Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
File: rnLkfVZpJJmnJr-ADqg4A2Letr4.mft (raw, json)
Hash identifier: gKUalOcrcbG1u+AdsH1WfTneeq981gJSe+XdHstJDBs=
Subject key identifier: 20:C1:66:BF:90:9B:17:76:3F:A4:7F:68:F3:C1:11:7B:36:8E:52:47
Authority key identifier: AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
Certificate issuer: /CN=ae72e47d56692499a726bf800ea8380362deb6be
Certificate serial: 0197488D0DFE268784C34542928BCD2118EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
Manifest number: 1585
Signing time: Sat 07 Jun 2025 04:01:33 +0000
Manifest this update: Sat 07 Jun 2025 04:01:33 +0000
Manifest next update: Sun 08 Jun 2025 04:01:33 +0000
Files and hashes: 1: 8tE73tTyc50FXb5YFWLLM8iDRuI.roa (hash: u90hDSgERXDnRD/Za5EPngqSUsaFRKPCGbCgiZ9sIyo=)
2: jNjUfwqgx7FxjC22ZM2tNJxUovE.roa (hash: CYjABvddLBiX5OMQlguXfrahjaGdNxRrjgGTFThsYz4=)
3: rnLkfVZpJJmnJr-ADqg4A2Letr4.crl (hash: zp14B2Vd3m4DiQN433/4Cjk/QmyUjSL6vZ/jiicVTHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:0d:fe:26:87:84:c3:45:42:92:8b:cd:21:18:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae72e47d56692499a726bf800ea8380362deb6be
Validity
Not Before: Jun 7 04:01:33 2025 GMT
Not After : Jun 8 04:01:33 2025 GMT
Subject: CN=20c166bf909b17763fa47f68f3c1117b368e5247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:ad:c3:37:2f:fb:a4:30:2d:d2:da:8a:76:
fc:58:1d:22:1b:69:5d:64:5a:e0:65:01:f5:2a:cd:
d5:e7:08:ba:09:ec:c9:f9:f6:bf:53:4b:f7:52:be:
f4:2c:eb:8d:6d:2d:8d:9c:2c:06:64:dc:ef:7b:ac:
b5:93:a2:c3:45:41:bd:b3:2e:2b:83:e8:a9:08:49:
44:21:1c:9a:87:3b:5b:69:03:77:92:bb:1d:a3:e3:
39:bf:85:1f:77:08:db:17:09:7c:aa:f9:22:4b:7a:
4f:f9:c9:75:fa:5b:13:ba:8e:15:b7:38:5c:19:4f:
ad:9f:5e:bb:f2:0d:00:e9:e5:90:25:25:35:4f:16:
67:dd:0b:6a:62:29:26:8f:fd:7f:8e:7b:61:e4:9d:
15:6e:b3:ca:1d:01:ae:26:53:64:81:21:37:f5:27:
e6:e1:b7:06:93:9a:c7:bc:42:bf:9d:0e:60:57:77:
5b:2d:d0:4f:b7:62:1c:bb:6a:9c:ad:e6:48:b2:91:
54:c7:46:fd:c8:7c:05:22:42:d6:30:a4:9f:91:7e:
33:86:d6:79:23:f6:48:ca:b5:ee:ab:2b:a3:d3:54:
c5:4f:ee:04:88:ea:f5:36:7a:a5:68:b9:3a:a8:e7:
d9:29:8a:ad:a9:36:34:0d:c7:10:1f:da:7e:ab:0c:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C1:66:BF:90:9B:17:76:3F:A4:7F:68:F3:C1:11:7B:36:8E:52:47
X509v3 Authority Key Identifier:
keyid:AE:72:E4:7D:56:69:24:99:A7:26:BF:80:0E:A8:38:03:62:DE:B6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnLkfVZpJJmnJr-ADqg4A2Letr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6bb471-4a3e-488d-b88c-fe12c75bf4ab/1/rnLkfVZpJJmnJr-ADqg4A2Letr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:42:25:37:73:16:4e:90:ed:99:9d:c3:b4:4d:73:da:de:d7:
e3:d0:2d:f8:eb:c7:dc:aa:ef:a2:46:02:97:41:0c:c0:b2:0a:
21:cb:12:63:10:a1:02:16:1a:1b:4d:cb:82:40:31:1b:63:e0:
83:07:88:a1:5f:66:84:ba:e6:c8:a9:9e:55:dc:c1:7a:96:b5:
cc:98:3c:62:16:60:c3:07:33:1a:88:85:15:57:3a:dc:44:03:
85:b7:43:26:81:0e:60:02:f1:09:84:03:4b:dc:89:6b:05:95:
2e:67:b2:b3:e2:3f:3e:3b:fc:a9:ca:46:2a:17:6c:29:a1:cf:
54:a1:b1:cd:2c:bc:9e:b5:fe:e8:31:02:ec:af:cd:24:8c:4e:
eb:15:49:a8:a1:c7:af:07:19:de:47:54:df:13:f6:63:d5:d2:
98:6b:65:14:c4:16:70:36:8c:81:cc:cd:65:a3:04:07:b9:ab:
af:9b:8b:eb:2c:7f:93:59:42:00:e0:43:58:83:02:a1:1a:0d:
b8:4b:b5:c0:b5:ad:61:72:d2:85:b7:0c:2d:8b:3e:76:68:ef:
1b:d1:04:04:41:bf:50:26:db:1a:85:59:3a:1e:c0:4b:8a:1b:
4c:be:a7:9e:91:49:dc:44:f9:29:58:e1:e9:e7:8b:a8:69:05:
d5:54:db:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:07 2025 by rpki-client