Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: K0GkwAi8DS+iRL97OcKIBQOfsGI3z6244ab5SH1Lkbo=
Subject key identifier: EB:14:C0:97:3E:C3:F2:19:F4:75:F5:D8:3F:C1:2F:13:F3:9A:16:D7
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 0197C0486AEDC63BDE374524E1EBE553C19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 15BC
Signing time: Mon 30 Jun 2025 10:01:00 +0000
Manifest this update: Mon 30 Jun 2025 10:01:00 +0000
Manifest next update: Tue 01 Jul 2025 10:01:00 +0000
Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: zrL4n6smKRC+7TEPFg7TJmqXDS27RYL6QqDD/BE8/l0=)
2: dl3PAMO_cjTEN-X9xexRuh-Chb4.roa (hash: EybA63Tgz5VJ0tdqhdyDgjCCTh9UVwGU3vK+Wpg2GJ4=)
3: lJ4tZxRFs8zm0c7vVrYQoA3wLAU.roa (hash: UW3HI87+Tvs0vPfpNH93w8VClrUvFKCrCGbfw0Tz9ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:6a:ed:c6:3b:de:37:45:24:e1:eb:e5:53:c1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Jun 30 10:01:00 2025 GMT
Not After : Jul 1 10:01:00 2025 GMT
Subject: CN=eb14c0973ec3f219f475f5d83fc12f13f39a16d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:db:cf:ef:09:d1:e9:33:76:74:51:7e:0d:c6:
18:5f:de:27:d1:9b:38:3b:a4:96:65:c8:25:9c:9c:
23:c2:f8:f8:58:aa:25:61:ba:a2:62:9f:ed:e8:17:
5c:e4:a4:fe:35:f3:cc:e4:ff:06:0a:72:b1:9a:fc:
33:d4:54:dc:d5:de:1f:e3:8a:43:06:63:f7:78:61:
1c:85:72:fc:ad:6b:d1:f6:0e:1e:a2:cb:df:45:34:
4b:37:11:8e:8b:8e:c8:6f:98:2b:10:92:0c:ed:74:
fc:e3:53:cc:1e:7e:4a:78:b3:94:ba:bb:3c:4a:8f:
d8:cb:e7:8c:64:fd:1a:7b:4a:1f:31:fa:20:f7:75:
48:6d:cb:b3:e5:0e:49:a9:c5:32:41:44:8c:f5:6f:
71:68:fd:a8:6d:98:49:ab:c7:cb:7c:65:66:bc:20:
9a:70:a5:b4:aa:8d:9f:69:5b:4a:27:1e:48:13:f0:
07:33:ad:a2:e1:48:bd:3c:47:4f:70:dd:5d:79:be:
6d:33:d9:46:e3:27:35:05:26:7a:14:fb:18:4c:e1:
1d:bd:b3:33:4d:53:4c:d4:ba:1b:b5:8b:06:cf:db:
ce:4b:c0:ee:97:61:79:6f:84:01:9b:4e:b4:82:b4:
c5:d7:8b:8c:79:3c:ae:e4:54:45:01:0e:40:47:a0:
21:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:14:C0:97:3E:C3:F2:19:F4:75:F5:D8:3F:C1:2F:13:F3:9A:16:D7
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fd:d3:8a:3c:b0:5c:d5:38:3c:f3:67:30:07:e0:5f:9f:fe:
27:90:dd:aa:06:b5:67:38:a3:97:f8:d2:37:ab:71:a4:3b:5e:
f2:d5:5b:ca:b4:c9:f3:33:e2:b4:02:8e:29:f4:dd:e2:4d:c9:
94:1c:d5:7e:c0:05:48:6b:2e:ea:c7:be:1d:70:a4:0c:83:56:
d5:eb:ef:d1:35:b9:2c:39:2e:4c:10:1e:30:ff:6e:b9:81:57:
25:ce:de:ec:51:15:4d:d9:d7:9a:cb:4d:80:08:63:40:bc:fc:
66:15:d5:18:1b:81:e3:80:78:84:4a:74:3a:c6:d3:fa:7f:7f:
67:48:40:cf:88:be:62:cb:d8:0d:18:fe:61:64:2a:ba:84:a1:
f8:4a:f0:02:71:a2:6e:7f:f4:b9:7f:33:be:2a:a2:a4:e0:6a:
1d:05:18:58:e0:49:63:27:fc:a1:9b:86:61:11:1c:51:4d:f6:
c0:e8:ba:c6:ec:f9:df:67:e4:98:65:58:fb:31:01:cd:75:04:
ce:57:18:27:c4:3a:57:64:29:17:02:21:31:a3:06:57:99:d6:
43:07:ed:61:d2:4d:7e:61:23:b8:b3:fe:25:9a:ee:b3:94:ec:
6b:fe:0a:c1:dc:93:8e:a5:7c:63:71:fd:6c:a1:ff:37:20:fa:
28:55:94:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:14:44 2025 by rpki-client