Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
File: RMDyoqVgB-TEXMxx59oJKGEwWyA.mft (raw, json)
Hash identifier: FDfUEjJiEYiEq5hcyet1HbwGTYXyGx4pcty8uahv9K0=
Subject key identifier: 2C:09:5D:FD:83:03:73:A5:BF:99:7A:28:F0:B6:24:4F:BF:61:13:1E
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Certificate issuer: /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial: 01974B567628F26A50901D1CA20D3BF812D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 17:00:46 +0000
Manifest this update: Sat 07 Jun 2025 17:00:46 +0000
Manifest next update: Sun 08 Jun 2025 17:00:46 +0000
Files and hashes: 1: JKZSaEq-32SHY-bAWiWwoCf7Nj0.roa (hash: yG2sh1v4s77ObqidFtWCzFl8F2FhijHzBj04Ij6JtCg=)
2: RMDyoqVgB-TEXMxx59oJKGEwWyA.crl (hash: m4GzHhpnDHS5KZqF50T3LDE4g3HxSokrEGU+r4ADl48=)
3: j-Ifej8p6sYfHH1KeQ_QH-keweY.roa (hash: iVB6o7qwOuA1Lj9sG4cTIYUNVhckFRweng10RlAwHI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:76:28:f2:6a:50:90:1d:1c:a2:0d:3b:f8:12:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Validity
Not Before: Jun 7 17:00:46 2025 GMT
Not After : Jun 8 17:00:46 2025 GMT
Subject: CN=2c095dfd830373a5bf997a28f0b6244fbf61131e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:dd:d2:0e:4c:d5:81:00:05:e6:41:7f:83:
1d:24:90:50:40:e2:ff:6b:af:c5:7f:10:52:7b:7e:
bd:41:ea:a3:60:cc:3f:67:fe:da:8e:d6:02:5d:98:
c6:a9:c4:e6:3d:68:39:42:1c:ba:05:b3:0c:21:f9:
d0:f8:fb:b9:38:7f:97:cb:bb:72:7a:00:17:55:1a:
e3:02:64:35:5f:65:3d:20:c9:58:d5:e9:40:85:51:
7c:90:c8:d8:3c:6b:66:92:64:5a:a6:43:2a:49:22:
8b:ba:17:15:60:b8:7f:62:1c:8e:b2:23:94:60:e3:
b1:27:d3:da:03:f2:a2:14:19:1f:fc:8a:8b:0e:2e:
4b:a8:f6:63:6f:55:9d:c7:d1:40:3b:8c:e1:bb:9c:
96:b8:ea:0a:1c:b8:88:89:20:cf:55:bd:93:34:25:
6d:df:ec:d4:65:20:4a:42:ef:66:83:78:ff:ac:3c:
23:cb:94:11:44:b9:d5:ad:ca:0c:94:0a:14:fd:41:
27:1c:60:6d:34:98:dd:70:0f:fe:90:53:9c:b1:a2:
0d:03:91:6a:f0:98:ef:b3:48:24:86:46:32:61:b7:
e3:62:c7:b6:40:7c:14:44:ee:4d:ac:59:a1:e3:05:
5e:58:3f:ae:ce:8b:58:31:07:07:80:99:38:99:29:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:09:5D:FD:83:03:73:A5:BF:99:7A:28:F0:B6:24:4F:BF:61:13:1E
X509v3 Authority Key Identifier:
keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:69:8d:5c:67:40:9c:4e:a8:0e:d5:73:18:56:25:66:94:b5:
27:6d:87:10:2f:36:90:d5:e6:d3:b8:da:e5:9e:77:10:1d:ab:
fc:1c:50:19:16:8f:78:8b:18:c6:98:b4:da:fb:f5:2e:47:72:
40:d1:d3:c7:24:10:96:cb:d5:82:ff:07:aa:37:63:42:cb:60:
3b:a6:53:99:d7:bf:e9:16:79:c8:2b:af:5b:12:58:64:07:6a:
f9:27:ed:46:97:50:07:33:93:e4:33:21:a4:49:f2:5f:b3:6e:
a9:d9:dc:da:d9:f4:c1:c8:d9:a4:2f:03:28:17:44:28:11:93:
f6:bc:dd:fc:a7:e9:7e:b4:63:93:8d:00:f7:0c:d9:a7:a5:60:
4a:b5:e0:ef:81:5b:27:d1:e7:cb:df:57:d3:09:04:46:a0:89:
6a:ab:3f:e0:08:6b:30:81:e3:1d:7f:75:17:2c:33:27:d8:d7:
75:46:c4:25:26:a9:06:c7:53:de:d6:de:d5:57:40:12:02:09:
0b:4e:57:df:6b:81:ba:41:0a:a1:18:13:a7:c4:4e:77:9e:0a:
fb:5c:1f:f6:b7:b8:75:af:cc:c3:76:b2:ab:3c:d3:86:00:54:
f7:62:00:9c:6f:6b:dd:78:a5:e8:ea:90:6b:28:36:0c:65:23:
29:00:63:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:44 2025 by rpki-client