Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
File: r0j2f1P86YkdQVk6yEyuMEq_y88.mft (raw, json)
Hash identifier: UaAXlaQg3IFH9SleiAuYRiThoalQBh4iCzWDucnCCjM=
Subject key identifier: CA:7B:74:27:3D:7E:7B:6D:E0:EA:6A:C2:6D:4B:A7:F3:E8:D8:D8:5F
Authority key identifier: AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
Certificate issuer: /CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Certificate serial: 019753B4DDEEFD91FAE91211EBF6FA31FCF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
Manifest number: 1583
Signing time: Mon 09 Jun 2025 08:00:51 +0000
Manifest this update: Mon 09 Jun 2025 08:00:51 +0000
Manifest next update: Tue 10 Jun 2025 08:00:51 +0000
Files and hashes: 1: LJm4ejx93tTGGSMSp9-CoJADCNU.roa (hash: enkxB1ym9D6j6OauD2B7/3J70MmuSWDzwk6AA84rwRE=)
2: Rx5Tk2OFD4AUCGaXo47NJtzGllk.roa (hash: comS5qd1rLPpE+d2v/ddO3rLzCRrN86e4IPWwWweF9Y=)
3: r0j2f1P86YkdQVk6yEyuMEq_y88.crl (hash: N4taC3nnvTzM2xhowEPZGaGtyMfQbhWzHJaTEo3bZek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:dd:ee:fd:91:fa:e9:12:11:eb:f6:fa:31:fc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af48f67f53fce9891d41593ac84cae304abfcbcf
Validity
Not Before: Jun 9 08:00:51 2025 GMT
Not After : Jun 10 08:00:51 2025 GMT
Subject: CN=ca7b74273d7e7b6de0ea6ac26d4ba7f3e8d8d85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:d6:fb:51:95:3b:23:3e:a9:b8:e7:eb:78:
e4:c0:90:c7:07:a9:fd:bc:13:78:e5:83:a9:2e:d1:
cc:fe:4e:19:ab:25:86:b0:ce:2b:06:c8:a7:87:07:
d5:e5:5b:60:01:df:1e:91:9a:80:d4:d6:45:69:e7:
bd:00:0b:d1:40:5d:82:32:9b:72:a7:db:8e:4e:c3:
11:0e:eb:ab:d8:c3:b9:d6:af:88:6c:b4:56:86:b8:
b5:42:7b:f8:c8:96:24:a8:29:9a:c6:cc:d7:01:1c:
0b:11:55:9f:83:a8:4d:b8:fc:33:5e:72:62:14:e3:
3e:77:5c:41:24:9f:49:9f:e1:60:d0:8a:2f:07:fb:
be:6a:9d:3f:80:29:ab:74:31:bc:b0:95:e4:85:cd:
20:64:0c:1f:5d:23:34:1f:a1:14:99:89:35:bc:4a:
4f:40:57:a7:04:8a:ba:1e:15:ff:fa:18:79:3b:ce:
e4:09:d3:91:95:36:68:5b:09:41:83:f9:2e:17:3d:
5c:c6:0f:a0:b5:50:d3:87:7b:5f:f9:9d:cc:b1:bd:
1b:dd:19:79:1e:bd:8e:46:e9:63:31:a8:26:9e:39:
df:61:6c:75:2f:9d:01:68:6b:0c:b8:b6:0d:42:e4:
2c:2e:a7:b4:7d:7b:a4:61:c1:14:07:c3:67:f2:d6:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7B:74:27:3D:7E:7B:6D:E0:EA:6A:C2:6D:4B:A7:F3:E8:D8:D8:5F
X509v3 Authority Key Identifier:
keyid:AF:48:F6:7F:53:FC:E9:89:1D:41:59:3A:C8:4C:AE:30:4A:BF:CB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0j2f1P86YkdQVk6yEyuMEq_y88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e1545b-fc52-44c0-8f57-2884dd8248d6/1/r0j2f1P86YkdQVk6yEyuMEq_y88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3d:76:c8:00:8b:54:c8:ad:cd:82:72:40:6a:7b:d0:f4:51:
d0:42:ad:d5:fb:da:50:cc:98:fd:38:9b:e5:c4:57:52:e0:ea:
8d:f9:24:db:54:08:16:08:e6:8e:c0:c6:db:13:97:e5:43:51:
d8:47:35:43:47:aa:a3:20:7c:44:e3:9e:f4:c0:8c:92:ef:40:
3c:8c:db:87:62:a6:be:94:85:1b:ac:47:0d:f2:bf:b1:26:d5:
5c:04:4c:27:94:65:fc:f8:12:10:b6:77:4a:88:83:0f:96:7c:
46:f5:51:90:b3:f1:bc:24:20:da:55:ab:59:3e:16:13:19:2c:
19:31:05:41:2d:4e:cf:bd:20:cc:22:c1:9a:39:87:41:e2:43:
a7:9b:bf:a4:f5:50:87:56:51:d3:42:fc:ce:1a:fd:39:dd:01:
24:f3:89:26:a4:f2:62:a8:a7:91:25:ea:82:bc:50:c7:b7:59:
b6:a1:7c:5e:7f:b3:83:32:b8:eb:2e:08:ae:a8:78:09:4f:dc:
72:75:d1:83:a0:66:08:c6:8c:73:7a:79:4d:2b:42:06:19:09:
d0:cd:c3:2e:45:65:bb:c9:06:ec:e2:36:8e:c5:5b:58:ca:8b:
cd:1d:f5:b3:40:42:98:82:15:45:4a:37:39:cf:7c:5c:95:a8:
b8:06:4d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:46:25 2025 by rpki-client