Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
File: 0cSRMJSiEmjHOmdlOjc41z5cWac.mft (raw, json)
Hash identifier: WuXhRhSPyxD6RlUY8Va4aOJ84uPjn2NDz2yCEQHVsgc=
Subject key identifier: 80:A9:59:0C:C9:59:35:03:9C:33:9A:BF:36:A9:6D:FA:69:4A:AA:EB
Authority key identifier: D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
Certificate issuer: /CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Certificate serial: 0197B6A15D2CC674A3D09AB6DEC75D995AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
Manifest number: 148E
Signing time: Sat 28 Jun 2025 13:01:57 +0000
Manifest this update: Sat 28 Jun 2025 13:01:57 +0000
Manifest next update: Sun 29 Jun 2025 13:01:57 +0000
Files and hashes: 1: 0cSRMJSiEmjHOmdlOjc41z5cWac.crl (hash: i8PTYPfq/BB+BLmNWzXYqBJUbvFR37mGupBrAMGzeb0=)
2: FIvNNxujkeosaQmK-8zL99U8I-8.roa (hash: xdptKNwYHkOXesPFH1LxyuhIbU4UE4ZRfmuf1MyhTcI=)
3: Z5fcF5W7KXTPN2HuxSQd8ZQH4aQ.roa (hash: KQQ09ojl8xnv8sB90M9HtEN2nEY3TEzVcMAwOp9asR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:5d:2c:c6:74:a3:d0:9a:b6:de:c7:5d:99:5a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c4913094a21268c73a67653a3738d73e5c59a7
Validity
Not Before: Jun 28 13:01:57 2025 GMT
Not After : Jun 29 13:01:57 2025 GMT
Subject: CN=80a9590cc95935039c339abf36a96dfa694aaaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f1:ff:99:a2:0b:84:65:02:2e:bc:46:04:ba:
7a:20:d3:2c:39:61:24:f9:33:ac:ef:c2:b6:b2:46:
dd:12:7b:22:36:87:78:3e:40:5b:0a:b4:dc:f2:cd:
71:71:ec:74:74:bf:f2:3c:30:3e:cf:5f:be:ef:32:
45:16:bf:5a:b7:36:66:0f:8f:57:60:bb:8f:b8:6c:
7c:14:a8:11:9f:42:87:f2:70:df:6e:f2:b0:1e:37:
f3:15:68:01:47:6c:a2:f6:12:27:61:da:f2:71:b5:
a0:e3:94:7f:a7:2f:40:15:0f:ca:d0:b5:b6:ba:4d:
6e:e3:28:ba:00:db:e2:7f:f9:b5:5b:ea:ab:1d:1e:
d6:2b:20:69:fd:c9:e1:be:a5:20:e4:b7:61:2c:06:
a5:2f:b8:51:5d:45:f9:26:c6:ab:6d:18:2b:95:a1:
29:c6:e8:af:db:0a:74:08:c1:86:6d:60:4f:83:7a:
2a:a4:d1:66:d0:53:b6:aa:8a:5e:78:03:63:65:94:
5b:c0:97:1c:ca:e2:e9:af:b2:61:8d:07:2a:98:a3:
cb:dc:8d:b4:eb:2b:e1:e4:ff:04:2c:58:db:ca:81:
c1:79:40:3b:e4:44:6c:80:7b:54:f5:bf:4d:10:2c:
92:be:da:59:44:c9:63:6e:a8:32:47:4a:16:00:36:
23:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A9:59:0C:C9:59:35:03:9C:33:9A:BF:36:A9:6D:FA:69:4A:AA:EB
X509v3 Authority Key Identifier:
keyid:D1:C4:91:30:94:A2:12:68:C7:3A:67:65:3A:37:38:D7:3E:5C:59:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cSRMJSiEmjHOmdlOjc41z5cWac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bd4e5c-4147-4131-8750-33a82ab5f513/1/0cSRMJSiEmjHOmdlOjc41z5cWac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:28:5d:7d:fc:19:4b:3e:0b:6c:ed:d2:ff:4e:f3:1b:8c:cf:
83:e8:47:a6:67:05:23:82:da:9c:6e:9e:b7:2d:df:d1:a8:36:
39:6b:72:42:52:be:d6:16:8f:55:66:c7:f0:ec:81:31:88:3e:
2e:47:df:6f:f1:ed:14:ad:ed:8c:c5:49:04:4f:eb:0d:70:e3:
72:58:08:5f:09:c8:47:54:c4:21:15:6a:4b:50:66:a7:94:ea:
93:0c:f4:e1:4b:bf:a7:d0:ef:a0:6e:b4:05:85:a9:c6:75:66:
9a:72:6a:48:17:be:00:44:01:31:f7:98:d5:1e:e8:87:50:63:
42:82:ec:10:9d:14:25:1d:07:41:f9:f5:06:57:9d:26:8a:89:
8b:13:76:e3:93:3c:e8:f4:fa:14:86:47:78:4c:47:70:aa:6b:
a1:f5:f0:fa:04:ca:1e:39:65:8b:2f:e6:1a:3c:0f:e1:2c:b6:
92:94:12:b5:45:4a:1e:e7:c0:ec:d7:20:41:31:d7:1a:1d:18:
97:d3:ff:2b:08:42:1c:73:83:56:42:8b:e0:4e:9b:a2:98:1b:
bc:bf:f1:69:5f:e2:20:15:ef:25:3c:43:38:aa:fc:5f:b9:74:
05:9a:4b:2c:f9:dc:18:ec:53:bc:f0:ac:5c:2c:9d:a0:53:5f:
cc:f5:df:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:30 2025 by rpki-client