Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
File: hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json)
Hash identifier: IVsU3m60Q+OjNEUMcdJVt03prz34O6n56HwK6YonUkE=
Subject key identifier: 44:9A:65:7C:F2:88:86:75:E9:83:36:5D:8A:F8:29:48:CC:A6:10:14
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 01976884B8CD1641AE5BB144D50828283964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
Manifest number: 108D
Signing time: Fri 13 Jun 2025 09:00:17 +0000
Manifest this update: Fri 13 Jun 2025 09:00:17 +0000
Manifest next update: Sat 14 Jun 2025 09:00:17 +0000
Files and hashes: 1: ZjB1G19DDx_6Q5oScLG5jMaC8XA.roa (hash: 7/c0oLP47xBtzbpIYR3dJCRfL58YizRnGJk+IU5Vsgc=)
2: bckQXnbwfKXBuJ2fgXGJ6V-6Qfk.roa (hash: v7e6EIu7w13jemXrMUjQBx6+ZKi093MMCQO7o8uB3rY=)
3: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: rgFc3GcBQ6q87eK2mHq0cTT6hffniHYaKiCZkuhRZAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:b8:cd:16:41:ae:5b:b1:44:d5:08:28:28:39:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Jun 13 09:00:17 2025 GMT
Not After : Jun 14 09:00:17 2025 GMT
Subject: CN=449a657cf2888675e983365d8af82948cca61014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ec:2c:ba:1e:cc:72:3d:fd:a9:d0:36:61:25:
d3:9a:c5:82:c1:3d:d1:f7:62:5c:92:82:27:05:00:
57:bc:b3:26:0c:77:da:41:5e:e6:31:7a:a8:9e:2b:
18:0e:53:80:19:a5:ea:10:22:8d:ec:50:0d:dc:ab:
14:ee:57:eb:6d:89:e6:da:c9:09:e3:db:c3:75:9a:
08:1f:79:42:ab:15:19:11:d9:a7:88:e9:3b:ef:ed:
bd:82:2e:e2:20:4a:f1:c1:4d:d8:9c:00:4c:d5:ec:
a4:71:e2:7d:80:91:5c:30:6b:96:fe:6e:cd:46:73:
03:5a:ab:f1:8d:cb:55:53:7c:81:d9:8d:05:bc:5c:
d8:f6:10:de:aa:cc:1f:5f:91:87:97:80:6c:32:4c:
97:ff:d2:10:50:b6:75:c6:b4:db:4e:36:d7:14:0b:
67:0d:3a:77:bf:e3:6e:35:f3:68:cd:a1:83:1e:26:
a1:6f:40:f6:e3:3d:cf:38:fb:ab:2d:68:26:84:35:
09:6a:f0:70:7b:03:d5:1d:38:5f:fc:99:69:95:c8:
6b:be:bd:e4:c1:28:d3:e2:2b:24:93:cf:18:f3:c1:
1e:a5:66:65:47:3c:cb:1e:fd:f0:28:91:95:38:58:
99:41:7e:78:54:39:6b:ba:34:46:b1:6d:40:a4:60:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9A:65:7C:F2:88:86:75:E9:83:36:5D:8A:F8:29:48:CC:A6:10:14
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:51:8f:4a:ac:49:ab:e7:9c:45:37:08:3c:38:88:6e:14:73:
40:bf:1f:15:b6:1c:16:14:f8:b9:6f:df:ef:ac:df:52:75:c2:
56:88:19:37:57:a9:9d:ee:46:17:d6:bc:d3:33:48:c0:5e:90:
6a:1f:04:06:11:c6:77:95:97:35:36:c9:14:b7:2c:e4:6d:50:
9e:84:25:a4:ca:59:ef:c9:38:7f:d4:39:d4:f3:df:ff:7e:7e:
4c:1e:a5:aa:30:f6:a2:64:68:47:5e:8c:7b:81:19:c3:37:d0:
5c:a1:ec:90:7e:3b:81:e3:5e:e5:3c:50:32:c4:0f:12:6d:58:
be:d7:26:9c:1a:39:c6:1b:48:38:08:33:31:a8:5b:cb:4a:af:
d6:71:4c:f0:f8:7a:e2:d1:09:70:ea:12:b2:ea:1f:28:db:b9:
09:64:17:a2:14:26:3f:23:8c:b7:83:4c:ef:60:db:fa:a0:69:
2b:db:c1:7f:ed:48:64:a7:b1:d4:36:8f:18:da:de:dc:ec:06:
13:3d:c0:f1:1a:8c:a9:94:f4:fb:f8:6e:f4:3a:16:46:07:41:
5b:f1:0b:b2:7a:59:fb:9b:73:9d:65:79:af:59:35:b6:ce:1b:
79:a7:c1:0f:48:01:a4:44:20:ec:6f:78:36:23:3a:bc:be:14:
42:4d:14:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 11:40:22 2025 by rpki-client