
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
File: 0vHIhC58-JGyNNOh4OLg73PoQqo.mft (raw, json)
Hash identifier: aKcVozg4xXauUhRP76jyKSv+rA4K4FNYtX2Dh+taC20=
Subject key identifier: 5C:D8:2E:7C:BC:63:3E:71:1D:BC:69:CE:03:95:CE:60:37:C8:5E:F7
Authority key identifier: D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
Certificate issuer: /CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Certificate serial: 0197B88F8464E736AA2CA3BC3D959AFA3A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:01:42 +0000
Manifest this update: Sat 28 Jun 2025 22:01:42 +0000
Manifest next update: Sun 29 Jun 2025 22:01:42 +0000
Files and hashes: 1: 0vHIhC58-JGyNNOh4OLg73PoQqo.crl (hash: 6PKMNkouLknGKMeHGyy/ZxdNeAXxrA417FiNRf0OxDM=)
2: l7vPco-uERFJMqFRkAMdbQ7Lr5E.roa (hash: TO5lGNkolgRHajeHI2wA6DsrdU/+GUsTcjWvGuJo2do=)
3: mizpW-CedPrysq20puaRplVzBas.roa (hash: ZhIE+FWiXGSht5bpIKov+Ga9kyrb4wRzjNebEuN3tlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:84:64:e7:36:aa:2c:a3:bc:3d:95:9a:fa:3a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2f1c8842e7cf891b234d3a1e0e2e0ef73e842aa
Validity
Not Before: Jun 28 22:01:42 2025 GMT
Not After : Jun 29 22:01:42 2025 GMT
Subject: CN=5cd82e7cbc633e711dbc69ce0395ce6037c85ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:02:ac:f8:87:10:2e:7f:e0:3e:c0:3e:53:
e6:6e:ff:2c:92:c1:f4:84:9b:46:f5:ff:88:77:5b:
a6:19:04:45:04:23:bc:0a:52:5c:15:7a:ca:ab:d9:
86:95:1e:e4:bc:be:7f:65:6d:6b:b0:f0:1e:2d:84:
97:1f:a1:34:20:b2:f8:50:b8:f4:4a:d3:66:54:10:
4b:d9:0d:9c:04:38:a3:26:38:d3:dd:e8:0a:00:5d:
c8:d3:5e:e7:21:45:f7:68:a7:25:e1:8b:85:6e:c6:
35:3e:7e:4f:5f:40:07:07:77:68:08:98:62:03:05:
87:6b:2d:57:8d:e1:19:7a:cd:a5:dc:63:0a:ee:a2:
e4:14:00:cf:3c:f7:87:ba:87:bb:85:c7:90:e3:d9:
38:86:1c:3f:5d:1e:79:58:c1:f6:4d:2d:d7:35:99:
bd:ef:d6:03:ba:b6:ff:28:44:04:fa:04:c2:14:b1:
8f:ac:14:eb:47:1a:35:df:13:aa:9c:b8:1c:39:a2:
54:4a:82:3b:57:34:ba:6e:77:44:17:81:1c:37:77:
ba:4d:6a:fb:aa:9e:74:d9:0b:ee:6f:53:c2:86:75:
52:68:e0:9b:51:8f:ad:96:60:74:5d:26:e5:ca:d9:
ed:59:fe:31:0b:9b:3d:6e:a8:bd:5e:4e:f0:ba:9b:
85:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D8:2E:7C:BC:63:3E:71:1D:BC:69:CE:03:95:CE:60:37:C8:5E:F7
X509v3 Authority Key Identifier:
keyid:D2:F1:C8:84:2E:7C:F8:91:B2:34:D3:A1:E0:E2:E0:EF:73:E8:42:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vHIhC58-JGyNNOh4OLg73PoQqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c99ae7-b671-40b9-bb1e-a19444f7a337/1/0vHIhC58-JGyNNOh4OLg73PoQqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bb:58:44:4a:1c:6c:fb:57:4f:63:f7:fc:c5:87:9e:25:a0:
07:92:1b:2b:33:31:36:03:57:e1:d5:b5:cf:53:15:67:27:b5:
5a:79:c9:bc:b9:a7:ab:ee:24:b5:63:4d:2d:1d:db:b6:8e:fc:
03:41:a5:e4:b5:39:ee:bc:fb:c8:52:fb:ce:e8:1a:73:71:f5:
49:ac:0e:ba:89:36:0b:dc:dc:9b:d2:e2:7a:53:4d:fd:0c:9b:
6b:96:45:03:b2:ab:7d:9b:0e:21:a1:8a:98:31:15:b5:d5:e3:
b3:17:18:12:f1:93:9b:6f:47:ae:b4:72:29:98:aa:ba:fb:3d:
a1:53:15:34:1a:ef:47:f4:2d:b9:7a:77:0a:71:72:02:4f:8b:
61:3c:23:d9:d8:0e:ce:b0:3e:65:9c:e2:10:82:8f:ab:19:ac:
a6:c4:fa:ef:61:43:fe:5e:7a:8a:2f:8d:70:c7:ce:c8:39:5d:
c4:2d:8a:49:f3:05:cb:2f:c6:86:2b:57:00:09:a2:74:f5:e6:
6a:2d:e5:b9:de:ec:00:1f:de:c9:db:2d:09:02:8a:cf:be:72:
34:59:06:82:a4:47:96:b3:ae:97:5a:58:17:eb:af:95:0f:b2:
a6:29:3f:d6:dc:02:16:e2:ae:f0:09:c5:bd:67:9f:26:94:27:
34:6e:2a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:15:14 2025 by rpki-client