Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json)
Hash identifier: dZZf8kdGUgNrAyvX1AKl4/lG6NS3PgdMD6lNdhNaBVo=
Subject key identifier: 58:57:3B:A7:A7:AA:64:2B:A7:BB:A0:08:62:31:BD:A7:92:7E:5C:56
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial: 0197B6A219E00141DF1781CEA3926DE62C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
Manifest number: 109F
Signing time: Sat 28 Jun 2025 13:02:46 +0000
Manifest this update: Sat 28 Jun 2025 13:02:46 +0000
Manifest next update: Sun 29 Jun 2025 13:02:46 +0000
Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: Yo6byWNJF4cewV412BWehTUqRDNqOM2oZMyTGprr1rM=)
2: oYfn-XKrvi8qPxxQpXw6G0ZQv_I.roa (hash: XlHaPnUqiYpT0LQiKW0OJf8RSsswldbENWW7FfjNUtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:19:e0:01:41:df:17:81:ce:a3:92:6d:e6:2c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Validity
Not Before: Jun 28 13:02:46 2025 GMT
Not After : Jun 29 13:02:46 2025 GMT
Subject: CN=58573ba7a7aa642ba7bba0086231bda7927e5c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:04:e2:a6:32:7b:94:4c:9f:40:fb:a1:44:a8:
f3:81:65:93:8a:c2:11:ff:59:c5:a6:92:a4:c9:45:
80:c8:a1:4a:ac:2a:ad:b7:c0:ac:33:20:bc:af:b8:
98:b1:f6:20:49:d6:4e:fa:09:bf:d6:ad:72:91:c3:
0d:79:1f:d0:c7:d5:31:d0:08:2d:4b:25:a0:dd:0c:
8a:ff:f8:d0:6b:3e:12:36:73:94:cd:cc:5a:44:05:
4e:94:7b:ec:df:a3:a7:e5:45:50:3c:4b:bd:55:36:
13:cc:cc:3e:2c:91:54:7e:f2:bd:f3:12:06:9a:36:
a0:e2:2b:64:cb:34:22:6c:49:30:3a:86:88:94:0c:
c8:2c:8d:c2:66:92:13:3b:dc:65:9c:f1:8a:6d:9f:
78:cc:40:0b:d2:d0:66:44:08:95:60:cb:23:48:dd:
90:42:69:8a:37:38:54:75:18:14:dd:26:58:19:1a:
5e:be:f9:e6:99:62:d9:3b:7e:6c:3f:7b:e0:5c:09:
7f:4a:1b:e5:3c:e9:f1:fa:0a:13:43:4a:25:1b:69:
d6:0d:c8:10:3f:a2:f9:4a:b6:f1:44:d4:f9:73:f5:
61:20:0d:f6:e4:76:e4:56:b7:03:89:34:5b:f0:62:
ea:74:6d:c6:ce:45:83:69:c3:fd:32:c5:3c:f0:b8:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:57:3B:A7:A7:AA:64:2B:A7:BB:A0:08:62:31:BD:A7:92:7E:5C:56
X509v3 Authority Key Identifier:
keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:27:26:0c:51:80:18:0e:54:f4:28:c8:73:b8:c5:97:20:4f:
a2:e6:29:68:eb:d7:ea:b3:76:49:60:b1:88:7e:e9:c7:6b:d6:
69:13:ce:e3:cc:c1:a3:24:25:59:8e:3f:9c:2a:c1:62:3f:07:
bd:ca:c8:49:92:52:41:7a:c7:f6:47:48:e3:51:7a:91:bf:19:
7d:47:18:67:ef:c6:61:60:bf:54:88:ad:5f:88:ae:9a:fb:44:
1a:be:e4:96:1b:04:49:05:29:8b:d4:2e:1a:a7:cc:2b:7e:58:
39:dd:6f:88:fa:cc:9a:74:a1:5e:f8:d7:7a:69:d9:4d:0d:c9:
5a:f3:8e:e8:2c:ae:48:ba:29:68:39:fc:65:54:7b:22:5b:fe:
66:a9:14:3b:a3:e0:a0:2a:86:c4:0b:6c:59:ed:30:a9:8b:f1:
b4:cb:40:5b:38:58:14:63:be:fa:5b:37:ca:f1:84:a2:94:5a:
15:29:ef:46:36:02:82:1b:8b:04:a3:bb:ea:7f:5b:00:ef:56:
a5:86:03:93:5d:eb:65:6f:bd:f7:7a:af:a5:a1:f3:1d:2f:2d:
3e:70:31:77:08:73:51:e4:36:58:b0:45:28:8d:71:7d:8d:08:
42:c2:a1:02:46:d8:aa:db:1b:00:6e:0e:2e:c1:9e:be:cd:c1:
3e:e9:7d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:16 2025 by rpki-client