Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
File: rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json)
Hash identifier: rGAP/ROhv4szsDPN8GffxtJyav4ElIqna4dTan84HQ8=
Subject key identifier: A8:98:C3:9F:31:21:FA:F2:EF:A6:93:1C:4B:AF:DB:58:EB:86:5D:8E
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Certificate issuer: /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial: 019746D4B598231200FD97E0148448632C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
Manifest number: 09CA
Signing time: Fri 06 Jun 2025 20:00:34 +0000
Manifest this update: Fri 06 Jun 2025 20:00:34 +0000
Manifest next update: Sat 07 Jun 2025 20:00:34 +0000
Files and hashes: 1: dYveMxpV9vTvL48rADeNQga7MgQ.roa (hash: cc3Bn2ZybQkob9bKAAN2kkILYEKK4Ym19QeA8svRfJQ=)
2: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: eOwFXElIvgrEQo3nv+L/fo33jWxT30etiVQzdokN3z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:b5:98:23:12:00:fd:97:e0:14:84:48:63:2c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Validity
Not Before: Jun 6 20:00:34 2025 GMT
Not After : Jun 7 20:00:34 2025 GMT
Subject: CN=a898c39f3121faf2efa6931c4bafdb58eb865d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:ed:3b:e2:f1:de:ae:a9:4c:43:69:2d:60:
6b:92:a2:f1:6f:d6:f7:98:5e:d1:33:3b:8a:f6:4e:
13:b1:9b:7f:0d:dd:b4:b4:8a:3d:2e:61:b1:a8:6d:
74:e5:14:eb:65:9d:c5:c3:62:3e:97:9f:08:6c:4b:
7f:bf:e9:29:c5:cf:51:fa:ca:55:95:cf:7f:f3:d5:
ad:c4:7a:7d:f8:6c:b9:ba:3e:ef:4e:af:50:41:39:
32:3e:29:0c:d0:65:16:0a:5f:92:2f:7d:18:dd:6f:
ea:d2:a4:79:33:0c:21:c1:c4:34:4a:1a:48:a9:35:
e3:60:3d:f3:b9:59:0f:87:f1:71:0e:64:29:a2:8a:
d6:85:53:87:aa:8e:e6:cc:5c:e5:2d:d3:7f:2c:e3:
23:6b:14:f7:65:0d:ab:c6:cd:96:6e:a1:76:75:42:
05:8b:b5:7d:69:c4:2c:87:b5:38:ec:96:38:9d:d5:
4e:f9:79:fa:59:da:7a:ca:5f:27:21:7e:26:4c:37:
4d:b5:5c:6d:b7:bc:fd:42:3b:5d:1a:a6:8d:44:01:
49:38:cb:2d:25:dc:73:0c:52:79:55:0c:17:1e:65:
c5:ac:54:cd:1b:b4:25:99:f7:80:b5:4f:4a:ac:6a:
e7:25:c8:45:de:53:e6:c6:25:35:84:a0:9b:be:43:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:98:C3:9F:31:21:FA:F2:EF:A6:93:1C:4B:AF:DB:58:EB:86:5D:8E
X509v3 Authority Key Identifier:
keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:43:ec:16:8c:0a:11:ed:fe:4b:4e:5f:02:b6:70:f6:25:35:
e4:6f:2c:88:2a:c2:f1:42:5f:8f:10:10:33:e6:01:44:40:1e:
dc:16:80:b3:41:b3:8f:7e:37:8c:5c:47:10:80:1a:11:92:95:
01:e7:0d:15:13:c2:49:07:da:65:81:cd:04:8f:e6:b7:d6:e3:
e1:54:e7:1b:37:a5:5a:ce:db:54:9a:42:cc:0d:87:c9:54:5c:
3b:55:df:f9:99:0c:50:e9:b1:74:a9:12:e5:b1:df:4a:ea:97:
34:4e:25:49:a3:0b:d6:c7:b9:db:bb:be:18:92:a6:91:d5:9b:
c6:32:f7:b0:87:d8:59:01:e6:75:d2:be:0e:8f:15:1c:aa:f6:
36:d3:14:3d:af:25:91:ed:a2:9b:a6:48:82:ad:3e:dd:7e:df:
03:1e:07:5e:d4:16:c4:ff:1e:1a:81:70:a6:73:d2:60:33:00:
8b:bb:a2:72:01:8c:8e:ab:48:1e:c8:12:ec:ba:b9:a4:6b:ed:
8a:b6:0d:31:d3:1d:8c:8c:a4:be:00:2c:bf:f5:b0:5a:d7:4c:
c7:e5:0f:56:71:3a:de:db:a3:45:0a:28:7c:89:89:a6:ce:ce:
ab:5f:45:dd:b8:a2:0e:fd:3b:40:99:ee:26:dd:79:20:c2:d7:
60:05:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:25 2025 by rpki-client