:ec:7e:e3:30:88:42:76:7d:70:02:2b:ec:8c:ed:cb:7c:ab:
2b:8f:63:e4:d8:f9:e9:7d:a9:f4:08:48:11:ac:c1:5d:bf:fc:
c8:70:57:85:10:1c:94:c8:3c:94:9d:f8:da:0d:f0:78:09:8a:
58:a7:dc:ab:38:52:9d:34:82:39:31:aa:a3:89:6d:9e:da:2e:
73:8d:52:16:b9:7e:66:42:7f:0b:53:bd:8b:7c:82:e4:32:72:
39:24:5c:99:f4:98:4b:e4:b9:a5:fd:a6:71:53:7d:fd:e1:bc:
9a:6f:aa:da:b9:db:7c:d6:d1:29:9e:49:f0:9d:81:5a:43:5a:
77:fe:7d:94:bc:fd:2a:22:7e:ad:e2:98:3e:b1:36:c2:85:45:
44:4d:34:54:b1:47:11:23:96:a8:a4:8d:63:33:ee:61:e9:98:
cf:ea:b0:93:40:ad:19:48:82:6e:fa:44:7b:41:e4:17:f0:40:
ea:96:b7:d3:b3:5b:75:c1:ec:4f:f1:f3:34:6e:86:6f:26:85:
ed:90:fb:f5:2c:2e:89:78:ac:63:e7:4f:b2:5f:0b:00:39:3e:
d5:a6:d6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:22:21 2025 by rpki-client