Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
File: 0AL76fCkE2A-3vtzOlMfLiwOnAY.mft (raw, json)
Hash identifier: 7K16TVf1kwj2ckS5D+9xc2X+iQ816c+E+paWvIo0n44=
Subject key identifier: 09:90:D4:CB:A9:A7:69:B8:8F:74:17:02:63:0B:A1:99:D2:14:80:69
Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Certificate serial: 0197B74567DD2AFB66F638A107E1B5332FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 16:01:08 +0000
Manifest this update: Sat 28 Jun 2025 16:01:08 +0000
Manifest next update: Sun 29 Jun 2025 16:01:08 +0000
Files and hashes: 1: 0AL76fCkE2A-3vtzOlMfLiwOnAY.crl (hash: LxxlgjlS6oSnJA0b6OGY9u2dthZD5auo5xxBCrmuIoA=)
2: _XUidn5LGX4qhZ_75ajbeYWe1Ao.roa (hash: b/pfq31DckGw+o1qBs5ugJl7vAflaGA+vdef1tZYmPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:67:dd:2a:fb:66:f6:38:a1:07:e1:b5:33:2f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Validity
Not Before: Jun 28 16:01:08 2025 GMT
Not After : Jun 29 16:01:08 2025 GMT
Subject: CN=0990d4cba9a769b88f741702630ba199d2148069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:46:db:ae:db:96:b2:6e:21:3e:0e:66:72:
2c:03:e7:b4:a0:e0:0c:14:c2:c7:d2:59:15:73:8d:
5e:f2:97:9e:1a:d0:a1:13:4e:51:d2:b3:dd:a8:35:
ad:08:e1:2a:ed:30:88:8b:61:56:97:8f:4a:92:d0:
64:17:03:c9:3c:c5:8f:7c:d9:4c:72:0b:93:f7:93:
d6:b5:d1:f6:0d:3e:56:6d:fd:a2:74:94:6d:05:65:
aa:e7:8f:06:81:2d:b2:1c:f7:18:16:b1:a9:b4:0c:
0e:8c:2f:27:16:3d:12:58:81:c4:4c:c1:56:eb:c6:
f0:29:b1:e4:ff:46:82:9b:84:25:8f:02:ba:b2:3a:
42:a0:1a:bf:c6:33:cb:39:3a:bd:6a:0a:f8:5d:d3:
2e:f3:cf:e1:78:e4:ac:d2:79:17:04:cb:35:a4:f1:
9e:f5:3d:45:c0:64:bf:bc:da:39:b9:0c:95:3b:02:
7f:18:e3:08:a1:33:9e:7e:7a:2c:36:94:f0:f1:21:
4c:70:33:2d:bf:ef:ee:cc:3e:80:39:d4:24:05:ef:
90:19:47:e8:f9:77:94:6c:f1:aa:1d:c9:6f:24:5b:
a1:82:e8:ed:b6:e2:93:cb:24:a6:71:7c:fd:22:e2:
91:d6:55:ea:63:66:40:06:0f:ea:e4:cf:e8:10:32:
bf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:90:D4:CB:A9:A7:69:B8:8F:74:17:02:63:0B:A1:99:D2:14:80:69
X509v3 Authority Key Identifier:
keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e3:59:54:63:d0:fc:89:a5:6f:78:d8:52:d5:a4:d9:bb:03:
96:b1:df:e8:1d:bd:f0:16:ce:48:d5:78:6a:f8:da:93:a6:ce:
9a:75:5a:53:03:9a:21:43:f8:25:32:32:f9:3f:e7:1a:7c:ef:
b0:ef:08:70:2c:17:3f:64:7b:66:de:d7:c1:34:87:04:e9:99:
62:4d:c5:51:c7:92:d8:a1:d2:36:a7:43:6f:1e:e3:9c:3c:0f:
c8:df:d7:d8:98:47:20:a1:b0:61:f1:f6:dd:fb:35:cc:93:2d:
89:1f:61:c4:89:a8:bb:c1:28:bd:aa:c9:10:74:70:3e:64:a7:
7d:4c:47:b4:93:53:07:df:ca:12:7f:35:7c:a0:5b:47:60:f5:
01:de:ad:c8:45:dc:6d:e9:dd:a0:54:d6:a3:02:2e:64:d6:6e:
d1:26:6c:37:a7:be:6f:cf:eb:80:91:a0:5e:44:d0:e1:c7:9b:
68:b5:5c:75:ab:6b:37:ad:63:38:17:09:9e:d3:af:ee:10:b0:
57:da:49:0f:4a:03:3c:48:fe:4b:55:52:b6:e6:74:72:84:3f:
f4:4b:76:01:cb:68:a2:7f:1b:bb:45:96:10:d1:b8:8e:0c:21:
30:fe:2c:fb:bf:56:ac:47:34:82:57:ed:98:65:5f:4b:fd:9c:
10:95:fd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:46 2025 by rpki-client