Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
File: rM-ri4kwEKG14lBy4dRWkEST9S0.mft (raw, json)
Hash identifier: SVVGrfrjBlavk55KTe7L/OGhZWgYhRNjihDHUmW/iiQ=
Subject key identifier: B3:C3:8A:CE:76:A9:79:61:AC:61:36:B3:55:13:6E:BE:3C:28:3E:15
Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d
Certificate serial: 0197507CA54D083892055664F0574AB975C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
Manifest number: 0E44
Signing time: Sun 08 Jun 2025 17:00:35 +0000
Manifest this update: Sun 08 Jun 2025 17:00:35 +0000
Manifest next update: Mon 09 Jun 2025 17:00:35 +0000
Files and hashes: 1: 1-3Y-4ahWm1ezt431zCYGOBUyQvs.roa (hash: zupu0GMNILT7rH6BKtk5nw5qlb8oVDhhuZpZjAfbi5M=)
2: rM-ri4kwEKG14lBy4dRWkEST9S0.crl (hash: P74IGENoJz6wUUxIVt60xfmcHLTNuFuk9Uzt7PPK6P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:a5:4d:08:38:92:05:56:64:f0:57:4a:b9:75:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d
Validity
Not Before: Jun 8 17:00:35 2025 GMT
Not After : Jun 9 17:00:35 2025 GMT
Subject: CN=b3c38ace76a97961ac6136b355136ebe3c283e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:eb:2d:81:e4:f8:15:82:92:1d:2c:18:d9:
e7:4a:ab:b0:bb:83:5e:e0:15:d5:d4:b4:35:5f:74:
0d:62:5c:f2:48:15:25:57:bb:3a:e3:4c:90:9d:e2:
08:61:1b:03:0d:71:ff:1e:5f:b7:99:09:8c:dd:61:
ac:af:b5:e4:c8:12:21:90:56:15:70:cd:1d:84:08:
aa:5d:64:f2:0b:90:94:9f:1b:b0:df:f4:eb:8d:f1:
f7:63:50:56:6c:3b:5c:40:38:4e:22:d9:c9:7b:b8:
96:dd:5a:b0:68:4f:b5:21:a3:cd:49:f2:3c:ff:dc:
0a:b0:47:32:4b:e8:76:36:7d:86:a9:0a:f0:ee:36:
91:80:ba:11:4e:d4:6b:86:92:1f:09:69:27:56:33:
52:9e:3f:f8:21:5a:1c:84:52:9b:5d:22:a1:09:0c:
ed:51:d1:70:cb:65:6b:ac:01:c1:a7:33:d5:52:8f:
5e:92:13:74:6d:48:ec:70:80:68:58:cf:55:78:7f:
89:f2:66:9f:04:b0:db:aa:f5:86:0a:47:30:fd:48:
94:2b:3c:ca:5d:d0:e8:21:58:8d:4a:79:23:1b:0b:
f8:46:a1:49:22:12:6d:d7:b4:d3:7d:43:88:be:a2:
61:8d:bf:66:99:35:30:28:a4:75:95:26:eb:ed:60:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C3:8A:CE:76:A9:79:61:AC:61:36:B3:55:13:6E:BE:3C:28:3E:15
X509v3 Authority Key Identifier:
keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:52:27:39:b4:c8:99:fc:89:2a:16:46:b9:b1:28:98:28:08:
ad:20:f4:3b:75:83:47:8d:30:ca:66:f7:b1:5e:91:65:ed:fa:
8f:ea:02:19:d3:ab:f7:7f:69:83:6b:66:7d:08:fe:da:f6:49:
3a:08:7a:aa:db:38:85:74:11:8c:db:3d:13:93:e5:67:04:3a:
33:72:96:60:9f:11:be:12:99:a5:8b:70:53:4f:8d:1a:f9:d7:
2f:be:c0:73:88:b7:28:ce:90:df:17:aa:71:39:c6:d4:e9:47:
ab:cd:65:61:39:21:09:a4:16:27:78:4f:29:c6:3b:0f:f4:e9:
c6:90:55:09:36:a9:0a:ee:9e:a4:10:ce:11:e9:cb:92:87:c0:
99:65:6e:7d:a3:0a:ea:3f:83:11:08:09:39:b2:ac:ce:77:32:
13:c7:1b:4e:de:fb:65:ff:50:ab:53:26:52:06:94:f4:67:e4:
c8:0f:18:24:f0:20:72:b5:98:df:90:e7:60:c8:4f:72:ee:b8:
f2:2d:7d:bc:4b:3b:12:e4:9f:0f:1b:a9:4e:c3:a3:09:0f:09:
73:c3:3b:75:77:df:31:d3:45:62:d1:92:7b:57:94:ef:cf:ce:
31:51:6c:da:46:92:18:a9:9b:d6:f0:ac:d0:ca:df:86:a7:38:
c6:ae:4e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:30:15 2025 by rpki-client