Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
File: 0seIZkHuEBvHspX9hvGSP8KD89A.mft (raw, json)
Hash identifier: OjgSIOSGJu8CHggd0HaL5VYe0IiToxESskLv+D9plw4=
Subject key identifier: 50:D6:6F:E0:CC:52:A1:ED:7C:A1:CC:15:0D:DF:F4:18:5E:C5:F9:C9
Authority key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
Certificate issuer: /CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Certificate serial: 0197B70F55C72DF5EA9DEBCDB0FB49A598BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
Manifest number: 08F8
Signing time: Sat 28 Jun 2025 15:02:04 +0000
Manifest this update: Sat 28 Jun 2025 15:02:04 +0000
Manifest next update: Sun 29 Jun 2025 15:02:04 +0000
Files and hashes: 1: 0seIZkHuEBvHspX9hvGSP8KD89A.crl (hash: hKmAsmq+OfMcD5QV23ukvZQXEqq/bo7WEl+9fJQjhko=)
2: jQGsEYW9nQYMqDgRdjHs5yh307o.roa (hash: ZPgtlYS7YpDV/s/35ryF75mYWk1md56zE0UQWzxn7Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:55:c7:2d:f5:ea:9d:eb:cd:b0:fb:49:a5:98:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Validity
Not Before: Jun 28 15:02:04 2025 GMT
Not After : Jun 29 15:02:04 2025 GMT
Subject: CN=50d66fe0cc52a1ed7ca1cc150ddff4185ec5f9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:fd:17:fc:81:2e:5d:06:41:d7:d7:fa:8d:
66:31:fd:03:0b:ea:db:60:39:61:cc:fa:5a:85:5b:
40:3e:3a:da:a6:72:bf:e5:f7:3d:ae:c7:15:3e:2c:
0c:29:c3:8f:c3:b3:5f:6d:4d:9e:7c:f7:f3:59:50:
ac:29:23:26:28:c5:a9:a2:1d:92:69:87:b3:40:50:
5b:c1:31:af:68:48:79:ea:8b:d9:e5:67:7c:5b:b0:
4d:02:49:67:0d:b5:12:a4:e4:5b:be:69:23:53:ea:
ef:0a:71:c0:93:72:e9:af:5d:12:8e:9c:48:13:5f:
a7:c2:6d:de:78:a8:8d:6a:30:e7:69:13:6f:68:89:
d3:4e:04:ed:63:cd:04:df:31:9e:b8:1f:cd:21:af:
40:0a:49:25:07:62:c2:55:6f:1b:1c:59:06:f0:a7:
da:7a:29:96:8c:f7:03:3b:a6:3c:0f:f3:fc:8f:40:
f5:ea:eb:e4:d4:f0:3c:a2:db:6e:3d:87:88:74:24:
38:51:3b:ef:e4:6f:fa:e8:55:30:a9:39:91:6d:21:
ec:52:77:ea:d1:f2:bf:33:cf:c5:7f:ba:62:06:53:
30:dc:f6:b8:bc:d6:b6:b4:a7:6d:59:e0:5b:f9:e8:
f0:ac:cb:32:eb:1c:e0:74:f7:7c:13:6f:ed:15:1d:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D6:6F:E0:CC:52:A1:ED:7C:A1:CC:15:0D:DF:F4:18:5E:C5:F9:C9
X509v3 Authority Key Identifier:
keyid:D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:54:15:13:cb:bb:c6:08:0e:f7:c0:31:34:7d:4b:c3:65:79:
5f:04:ba:4c:b4:db:c9:c9:3d:5e:b3:4f:86:87:56:c8:a5:fc:
c0:9b:35:e8:e9:57:21:57:cb:d7:d6:ae:51:c6:d7:15:fa:c2:
11:cb:b1:15:f9:91:99:76:87:16:67:ba:87:dd:f5:05:17:da:
8f:32:96:45:1a:1f:23:cb:a4:e4:5f:12:8b:81:b0:a5:c7:6b:
8b:9e:48:66:39:40:02:7e:b2:bb:dc:98:60:8e:10:41:92:36:
9a:96:bb:9d:3b:4a:3f:b6:84:e8:7c:c6:a9:df:23:23:b7:bd:
97:45:02:a1:dd:87:c7:59:55:fc:d9:e5:b1:37:3b:20:19:10:
3a:29:96:69:71:4d:e4:3a:87:7f:06:ae:fb:42:ae:06:37:36:
81:ab:ad:f7:89:f1:81:b6:a3:84:2e:ed:85:8d:c6:2b:d7:8f:
63:6e:e0:fb:18:83:1e:87:cb:ed:ad:eb:45:25:6b:26:b1:b2:
f1:31:e3:56:12:29:2c:66:49:44:9f:6c:ea:95:d3:0f:03:3b:
7d:d0:0e:4d:05:36:c8:6a:ac:69:30:a6:02:b5:bb:b3:b1:a4:
bb:4d:f3:3c:41:75:63:9d:48:b8:2a:55:25:2b:06:e0:4e:c2:
26:3e:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:31 2025 by rpki-client