Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
File: RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json)
Hash identifier: drM71UMI0Nch62s24Dm5LEF6dognmGiPA1wi7C+KvDU=
Subject key identifier: F0:60:88:10:8A:AF:14:29:BD:18:5D:47:27:A4:9E:0E:11:A7:D4:E6
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Certificate issuer: /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial: 01974A43D0E7137CA6B90BADD2C7EC846B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
Manifest number: 1557
Signing time: Sat 07 Jun 2025 12:00:47 +0000
Manifest this update: Sat 07 Jun 2025 12:00:47 +0000
Manifest next update: Sun 08 Jun 2025 12:00:47 +0000
Files and hashes: 1: E48fxMRuF9_usgkv-wBA_GtkkY8.roa (hash: TJ/B+8gZ2LSJEkkPcBk2s1l74WkEA3d0hjUzJQAQi8w=)
2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: mHcqZsC4dZ29elDZSm16Q6osdnBI0+b6R8JfvpQjoag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:d0:e7:13:7c:a6:b9:0b:ad:d2:c7:ec:84:6b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Validity
Not Before: Jun 7 12:00:47 2025 GMT
Not After : Jun 8 12:00:47 2025 GMT
Subject: CN=f06088108aaf1429bd185d4727a49e0e11a7d4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:81:59:e2:2c:c7:ef:88:a0:eb:99:39:db:7c:
c1:6a:9c:b7:08:5c:af:db:1c:1f:29:df:1c:62:56:
bb:9f:cd:4b:b6:da:c0:fb:21:e1:8c:ce:2f:7f:54:
36:cd:e9:1e:fd:e9:a3:b8:5f:b9:33:fe:63:1e:96:
53:48:65:75:e5:b4:6c:cb:20:da:be:3c:05:46:de:
87:27:32:0f:59:2f:08:8d:8e:3e:09:7c:31:f5:94:
8c:4a:5c:79:e5:2c:70:0a:ea:27:cc:f6:cc:89:6b:
6e:48:ac:53:52:f2:9c:81:2a:03:b7:3b:87:fb:7e:
93:7b:b7:61:aa:19:db:0e:9c:0d:1e:8b:a0:42:69:
a5:ca:9f:e7:ed:c2:03:97:00:11:f2:d5:88:bb:8f:
79:6d:ba:82:23:7c:15:ed:b7:4f:82:8b:dc:d6:16:
92:ce:97:c9:dc:f9:2d:67:56:1e:ae:cc:b4:67:8b:
a5:4f:4e:31:d0:f5:1b:23:81:58:6d:25:58:4c:cf:
1c:9c:a9:09:48:7d:8b:45:45:14:c7:dd:b1:3c:5e:
a6:28:59:ba:d6:c3:86:dd:f0:b7:cb:11:61:12:5b:
9e:a0:fd:97:ad:8b:68:1d:06:11:a8:dd:9b:06:67:
8c:4e:e0:26:9b:a9:cf:74:5b:fb:af:6f:0c:d0:a0:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:60:88:10:8A:AF:14:29:BD:18:5D:47:27:A4:9E:0E:11:A7:D4:E6
X509v3 Authority Key Identifier:
keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d5:ff:7d:b2:fe:fa:c7:1f:b1:05:35:6e:c0:d8:e6:df:4f:
39:e1:e5:4c:e7:22:ed:d3:f4:63:da:63:06:8d:3c:0b:45:5d:
90:33:95:15:70:7f:18:e4:49:ce:12:76:8a:3c:8d:b4:9f:f1:
15:05:35:97:ea:bc:06:03:87:ad:51:13:0c:63:12:b3:3f:4c:
20:40:00:ac:60:91:e0:45:97:ab:ee:66:71:35:5a:b1:5f:28:
4d:25:09:c1:1c:ac:e8:a6:b7:9a:f4:8b:4d:48:1b:07:a6:08:
bd:7a:18:72:4f:8d:63:de:37:16:c6:04:c5:08:1b:9c:db:14:
4c:c1:98:1a:eb:9f:16:3d:84:ee:d0:dc:42:04:f5:5a:5f:de:
7b:6f:f3:70:c8:0a:ab:e7:ff:05:4c:e8:eb:93:ff:db:65:d4:
fa:58:2d:99:04:81:47:a3:17:3d:6b:d2:d6:d2:da:d4:6d:9b:
7f:29:65:42:03:cc:49:1b:49:18:89:3b:7f:34:50:21:29:26:
3a:a1:12:8a:4f:52:a7:b5:b8:11:07:62:71:d2:8d:ef:f4:86:
f8:26:47:a1:61:11:70:36:2b:87:cd:31:91:68:69:fb:92:d0:
6c:88:49:5f:14:85:72:32:96:1b:ea:71:57:4d:7a:a1:c7:0e:
86:fa:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:57:59 2025 by rpki-client