Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
File: _EcO7LHxvgUlJRQvYKC1naXxgVY.mft (raw, json)
Hash identifier: F/A4LrqUXx7Ge5JLRMw2+PNKcrLvlhDLILVhxveOTPI=
Subject key identifier: B1:D1:57:4D:A7:98:5B:2E:DC:D0:D3:01:EC:13:53:0E:18:41:E3:6B
Authority key identifier: FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
Certificate issuer: /CN=fc470eecb1f1be052525142f60a0b59da5f18156
Certificate serial: 0197B6A0FDED5C6DDCB28C9D35BFBD04B5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
Manifest number: 0BDF
Signing time: Sat 28 Jun 2025 13:01:33 +0000
Manifest this update: Sat 28 Jun 2025 13:01:33 +0000
Manifest next update: Sun 29 Jun 2025 13:01:33 +0000
Files and hashes: 1: _EcO7LHxvgUlJRQvYKC1naXxgVY.crl (hash: eUUWAVwVBl6hwkLOxmq7i5vu5VJaTzgFhYoorvzwQG0=)
2: aCl-dDRoPO0jTR0Ib_QeJDjdmS4.roa (hash: HeEdwIKN+ZitbMNTMVlHyhG8Cl/ej6Fq6W5v+LAsobU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:fd:ed:5c:6d:dc:b2:8c:9d:35:bf:bd:04:b5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc470eecb1f1be052525142f60a0b59da5f18156
Validity
Not Before: Jun 28 13:01:33 2025 GMT
Not After : Jun 29 13:01:33 2025 GMT
Subject: CN=b1d1574da7985b2edcd0d301ec13530e1841e36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:4e:7a:67:81:07:61:8e:b4:ea:5c:e5:c7:
5b:b7:3e:f5:47:94:ad:04:41:03:c6:32:cb:c0:93:
65:63:ca:40:94:dd:cb:0c:55:00:99:9f:9d:0e:86:
55:53:ab:80:26:ab:25:5d:de:e3:4e:fe:4c:26:df:
7e:a4:9d:2f:04:87:6a:01:d8:9c:6a:81:c2:dc:26:
7e:32:de:2f:ea:44:a0:a6:36:e8:d0:d3:3b:ea:cb:
29:a7:a4:4d:62:6d:8f:80:ac:9a:dc:df:4e:85:04:
45:a7:89:e1:95:6a:8d:ad:74:31:1c:4e:8f:55:9a:
29:4a:9d:01:d2:09:98:0e:1b:4f:ee:03:b2:2e:e4:
4d:1e:78:bd:06:bd:1c:29:9b:ac:58:6a:4e:9b:bc:
a3:38:d3:56:97:49:d1:5b:4b:40:98:17:e8:7b:24:
e4:af:92:cb:95:75:27:8d:2c:52:f1:cd:5c:f2:07:
68:44:d7:18:fb:66:a2:e4:0f:f2:e3:82:dd:74:46:
e7:c8:ad:95:53:dd:5d:a3:ee:38:26:38:69:9a:e7:
05:d9:c1:98:a1:2f:1b:54:e6:76:e2:b3:7e:38:25:
a3:a5:ea:21:70:8f:8d:c4:20:1f:81:88:34:98:99:
f8:cc:c2:79:8d:45:fb:12:73:88:b7:ef:58:b4:49:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D1:57:4D:A7:98:5B:2E:DC:D0:D3:01:EC:13:53:0E:18:41:E3:6B
X509v3 Authority Key Identifier:
keyid:FC:47:0E:EC:B1:F1:BE:05:25:25:14:2F:60:A0:B5:9D:A5:F1:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EcO7LHxvgUlJRQvYKC1naXxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/6f82d4-2ec3-44a5-8db5-ca7d04e2916c/1/_EcO7LHxvgUlJRQvYKC1naXxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0e:c8:3b:5c:1e:09:9e:c6:2e:d0:c3:48:14:c0:31:12:93:
d3:c6:6a:e9:6e:c7:be:81:21:12:22:55:61:f5:42:bc:a0:5d:
02:d8:4e:e0:4f:2c:cf:fb:56:6c:2f:68:87:1f:c0:7a:b8:49:
50:b2:65:b2:9e:65:39:5f:1f:84:8d:00:19:cd:1e:66:2d:7c:
10:48:d3:59:ed:5d:a2:3b:dd:54:66:c3:0c:42:98:92:12:05:
8e:43:80:47:0d:30:45:ea:72:3e:dd:0b:d3:a3:06:41:0f:c6:
7b:93:27:ab:81:84:c7:77:f7:ef:b4:d1:85:e5:41:67:a1:b7:
9b:d6:4e:50:ae:ab:4a:16:08:e0:76:f5:44:31:10:e4:25:e9:
c9:2b:9b:ff:0e:c7:be:49:ec:ea:52:bc:7e:24:25:94:11:d8:
9c:9d:af:71:a6:bb:b2:ee:ab:b1:d8:19:3a:39:76:be:a7:db:
83:5c:f7:0d:6a:62:8b:d8:3a:04:cb:e8:da:a6:32:19:99:6c:
86:3d:4a:98:4a:30:a8:3d:b8:6f:09:7d:98:bd:98:10:6f:6a:
e2:b1:6a:34:05:3d:48:4b:20:ae:ba:dc:cc:0a:89:e4:06:14:
6b:f9:8d:92:d3:db:43:fd:e7:38:78:5d:cf:3a:07:74:23:31:
06:51:76:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:13 2025 by rpki-client