Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
File: r4j95vrbtrLB22_kH4KdHyAVvgs.mft (raw, json)
Hash identifier: 8m2dyM0vaFZVMw7r7C6ej0t8quGzi718r9q9wAUVqj8=
Subject key identifier: D2:E7:CC:8A:A3:1D:A2:A7:8D:6F:AE:64:5E:01:9C:36:64:30:B0:79
Authority key identifier: AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
Certificate issuer: /CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Certificate serial: 01974D44841F4686073ABD43DFCDD35D613D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
Manifest number: 0C18
Signing time: Sun 08 Jun 2025 02:00:25 +0000
Manifest this update: Sun 08 Jun 2025 02:00:25 +0000
Manifest next update: Mon 09 Jun 2025 02:00:25 +0000
Files and hashes: 1: RHreYh0WmNugHNPOVP5GHBEiSQE.roa (hash: lDEy9crc1E/w31v0jSsa/vEhnHdpcWtnPtxtDbNUjjc=)
2: r4j95vrbtrLB22_kH4KdHyAVvgs.crl (hash: jSKiIZDGg4DjUOonaxGcXsdMD/G0kICgTXwJZVhO3RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:84:1f:46:86:07:3a:bd:43:df:cd:d3:5d:61:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af88fde6fadbb6b2c1db6fe41f829d1f2015be0b
Validity
Not Before: Jun 8 02:00:25 2025 GMT
Not After : Jun 9 02:00:25 2025 GMT
Subject: CN=d2e7cc8aa31da2a78d6fae645e019c366430b079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5d:ed:52:ff:6a:8f:a1:9c:d8:c7:9c:ac:10:
0e:f0:e9:ab:d0:c3:c1:38:42:4f:ea:b8:6a:8f:16:
7c:a5:dd:85:24:ff:ea:12:1a:6c:38:50:1b:9b:0d:
52:09:e1:f1:15:c7:fb:c3:d9:48:34:28:c8:91:c8:
5c:b1:93:79:2a:2e:06:86:07:90:55:1a:24:75:b0:
3f:df:be:91:df:c8:f8:13:8f:0d:43:c1:a3:56:22:
57:5b:63:98:b8:c0:0d:22:6c:3c:b7:8f:a2:54:53:
d5:db:89:ad:e4:df:a8:8c:68:6f:2d:c4:b1:9a:3e:
ff:3d:ec:ed:d1:fc:48:1a:03:47:3c:90:ac:e0:2d:
10:21:49:99:d7:7e:b2:e1:be:36:36:f7:16:de:09:
60:b5:b7:a0:a6:59:d4:3a:70:a9:04:47:d2:27:41:
99:1b:ac:9f:32:ec:28:71:f4:d2:40:dc:91:21:06:
d0:d5:c8:00:52:bd:eb:f3:d3:7a:43:6b:2c:cf:8f:
3d:d3:a5:78:90:07:c5:b7:eb:34:32:76:91:e7:84:
5c:94:dc:d6:6b:59:b0:49:ee:89:eb:d9:5b:e2:13:
52:00:f5:03:7b:13:f2:90:bc:9c:ce:a1:61:22:0f:
48:c1:f2:bc:d3:18:05:ee:22:d2:e3:85:d5:dc:81:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E7:CC:8A:A3:1D:A2:A7:8D:6F:AE:64:5E:01:9C:36:64:30:B0:79
X509v3 Authority Key Identifier:
keyid:AF:88:FD:E6:FA:DB:B6:B2:C1:DB:6F:E4:1F:82:9D:1F:20:15:BE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4j95vrbtrLB22_kH4KdHyAVvgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fd596a-3f54-4e06-8620-6e0d213f484a/1/r4j95vrbtrLB22_kH4KdHyAVvgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:56:18:07:66:ee:bf:c6:ca:c5:0b:ba:84:73:d3:bc:ef:2b:
cf:66:36:5c:78:c4:42:aa:46:6e:1e:62:87:a0:bf:ab:81:dd:
59:57:94:6c:0c:23:4f:82:75:8d:6f:2d:b1:a0:0e:2f:b6:0b:
34:40:fa:5c:13:3a:42:94:78:c5:fc:9c:0a:54:dc:a0:f1:cd:
5a:c8:62:ea:71:12:06:e5:50:8e:5b:31:d6:3d:63:95:79:5b:
ef:8a:51:0a:07:39:3e:9d:41:ec:73:8e:9b:a5:c1:6f:fc:f3:
01:65:65:af:0b:1a:8a:b5:89:fd:3e:a5:68:de:01:80:e1:a0:
0d:0c:d0:c3:ef:14:fe:77:cc:7b:c1:8e:5a:50:a9:50:e0:72:
e5:79:56:09:ce:91:73:8f:2a:d9:65:71:1d:f2:9b:0e:8d:0f:
1e:c1:c9:fa:f0:3b:83:35:0a:58:66:03:7f:6f:1a:0c:ff:d4:
c3:43:40:51:06:d2:86:6a:5a:ea:ee:31:b6:d4:89:c5:60:0b:
b6:2c:c7:2f:c5:91:af:31:70:8d:70:6a:05:dd:1c:ce:7f:a2:
70:e6:b2:3a:1e:2d:d9:d3:87:b6:3e:b5:a3:85:8a:1d:f5:ad:
04:12:23:0c:75:3b:71:36:38:b4:3a:34:2d:8f:af:4b:20:ec:
f8:78:92:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:17:11 2025 by rpki-client