
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
File: RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json)
Hash identifier: CKLH2d9eyNqCYbwfX8rycM0iog8hIkY4nzveAhZNIXs=
Subject key identifier: 1B:2F:3D:13:A9:20:BB:0A:95:42:5C:1E:C1:31:DD:05:6C:27:E0:91
Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
Certificate issuer: /CN=4452633274b1d886a92757f65219c2e7546ecdf5
Certificate serial: 01975723C5647AD42F04F22E396E7785591D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
Manifest number: 1515
Signing time: Tue 10 Jun 2025 00:00:51 +0000
Manifest this update: Tue 10 Jun 2025 00:00:51 +0000
Manifest next update: Wed 11 Jun 2025 00:00:51 +0000
Files and hashes: 1: 1-2BRV4sfO38uFELp8sV79L0B1lw.roa (hash: APyNfY72IzRC6P6hQGMuA+VkTRyCwcNbDRlCp4K0Vjw=)
2: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: /pEiCrGt+yZqxKhQHNr0r9rutqqCKkx3RgBocb0iUgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:23:c5:64:7a:d4:2f:04:f2:2e:39:6e:77:85:59:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5
Validity
Not Before: Jun 10 00:00:51 2025 GMT
Not After : Jun 11 00:00:51 2025 GMT
Subject: CN=1b2f3d13a920bb0a95425c1ec131dd056c27e091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cd:c7:3e:7a:f0:11:3c:1f:24:fb:aa:56:61:
b4:82:7f:57:94:a6:55:0e:7f:07:da:cd:9f:ba:91:
0c:f0:26:c6:6d:d8:d1:dd:fb:c8:17:25:c4:b7:4d:
a9:6c:2a:86:84:c1:2f:1a:46:fc:62:f9:a0:a8:99:
76:48:b6:9f:d2:a1:87:ec:72:7d:08:e8:52:e7:f9:
2b:70:3f:c0:75:83:6b:42:ea:18:a5:8a:02:de:df:
29:ad:c6:2b:48:29:d9:ba:93:25:3c:b7:c7:4b:56:
a3:c8:f8:23:ac:d3:ce:a5:3e:7b:0d:c7:ba:d7:0f:
ac:09:c1:ab:2d:f0:67:f3:1e:59:0b:44:7b:5a:da:
77:c8:1a:56:e9:c1:df:bd:5b:cb:7b:b7:be:53:ec:
5d:a7:be:ec:cf:97:a8:5f:18:33:58:bf:9a:81:dd:
4b:97:4e:f0:76:e4:da:c0:52:a5:3d:e8:23:4b:f9:
a5:70:66:32:3e:e8:1e:46:75:d2:e4:8c:2d:2c:70:
54:fd:f7:59:32:96:55:41:3f:a9:67:9e:54:ff:7a:
e7:1a:14:30:c4:0b:b4:f0:b4:bf:67:fc:e4:ff:73:
85:8d:fc:3c:25:26:1d:64:be:3b:f0:6b:40:53:c7:
a7:f7:76:a4:18:4b:7a:9a:57:ed:b0:81:77:de:db:
ce:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2F:3D:13:A9:20:BB:0A:95:42:5C:1E:C1:31:DD:05:6C:27:E0:91
X509v3 Authority Key Identifier:
keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:ba:58:73:1d:82:e0:df:4f:a7:e7:9e:9b:a6:63:12:f6:80:
3c:5c:5b:89:ac:a3:ab:db:02:bd:7f:9b:4c:a1:bd:16:27:a2:
98:b4:18:45:6e:0c:39:d0:00:33:b2:5d:bb:4d:b1:66:0b:a6:
a7:d4:67:ef:8a:db:8a:d6:a9:be:63:0f:eb:44:d9:76:98:66:
e4:a0:a2:81:33:5e:41:98:f2:ca:b3:34:6b:59:00:0e:78:97:
08:5c:cf:eb:1a:54:76:f9:1f:c8:1f:79:b5:07:aa:cd:c5:a7:
18:4e:c0:06:30:e8:69:17:06:d1:de:6a:93:f7:17:40:84:52:
93:b6:85:3d:77:b1:d3:8b:c0:1a:06:9a:44:18:30:b1:fc:4d:
07:e9:e5:46:7c:3b:10:6a:95:a2:8b:fa:b4:9b:bc:1f:18:12:
d3:c6:70:ee:f9:fa:cc:b2:c4:7d:41:65:81:bc:a9:71:fd:a4:
b9:b2:06:03:70:ed:ef:d4:a9:eb:91:5b:51:c3:36:69:90:27:
39:f6:44:93:36:5b:dd:7e:6b:33:0f:0b:9e:23:90:d2:1c:a3:
52:cf:52:c4:b6:32:c2:60:a7:5b:c9:be:d4:75:ab:e8:6c:31:
f2:72:a4:69:4a:28:08:a2:4f:4d:16:01:1f:f1:0f:dc:aa:5b:
4c:c9:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:06:48 2025 by rpki-client