Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: OeNbCoBQKj49PCi5HsuD916gYtlgeBktYZBIU97JMRE=
Subject key identifier: BC:2A:F9:BE:3F:2A:51:CB:F4:EC:E6:FF:C4:A9:4D:2B:27:30:17:18
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 01974A43BAA889ED34EB3AEEB222477E4555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 044B
Signing time: Sat 07 Jun 2025 12:00:42 +0000
Manifest this update: Sat 07 Jun 2025 12:00:42 +0000
Manifest next update: Sun 08 Jun 2025 12:00:42 +0000
Files and hashes: 1: DLu57DZ9WcMMQAmctMKhjMYOA_8.roa (hash: AHuCNcId9Lo6xFcInpQkBT6Qmu0yRSdhlMD93oKCtcM=)
2: S0aXQwzEMfO_byK88_PAIYF0E0Y.roa (hash: zkNEouDr8/eydtpoAL8WuNQuUPE88TuaPOB3fN49Myk=)
3: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: Dt2ocfTO7v1zFYgKahkdpLeg3S/xMkGTq+gq6xsBmIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:ba:a8:89:ed:34:eb:3a:ee:b2:22:47:7e:45:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Jun 7 12:00:42 2025 GMT
Not After : Jun 8 12:00:42 2025 GMT
Subject: CN=bc2af9be3f2a51cbf4ece6ffc4a94d2b27301718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:84:9a:e1:da:b1:d8:55:26:ac:82:84:3a:
c7:1f:07:3c:4e:09:d8:b1:5b:87:0b:74:1b:7c:24:
4a:a7:c9:c1:d7:6e:96:4e:77:1f:6e:11:e1:44:c0:
27:27:60:8c:b5:e1:df:ac:23:5d:c2:6d:91:76:f8:
7e:05:a6:dd:42:52:b6:4b:04:b9:03:81:06:66:0f:
ac:fb:eb:e8:07:5b:7f:5f:bd:97:85:62:d7:d8:b6:
dd:3e:0a:7e:a4:b5:3f:f2:95:0d:e6:d9:76:90:b6:
04:47:c7:1b:51:da:7f:ff:8d:d4:4d:4e:20:f7:28:
d1:17:61:53:38:92:74:e9:24:9d:6d:ab:7f:50:36:
f9:dc:7b:ea:73:f3:91:ef:7d:60:4e:f3:82:e8:c4:
aa:15:2d:f4:69:2a:1b:a2:d7:8c:54:fa:c8:e7:d5:
99:c9:fb:15:74:71:e3:f2:f4:59:fa:e8:f3:6e:c6:
af:4d:b0:6d:bb:74:03:00:87:bf:da:bb:fc:d8:6c:
14:66:2a:ed:4f:6c:3c:63:f2:dc:b9:f8:c0:4a:43:
0e:bb:8c:bd:72:b3:ad:be:96:93:b0:b1:92:9b:7c:
49:fa:4d:04:34:c7:0d:aa:75:81:94:41:64:73:59:
95:1c:5c:e2:01:52:e7:43:e7:15:26:0d:8f:c5:78:
65:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2A:F9:BE:3F:2A:51:CB:F4:EC:E6:FF:C4:A9:4D:2B:27:30:17:18
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7f:da:ad:d4:cb:50:14:f8:10:bd:2e:c2:8e:7c:05:67:01:
5d:dd:6e:ac:25:a7:a2:db:bb:3c:0c:6f:44:8b:e0:db:33:55:
76:09:1b:ad:ee:55:fb:a0:6a:24:45:55:dc:fa:a8:02:4b:30:
6f:95:f3:d1:18:91:ea:b4:f6:1c:92:6f:a5:a2:70:5e:f3:f4:
02:8c:14:03:81:dc:74:56:9c:64:9b:cc:ab:e0:3a:4b:1d:93:
63:bd:2e:41:80:0b:25:8e:b2:ab:42:2b:5a:42:5d:56:80:4f:
d2:b2:d7:ef:c1:64:0d:09:3c:32:ec:8f:4a:3f:69:90:93:00:
b1:d7:8c:ef:cb:ed:48:8a:b0:cc:94:93:52:e0:c7:60:8e:91:
aa:8c:bf:8e:64:0a:88:77:1b:ef:2a:25:f5:b6:ee:f2:3b:f4:
23:b5:77:50:d9:51:aa:bc:e3:3d:be:54:7b:f2:3a:34:c1:d3:
ec:8b:c8:7d:94:38:e1:d0:0d:ac:db:f1:9a:04:a3:4d:7e:07:
7e:d6:e3:6a:bd:5a:c8:71:97:77:7c:bb:a8:f3:4e:3d:51:6d:
65:50:a6:6d:04:6a:d0:24:b8:ed:d4:43:b3:16:1a:c4:01:ab:
67:7b:a0:c5:21:55:09:b1:2e:e6:28:46:34:04:db:ca:1d:74:
72:22:7c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:27:04 2025 by rpki-client