Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
File: 0Dxztg8hA-47Kiw8vpIOISqS7mU.mft (raw, json)
Hash identifier: RyRc7izKK1Bcl03/TuHDMeh1pJr45XFwUZVROjjXew0=
Subject key identifier: 19:F6:12:7B:64:C0:58:0E:63:4B:00:B4:30:8A:FC:EC:04:DA:3B:E7
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial: 0197B8904F7925D33F1AB9DB69FFD4F7DFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
Manifest number: 0520
Signing time: Sat 28 Jun 2025 22:02:34 +0000
Manifest this update: Sat 28 Jun 2025 22:02:34 +0000
Manifest next update: Sun 29 Jun 2025 22:02:34 +0000
Files and hashes: 1: 0Dxztg8hA-47Kiw8vpIOISqS7mU.crl (hash: dbWh91bFx7zV4kYi/x9TmrgYxaB9FjMNdpcYS1i/wRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:4f:79:25:d3:3f:1a:b9:db:69:ff:d4:f7:df:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Validity
Not Before: Jun 28 22:02:34 2025 GMT
Not After : Jun 29 22:02:34 2025 GMT
Subject: CN=19f6127b64c0580e634b00b4308afcec04da3be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:23:66:9e:b7:f6:77:e7:90:d6:06:48:7e:be:
de:0f:6d:e2:94:3a:39:a6:aa:f0:ac:a2:82:32:b3:
e9:cf:59:19:cd:ab:d5:70:e9:5b:32:38:d4:56:92:
a7:1a:69:32:65:69:5b:16:74:d8:5b:d3:b6:d0:55:
d0:73:b8:2c:91:0b:ff:5e:22:ad:c6:dc:0a:69:84:
46:f2:f0:e6:90:71:b5:1d:50:77:81:7a:ca:84:2b:
24:15:9d:01:63:83:04:9d:a1:6f:e6:25:72:ad:8b:
2f:01:ac:35:09:ce:60:bb:76:f5:e5:84:61:03:22:
68:04:57:41:a0:f1:68:d4:cc:57:64:55:7b:e2:00:
4b:fa:0b:73:a9:1d:b9:86:bc:6e:ef:23:ed:86:d2:
cc:1c:ad:7d:f5:97:4b:b0:99:9b:96:3d:8e:b5:bb:
02:9a:8d:4e:eb:fe:de:5d:09:79:ca:58:0e:dc:df:
cf:ff:45:13:33:8e:18:5a:05:0e:5e:b4:2b:d6:ba:
2f:ac:11:0c:c2:1d:f6:db:ed:4c:60:f5:ff:d0:08:
bb:1f:e2:82:94:a2:98:6d:50:56:c4:df:d1:e0:9e:
6f:0e:ac:41:1f:a0:24:63:67:93:ab:bf:8c:69:a8:
8b:e8:79:6f:bf:b0:f6:b8:66:4e:8d:12:a2:39:1a:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F6:12:7B:64:C0:58:0E:63:4B:00:B4:30:8A:FC:EC:04:DA:3B:E7
X509v3 Authority Key Identifier:
keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9e:71:88:b0:35:61:9e:c7:ff:4a:60:a3:9d:2e:19:90:66:
d5:6e:b8:03:3c:04:e1:0d:22:bf:e3:6e:22:02:b6:96:da:a8:
f7:46:9c:76:79:14:a7:55:de:1b:61:71:58:93:3b:63:c6:ef:
dd:9e:aa:fa:4a:52:3b:e9:d5:b6:aa:ed:19:c5:35:20:b4:3a:
89:8f:cb:f2:9b:3f:7d:77:d6:97:cc:98:b7:be:17:70:72:0f:
15:56:04:99:22:17:4c:a3:f2:b2:aa:af:69:12:31:8c:90:4b:
66:e5:86:f4:51:3e:93:3c:45:c0:fe:01:8a:89:4a:95:fc:2f:
dd:73:5a:76:ba:ca:4b:ea:60:71:8e:e5:1a:1d:ca:77:32:a3:
6b:a3:bb:86:d8:0a:3f:ef:b8:b6:a1:a3:ce:05:f5:05:34:d8:
21:ad:b6:78:44:e2:bd:2f:82:70:7c:1e:80:70:8f:e0:4f:aa:
2d:e0:5a:e9:1f:e2:1d:51:b1:9c:59:fa:99:0b:48:27:14:0b:
d9:20:27:89:64:0c:5a:67:41:0c:37:2a:08:17:67:05:2a:61:
c5:7f:ee:b2:de:72:80:11:03:71:f1:a5:45:46:f5:f8:f2:7d:
71:52:54:3d:05:67:61:0a:20:cc:60:09:dc:72:c3:65:a9:c9:
ed:15:0e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:10:45 2025 by rpki-client