Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
File: d6Hu06zg_C-KoADeaHpJvv0nkdg.mft (raw, json)
Hash identifier: YtEc+gyE87Fh+xCWyOH/U5okO8sZ6VajeGD37mVNZ2c=
Subject key identifier: 73:C2:35:10:19:FF:FA:B4:89:89:CD:4D:59:0B:7B:B6:63:3B:90:0D
Authority key identifier: 77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
Certificate issuer: /CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Certificate serial: 0197B745B7CB46F78F2A34EDDBFDB6DE57E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
Manifest number: 0EA4
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: 1tIKgu9zIxn-X__dh7X40Ez2yro.roa (hash: I7j76og90Bzenb6NN5y/FV3ZxjjrPcp5unqi/MuouAM=)
2: d6Hu06zg_C-KoADeaHpJvv0nkdg.crl (hash: R0KuntAy3Jsok/Vt25V+BnAGRseqTicdDr+ZxoI7IXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b7:cb:46:f7:8f:2a:34:ed:db:fd:b6:de:57:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77a1eed3ace0fc2f8aa000de687a49befd2791d8
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=73c2351019fffab48989cd4d590b7bb6633b900d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:21:e6:1a:c9:f7:ee:6e:9b:c8:2a:bc:4d:
bf:ff:ae:94:38:f1:00:27:da:c0:e9:89:ba:90:08:
5e:4c:2e:90:c4:5c:d9:f9:13:a5:35:4b:bb:ef:9d:
09:51:33:10:b7:c5:93:69:4b:d0:a1:8b:56:86:41:
a6:61:64:b9:da:b5:99:f1:ae:54:a3:fe:4c:43:4d:
f7:55:01:94:52:1a:24:c2:26:53:f6:92:36:03:9f:
3f:82:f0:98:00:60:c7:35:17:b5:df:b3:2e:50:92:
24:f1:8a:9a:43:ed:2b:03:ce:6f:e8:8b:68:0f:76:
f1:4f:d2:ec:5e:b4:85:8f:f5:d7:8d:ae:ac:67:f1:
03:df:b4:83:ed:8f:9f:5e:97:a1:66:44:27:8c:d5:
12:81:53:38:c8:04:07:f6:9b:05:86:85:1b:47:4f:
55:fd:e4:4a:bb:0a:ef:fb:19:1b:6f:c2:0c:ee:ec:
c1:47:3d:19:25:00:70:ce:09:ab:72:5a:48:1d:8b:
59:ca:af:cd:64:80:e5:0d:04:26:aa:b1:a9:5a:10:
5c:9b:df:b8:49:87:0b:44:49:c0:57:9c:31:18:2b:
4a:99:76:2b:5b:3e:e5:52:30:fc:f2:e1:82:2d:2e:
58:81:4b:67:c5:33:81:cc:49:4d:e4:29:1f:85:b0:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C2:35:10:19:FF:FA:B4:89:89:CD:4D:59:0B:7B:B6:63:3B:90:0D
X509v3 Authority Key Identifier:
keyid:77:A1:EE:D3:AC:E0:FC:2F:8A:A0:00:DE:68:7A:49:BE:FD:27:91:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6Hu06zg_C-KoADeaHpJvv0nkdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4f3e11-fd0f-4e71-9369-2204ee217280/1/d6Hu06zg_C-KoADeaHpJvv0nkdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:37:f4:0b:0b:84:7f:f9:29:a4:86:7e:de:48:dd:e8:a9:b9:
58:fc:12:b1:b1:0e:89:00:92:17:1e:ca:d2:97:6f:2e:6b:c3:
33:f8:4d:75:4e:8a:55:94:40:6e:4e:ad:80:f9:56:8f:25:e5:
4f:d9:16:b7:46:00:77:7b:6a:cf:ac:a3:cb:d3:87:2c:82:81:
04:9d:4e:a9:e5:62:23:e1:ce:f9:1e:5a:0d:ce:3f:92:2a:35:
9c:2e:8b:6a:49:01:e0:44:ee:a7:a9:03:1c:d3:05:71:e8:fb:
5b:31:02:b1:62:d9:b5:a4:1c:10:57:06:e0:c7:af:61:31:d1:
bb:bf:15:c3:bd:df:ab:4d:b5:d6:34:09:aa:8f:4e:49:da:63:
ea:6c:dd:05:db:b8:5f:9a:99:11:e9:62:5c:7f:55:2f:3e:3d:
08:28:c7:15:88:21:2b:43:21:d8:4d:86:ea:68:95:56:7e:41:
9e:59:07:7f:8f:e8:4b:42:11:f1:1e:2d:90:92:16:f5:0d:6f:
5d:ed:3e:41:0c:e6:4d:0e:9b:39:1b:69:02:e6:64:fe:45:03:
ef:0b:3a:e6:b4:42:af:aa:33:b8:25:3c:80:c7:e9:93:4f:f4:
e6:62:c2:6e:79:76:02:e9:52:36:3e:80:10:1a:1a:af:6f:2b:
36:f5:75:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:12 2025 by rpki-client