Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File: RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier: yYzWoNgZUeRqoQJRE2wDrU/QHRJBLF021/hyYuz/O0g=
Subject key identifier: 3A:04:99:32:24:9F:87:19:FF:A6:65:E9:AA:C9:CA:1B:C9:9C:D6:2B
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer: /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial: 01974666D4F3358A6D9E57D4BCDDEFC2B9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number: 03D0
Signing time: Fri 06 Jun 2025 18:00:33 +0000
Manifest this update: Fri 06 Jun 2025 18:00:33 +0000
Manifest next update: Sat 07 Jun 2025 18:00:33 +0000
Files and hashes: 1: 4ZmOjsOwgULv_B_QMvBBmXG9f0w.roa (hash: x7k9BFugEad58s4inzjh5oIEa4SPB8OHd1xRzbFg5n8=)
2: BuhLOhQsyBTsy289mKisTf0E47Q.roa (hash: aKuhf01k9TU7vUcFwfvkZL/qxoA5uBGJCmVJQlfg6tY=)
3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: jv/IdJYQZuJU+UihjhBbL8zfxvCijU6Keo858jVNlJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:d4:f3:35:8a:6d:9e:57:d4:bc:dd:ef:c2:b9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=452e7d87922129df90c4870da2a7738404724858
Validity
Not Before: Jun 6 18:00:33 2025 GMT
Not After : Jun 7 18:00:33 2025 GMT
Subject: CN=3a049932249f8719ffa665e9aac9ca1bc99cd62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2c:85:8b:ae:86:d2:21:69:16:a0:c6:3a:71:
c6:3c:d3:e9:90:4c:08:79:b0:4e:c5:24:3f:ce:a1:
f6:aa:c6:8e:81:46:9f:55:69:7b:cd:f8:4b:0b:75:
2e:ef:06:0d:33:a9:03:68:aa:79:fa:bf:9e:39:17:
88:2f:8f:95:3e:44:be:4d:53:50:98:09:9e:31:55:
f7:9f:15:47:37:c8:65:75:85:43:f9:64:f0:87:59:
bc:e9:6d:46:d7:28:15:ae:a0:5c:c4:03:27:9e:50:
28:75:c5:8a:04:4a:ca:13:a2:54:02:81:bd:1c:0b:
c2:88:d0:83:f7:d7:43:03:04:70:9b:da:81:a7:ea:
54:70:bf:e5:7e:8a:fa:c3:39:42:07:30:cb:2f:97:
b9:ca:50:6a:d3:10:92:a1:09:63:0c:cf:31:00:3e:
e7:ab:50:60:5f:9b:c3:94:54:d1:1e:0d:f8:43:cc:
dd:b8:37:8b:3d:16:78:1b:34:e8:66:5c:a5:a8:9e:
0c:a3:fc:52:19:ff:e8:b9:d4:c1:87:fa:b6:19:98:
c9:2d:c9:cd:3f:b3:5f:bb:66:7b:6c:6d:50:b0:e9:
49:36:c3:ae:2c:73:fb:7d:e9:3a:a7:5a:52:43:be:
f5:12:52:76:cd:7a:cc:a0:4d:31:ef:d6:e0:ce:bc:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:04:99:32:24:9F:87:19:FF:A6:65:E9:AA:C9:CA:1B:C9:9C:D6:2B
X509v3 Authority Key Identifier:
keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:78:32:d5:56:2d:6b:a8:46:27:af:b4:83:7b:4b:47:bf:fc:
e2:56:23:44:da:33:24:ab:48:de:32:73:8b:fc:f6:80:ad:9c:
9a:65:5f:2f:bc:a0:ff:3b:65:9a:9a:27:cf:2a:04:54:56:80:
d2:4b:6b:bb:58:fc:49:49:ef:bd:82:1e:29:f0:1f:44:cf:89:
05:42:08:cb:53:8a:01:65:74:b5:56:c6:d0:bd:06:09:41:bd:
16:87:66:fb:46:3a:cd:21:e4:33:ee:8b:10:2f:3f:d6:af:ca:
5f:b0:ae:ad:d2:6f:5a:b4:9d:bb:4b:39:9a:49:bd:2c:f8:d5:
42:09:6f:fb:06:18:ba:09:e8:1c:32:e8:e1:aa:3c:29:7d:4d:
1e:0f:f6:c6:67:9a:76:18:8c:6e:16:85:79:e4:0a:d1:7e:83:
b7:79:c0:80:bb:c6:2b:39:b6:d6:00:a8:69:1f:9c:44:a7:7f:
d4:7b:90:75:ca:c4:23:49:e8:8f:53:d4:7c:73:bf:d3:e1:ec:
5e:f7:35:0b:0e:43:d2:95:f9:6c:e7:a1:0f:ce:4a:87:5f:4c:
75:e8:75:33:14:44:f7:36:39:d1:64:85:db:24:1b:ea:3e:c8:
bd:fa:4e:e6:b6:77:27:c1:ea:23:24:51:8d:f9:37:b9:e4:6c:
e8:63:5b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:06:07 2025 by rpki-client