Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File: 0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier: dIGkrerXQF1EHLDKYVcd5lYpFeDsZF9J+tMte9wE2co=
Subject key identifier: C7:4B:D8:FA:18:49:A6:49:A0:D2:DD:EE:80:05:93:3B:0A:37:71:E5
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer: /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial: 0197B70EEF61C985D778032C52C0CD218D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number: 14E5
Signing time: Sat 28 Jun 2025 15:01:38 +0000
Manifest this update: Sat 28 Jun 2025 15:01:38 +0000
Manifest next update: Sun 29 Jun 2025 15:01:38 +0000
Files and hashes: 1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: zC0l5bHWKDHBKO7ltHXdckxlBaRdrem7lfaKoVcj0i0=)
2: TfrRwUaFRxR1FQrq_o-pK2cFrHM.roa (hash: II597D7xa6PgwHa7AFUqvd8eYmaRnt2cxxVqhwKEKzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ef:61:c9:85:d7:78:03:2c:52:c0:cd:21:8d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
Validity
Not Before: Jun 28 15:01:38 2025 GMT
Not After : Jun 29 15:01:38 2025 GMT
Subject: CN=c74bd8fa1849a649a0d2ddee8005933b0a3771e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:39:a8:c5:df:28:c8:d9:9b:2c:37:17:3e:
22:0c:08:0a:5a:e9:a8:38:f7:98:6c:01:9c:d1:e5:
d9:58:7a:6a:26:d4:53:37:9b:e0:a0:51:a7:c8:b2:
68:b6:3c:6d:29:7a:f1:2b:70:bc:d5:d2:c9:76:fe:
42:40:c9:0d:3a:98:86:6f:ce:fc:38:a5:3d:68:bd:
20:4b:0b:9d:8e:b2:85:02:52:ec:fc:11:d5:31:a5:
0c:ce:44:78:1d:4f:a7:02:c1:02:04:fe:85:c6:74:
78:c2:d0:79:4b:8e:40:7b:a3:3f:63:4c:2c:27:46:
e9:50:08:4f:82:ba:cc:26:b3:dc:32:65:a2:c6:fe:
5f:1e:44:d9:15:e8:39:5f:f7:86:cf:d3:b3:c4:1d:
da:0d:4b:74:4f:b9:97:f5:28:9d:16:85:2b:7f:1d:
85:e6:64:6e:eb:f1:1d:48:8c:26:cb:4b:18:09:b8:
02:fa:7d:27:89:fb:cc:63:88:1b:40:a4:30:f9:62:
98:bc:3b:e1:f4:4e:48:77:cb:75:ff:1f:23:24:7b:
a8:61:f2:6e:d8:09:6b:cd:be:52:cd:52:02:98:7c:
97:50:cf:4f:ca:ff:14:c5:59:72:16:77:d0:65:40:
bd:13:7b:66:59:17:66:68:43:ad:28:dd:2d:98:5b:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4B:D8:FA:18:49:A6:49:A0:D2:DD:EE:80:05:93:3B:0A:37:71:E5
X509v3 Authority Key Identifier:
keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fb:10:e7:de:48:1e:d6:1e:33:e3:0b:77:9c:79:12:7c:ff:
7b:b7:27:64:c8:e3:b2:41:c2:57:4e:ac:4d:14:6a:98:c3:fc:
09:56:b7:cd:98:b9:c5:c1:49:23:62:94:d2:b3:7f:9d:09:19:
95:06:2b:41:2e:17:30:0d:23:e5:fd:12:58:8c:cb:53:cb:21:
cb:98:66:62:9e:e7:60:fd:10:90:0f:e9:0f:39:ac:50:f7:b9:
f0:4b:da:62:07:d2:0f:d1:c1:23:4a:15:02:29:3f:2e:c5:1f:
5c:71:dc:89:b9:b7:a3:d7:de:4b:10:7d:01:75:77:2a:b7:7f:
fa:26:92:a9:d5:5f:2f:72:5e:8e:af:2e:7c:60:1b:c5:f9:b9:
0b:df:8d:b0:b8:fd:4a:fa:e8:99:1d:6e:10:63:50:a7:b1:df:
95:b8:0e:06:ce:eb:81:47:97:6c:ae:40:45:b9:fa:c0:84:49:
19:5d:02:cd:ff:f8:eb:cb:6b:88:a8:23:ac:a7:b4:ff:08:76:
e3:f5:db:3e:dc:cc:02:98:87:ad:1f:d2:82:30:18:59:72:c0:
93:7a:cc:d3:15:90:61:af:dc:5f:e9:d3:27:cf:6b:84:82:40:
dd:b3:53:ee:8c:27:df:dc:80:3a:3d:d2:b5:9d:56:fe:10:93:
dd:1a:ef:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:35 2025 by rpki-client