Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: +0BI3GtKa3ek6wCBDu7NmT9gQ7pmchU5Zi6lUmVvEF8=
Subject key identifier: 01:EC:C5:28:8F:31:E3:F3:E9:52:B0:2A:F1:EC:E8:97:C5:B4:62:BD
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 0197B77CA8C51559BF31044349A820119EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 1277
Signing time: Sat 28 Jun 2025 17:01:29 +0000
Manifest this update: Sat 28 Jun 2025 17:01:29 +0000
Manifest next update: Sun 29 Jun 2025 17:01:29 +0000
Files and hashes: 1: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: gVw+oW8t08UhDtNumTDUe4n+v/XyR1XVTHIGpdQ6/Pw=)
2: Xi7lkR0c05Etap_dSBWpiwrEM4M.roa (hash: AVQnmWgZkK9yLrT3rnvMnMOzEJkOrW4pUBp2ldNlySk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a8:c5:15:59:bf:31:04:43:49:a8:20:11:9e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Jun 28 17:01:29 2025 GMT
Not After : Jun 29 17:01:29 2025 GMT
Subject: CN=01ecc5288f31e3f3e952b02af1ece897c5b462bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:23:9e:4e:69:62:32:73:51:d9:79:8d:de:
4d:c2:94:4d:f3:f6:1b:82:8c:f8:73:a7:6f:60:eb:
50:be:2d:33:18:8e:ba:90:4d:5b:d4:92:42:fd:e3:
5b:50:5e:52:aa:0f:73:be:4b:15:28:49:d9:21:53:
c1:e1:82:08:67:04:e8:de:e2:f2:16:cb:e6:f9:40:
01:9a:50:c3:dc:32:f8:68:4a:a9:ea:2f:7c:5d:eb:
b1:0b:20:3f:e2:ac:88:f8:94:4b:a7:4d:5d:e7:5a:
c2:69:41:17:16:84:49:b6:ac:21:01:0c:af:96:69:
7c:41:bb:ee:e2:53:79:2e:c9:3d:71:39:fc:f7:4a:
e7:a6:40:8f:46:12:b7:22:22:c4:0b:87:f5:a2:a0:
16:58:ca:30:24:97:a5:82:6e:64:3d:fa:3b:6f:fd:
7e:8b:f7:69:3e:3b:69:ff:77:7a:92:41:ed:d9:16:
d1:21:47:f0:63:01:a8:2a:48:36:05:ca:a0:64:c5:
dd:ad:00:19:48:06:16:11:2e:82:b7:71:83:24:56:
52:07:ec:ed:29:14:78:18:12:b0:c9:af:23:52:61:
48:39:cf:60:ec:d5:2d:49:8e:5f:dc:e4:fc:bb:57:
50:9b:da:f9:c4:6d:b6:0a:60:e9:d0:d1:f3:44:8e:
8d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EC:C5:28:8F:31:E3:F3:E9:52:B0:2A:F1:EC:E8:97:C5:B4:62:BD
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2e:7e:04:8a:ea:12:c0:bc:ae:09:ee:0e:b3:f1:2c:d1:ca:
49:06:3e:3e:a8:ec:f6:29:79:9d:a9:32:6b:40:58:a4:e7:70:
c4:eb:89:b0:b9:4b:f2:eb:13:bd:46:e8:ad:c5:96:54:0a:bb:
09:47:6e:57:99:95:03:33:6c:ea:f1:01:3e:98:b1:8a:b6:c7:
67:d8:ba:1b:04:6d:6a:32:94:16:8a:d8:0c:23:3c:a1:fc:9a:
63:ac:44:6d:99:50:cd:f2:2e:ab:d4:6c:56:38:ce:53:17:b6:
46:82:d1:6f:7e:15:b4:89:20:62:fa:78:27:ef:c1:99:40:37:
df:79:7c:bb:2f:b5:11:8c:3c:b8:55:61:ca:25:b3:26:98:40:
5b:d5:9f:16:fb:63:ca:c1:86:3e:80:23:6e:0e:67:1d:3e:71:
07:82:ec:4e:68:2d:d4:4c:66:9e:c7:cd:16:87:7c:27:fd:d2:
d0:cf:46:f7:55:48:10:3f:73:74:c9:fd:a9:ac:d9:a3:2d:9a:
f3:bc:c3:e5:93:4d:2b:62:47:1b:e4:ca:9e:5f:da:ad:3b:c6:
82:37:7c:49:a0:c6:1c:61:21:2e:08:60:46:d0:0d:01:e1:7f:
cc:24:a6:61:6a:26:28:4c:b9:ab:30:b0:38:64:36:1d:40:9c:
b0:9d:97:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:20 2025 by rpki-client