
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
File: RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json)
Hash identifier: HmNObWQK8PRutcevpRh3JDWBzJsxflwITjAn9vyPcpo=
Subject key identifier: 00:9A:C3:A5:67:57:38:49:75:42:B8:1F:5B:05:69:F3:46:6A:1E:4D
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Certificate issuer: /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial: 01975911EDF12525576E65E94A2F4DE874EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
Manifest number: 1516
Signing time: Tue 10 Jun 2025 09:00:36 +0000
Manifest this update: Tue 10 Jun 2025 09:00:36 +0000
Manifest next update: Wed 11 Jun 2025 09:00:36 +0000
Files and hashes: 1: 1-2BRV4sfO38uFELp8sV79L0B1lw.roa (hash: APyNfY72IzRC6P6hQGMuA+VkTRyCwcNbDRlCp4K0Vjw=)
2: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: 8PVwbBZ3NWJfWpyUZS3rb9JaaTjMLM37XfAEuhI//ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:11:ed:f1:25:25:57:6e:65:e9:4a:2f:4d:e8:74:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
Validity
Not Before: Jun 10 09:00:36 2025 GMT
Not After : Jun 11 09:00:36 2025 GMT
Subject: CN=009ac3a5675738497542b81f5b0569f3466a1e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:dc:70:b6:af:65:97:8b:c3:3b:0a:6f:67:
a3:37:40:c6:a3:e8:9f:73:3d:78:df:0d:25:41:bf:
89:85:c3:f8:c7:79:9c:c1:ed:66:1f:a5:c7:43:c0:
09:fd:18:75:74:40:00:0b:54:c1:eb:39:25:a7:f2:
de:3c:45:06:72:5f:b5:a9:05:51:4f:39:57:15:ec:
90:7d:39:ec:42:a0:af:6d:9d:6c:37:a2:01:57:70:
d7:01:5a:42:9c:e2:2c:c2:19:f2:1b:d2:7e:ea:d5:
ec:83:2b:2c:e6:ab:25:78:30:2c:cf:7a:24:76:e6:
37:6e:19:9f:ae:19:27:13:6f:55:02:6b:07:42:63:
b8:98:66:e6:88:9a:77:cf:00:2d:3e:4e:bb:6f:32:
5f:a7:3a:a2:00:d0:3d:e0:aa:55:a9:89:39:74:24:
0f:43:3b:f7:a9:cb:9c:4b:88:bd:b6:d7:33:fb:4d:
01:26:1a:64:63:36:63:b7:06:f4:0d:88:49:12:7a:
00:ca:52:8b:22:4b:c8:0f:26:85:31:f9:79:98:93:
47:70:cb:c2:7d:37:ee:6d:83:75:e2:c9:a5:51:02:
ec:bf:0d:0d:3a:46:f2:a4:15:88:05:bf:5e:db:f6:
a7:87:ca:2f:ec:a2:e3:7f:d6:97:61:8c:8b:d0:1f:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9A:C3:A5:67:57:38:49:75:42:B8:1F:5B:05:69:F3:46:6A:1E:4D
X509v3 Authority Key Identifier:
keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a7:1b:f8:af:6a:25:a8:3a:c3:6e:a5:ef:43:6c:dc:02:e0:
df:53:d7:88:57:80:ac:6d:75:27:f5:32:d4:c1:7d:6a:9b:52:
f3:6c:8d:59:8a:45:a0:f4:9a:46:e8:dd:65:a9:da:54:a2:1d:
93:48:d8:cf:41:e6:71:dc:ec:4b:26:14:35:cd:45:40:8e:9a:
f3:32:36:23:64:f5:30:cb:a0:19:a7:34:e4:56:f1:82:e6:e2:
ba:6c:a7:0c:01:a0:b6:45:6f:f7:41:b7:fe:8f:14:13:07:6e:
09:c2:82:e2:88:90:96:c8:61:8e:cc:a8:dc:e6:2c:3d:f3:84:
9a:5b:f6:ad:79:1e:74:34:69:35:4c:f1:78:90:d6:4f:a0:02:
92:7a:88:f5:c8:dd:ab:01:cc:7a:05:44:87:45:b3:c9:ce:52:
70:5d:1e:c4:eb:69:3e:6a:73:d6:20:8b:8f:2b:2c:85:89:48:
83:bf:bd:20:78:08:55:0c:b8:45:d1:4f:52:51:e5:e5:b6:55:
62:e6:e6:ed:ca:42:1e:61:69:a9:56:c8:08:34:f2:dd:56:ea:
75:1a:ea:98:75:25:0a:7f:ba:99:de:7c:86:16:fa:ba:f8:cd:
b1:70:f2:f3:8c:77:9c:cc:80:0f:70:42:67:41:f6:b5:4b:34:
b6:97:65:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:50:36 2025 by rpki-client