Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
File: h30YEASPQ3IFBuTBgg9v4I_3ym4.mft (raw, json)
Hash identifier: ObEDQRnGJKri9tVHCC8JUeFxwwLmbTSFhiRJ94lnCRo=
Subject key identifier: 31:93:19:64:75:EA:5B:71:E6:1F:E3:AE:0E:62:1F:E3:C7:44:28:A5
Authority key identifier: 87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
Certificate issuer: /CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Certificate serial: 0197488CD0AF900516C46B38D754EE9C2E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
Manifest number: 0B16
Signing time: Sat 07 Jun 2025 04:01:17 +0000
Manifest this update: Sat 07 Jun 2025 04:01:17 +0000
Manifest next update: Sun 08 Jun 2025 04:01:17 +0000
Files and hashes: 1: BUF7f1UtiJtn_Bvl19qd2EwX0QQ.roa (hash: aqc2Xj2T1ZitA4dQvOlzNWa0gg3kBqNbkLQxtT41W0I=)
2: h30YEASPQ3IFBuTBgg9v4I_3ym4.crl (hash: JW4/RfS32nuOVHYwpnzAfLsOkYip9Pz4b0f3NLlYYqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:d0:af:90:05:16:c4:6b:38:d7:54:ee:9c:2e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877d1810048f43720506e4c1820f6fe08ff7ca6e
Validity
Not Before: Jun 7 04:01:17 2025 GMT
Not After : Jun 8 04:01:17 2025 GMT
Subject: CN=3193196475ea5b71e61fe3ae0e621fe3c74428a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f4:14:fa:17:15:f8:e3:01:18:b0:4e:65:35:
c3:b8:3c:e0:3a:f9:9b:d8:9c:25:cb:e2:35:8e:85:
82:20:0c:3e:a5:c5:dc:b6:04:13:3d:d0:cf:ef:9a:
36:57:3b:af:5a:03:89:8a:72:2c:aa:38:d5:f2:36:
0d:8a:20:8f:87:86:cc:29:67:d2:75:6d:6a:f1:4f:
61:25:63:f6:85:a8:4a:21:b6:1b:31:e2:0d:a8:80:
bd:24:82:ea:08:16:87:a3:73:28:eb:ec:65:1f:41:
55:43:11:2d:34:ba:15:cc:ba:40:42:3e:fa:ea:0b:
1c:39:38:8c:68:0c:fc:c2:b1:62:79:b0:eb:5b:3a:
07:aa:54:0c:78:17:ee:c0:e8:cd:73:9d:76:fc:00:
b7:cd:81:df:1d:50:9a:cf:d7:2c:d8:cb:51:00:18:
16:11:ab:9e:6d:23:48:27:5a:d1:b0:61:94:05:a9:
3d:b5:85:a3:8d:82:b7:8a:71:2e:39:62:72:bf:b1:
f7:a8:ea:6a:d4:42:3f:47:71:d8:7e:79:23:6a:74:
4d:cf:74:da:5e:14:63:8e:c4:18:46:ce:38:56:a2:
aa:b4:01:8b:b8:b3:08:11:5a:25:d2:08:32:03:20:
a7:d4:42:82:69:36:c3:15:42:dc:28:bb:55:16:ff:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:93:19:64:75:EA:5B:71:E6:1F:E3:AE:0E:62:1F:E3:C7:44:28:A5
X509v3 Authority Key Identifier:
keyid:87:7D:18:10:04:8F:43:72:05:06:E4:C1:82:0F:6F:E0:8F:F7:CA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h30YEASPQ3IFBuTBgg9v4I_3ym4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d3377a-8d38-4235-aa73-7e89b720190d/1/h30YEASPQ3IFBuTBgg9v4I_3ym4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:dd:08:10:fb:4a:52:a5:e6:72:cd:53:5d:c2:ba:6d:17:f5:
97:e7:b8:0c:50:1a:7f:64:50:38:17:f6:a9:bd:a4:d4:3d:a4:
4a:98:2d:0b:6d:d1:91:a2:05:4f:08:18:eb:c1:68:66:a8:70:
e7:e2:7b:84:7a:6f:79:8c:7d:12:f6:d1:18:56:a0:f5:19:63:
ac:b3:e9:b9:a8:42:38:6b:62:39:19:08:a3:22:7c:49:be:cc:
31:59:0c:e5:02:ce:df:d7:45:cd:62:d8:d1:61:4c:cd:81:42:
f5:a1:ba:e5:c5:cc:a4:91:cf:f2:32:ef:b4:01:47:a3:52:4c:
5d:75:ef:53:c4:40:8c:85:3d:8c:4c:2e:c6:ed:6d:6f:6c:58:
75:79:00:8a:46:ff:21:80:56:7e:a2:a3:c7:a1:a6:1e:5d:74:
aa:af:dc:96:44:7c:28:d7:8f:d8:8e:e2:ae:78:61:00:cc:75:
8d:59:4a:0d:5b:d8:22:97:cb:a2:32:fe:6d:6c:1a:db:11:3e:
57:b9:60:9f:56:38:fa:e5:0a:c0:05:94:a5:cf:75:18:21:a8:
b1:2c:61:9b:8d:f5:99:bc:e9:d8:e5:6c:e0:76:80:47:6c:3b:
a4:3b:c5:f4:d8:72:84:cd:a1:e6:a0:af:f7:ed:7c:90:64:b7:
6a:c9:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:14:33 2025 by rpki-client