Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File: d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier: NbkEW27Vt5dPSwKSHPR0wDucvZZvnZUtPqd0rVlP+s8=
Subject key identifier: 52:60:8B:03:A1:68:F2:1B:36:BB:C7:83:66:09:3A:57:CF:5D:55:76
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer: /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial: 0197B77C6FB5FEFAD5E078AE3ACD51834D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number: 12DA
Signing time: Sat 28 Jun 2025 17:01:14 +0000
Manifest this update: Sat 28 Jun 2025 17:01:14 +0000
Manifest next update: Sun 29 Jun 2025 17:01:14 +0000
Files and hashes: 1: BIbyN6MobH1STyCEPdXKcXxO-0I.roa (hash: Os4l0m9oxr0hmnuszsL7ZwnRaiayTTQWv9r3AFurnXg=)
2: Bbz0bBQb7OvBUdzdUU2fR0aTHW0.roa (hash: oXnG95uJE4GWCusPMitN/8TOoOTM8j2qb4pX4QMQ5u0=)
3: bdDCotOAfO1kv_FK4imM3A-Vth0.roa (hash: SflKXIddgIp/qAd1Zs2morymiezh6i6wy0uu+gUqlSk=)
4: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: /u0I2T0kx7esowz9osPN7NdSKd4pJVOEgmqZ6IM+3qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6f:b5:fe:fa:d5:e0:78:ae:3a:cd:51:83:4d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Validity
Not Before: Jun 28 17:01:14 2025 GMT
Not After : Jun 29 17:01:14 2025 GMT
Subject: CN=52608b03a168f21b36bbc78366093a57cf5d5576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:07:c9:34:08:f9:49:33:ff:e6:46:a5:03:a3:
f6:be:10:3f:89:01:dd:30:67:59:c3:c4:29:0d:96:
fc:35:05:e5:12:8e:bf:28:69:a5:8a:64:d8:33:6a:
5a:c3:79:c1:e9:56:02:29:9c:1b:ff:72:2c:58:56:
22:6a:18:7b:a0:c1:49:85:d4:6d:9b:64:b0:b4:4a:
8d:f2:d1:fe:2b:c3:83:7a:20:9d:3b:4b:ce:87:4c:
ca:ea:41:c1:53:bc:97:89:ac:a6:32:6e:1d:ad:b8:
e9:df:48:d3:e6:82:d7:87:7d:e1:c3:a0:96:d5:af:
82:c5:44:05:a1:fd:13:14:99:f2:f9:a5:3c:2e:2d:
fb:74:11:33:cf:01:b3:09:19:4e:7b:5a:a6:5f:67:
db:c0:2a:47:8c:da:72:fd:f6:79:a1:ca:19:1e:ee:
00:6d:e9:4a:94:c2:87:81:4d:23:1b:1e:e4:26:ae:
6a:13:dd:dd:26:7e:19:1e:50:c6:41:b7:e8:3a:c8:
87:01:1c:2a:6c:67:63:9f:aa:19:fd:fd:49:0a:cc:
6c:94:2b:91:cd:d7:2d:3e:8c:d3:31:fd:34:2b:5e:
6c:07:9e:87:c7:c7:94:17:1f:55:46:c1:4c:2e:71:
1f:ef:fe:06:32:8e:f9:f2:6a:5f:11:17:52:4d:b4:
2f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:60:8B:03:A1:68:F2:1B:36:BB:C7:83:66:09:3A:57:CF:5D:55:76
X509v3 Authority Key Identifier:
keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:55:6f:dc:6f:31:ef:ca:db:9c:8f:98:bf:c1:4a:ce:9a:9b:
81:80:a7:ea:b9:50:36:93:3d:ce:d9:87:a6:e3:69:25:7f:03:
98:b8:76:2a:d3:72:48:8f:3a:9b:43:8e:87:b6:4d:29:c4:e8:
f0:e3:40:3b:e1:b7:9c:66:1a:fb:39:eb:97:fe:9e:b3:6e:c1:
fd:b6:2c:f1:73:07:e9:2d:1e:2b:44:9d:27:43:33:75:29:33:
bb:2d:2f:42:51:d7:5c:34:a7:84:fc:06:f7:8d:c9:c3:25:d3:
b5:eb:e0:d3:4f:e4:18:28:78:f5:85:e9:11:a3:c4:00:04:92:
58:9c:33:4c:9e:34:19:e4:ac:78:33:bf:9b:6d:35:fe:86:eb:
e3:e2:b2:cc:60:d7:18:15:da:b1:6d:bf:05:a8:50:e6:4e:22:
d8:4c:e8:00:6a:80:14:26:69:2d:4b:94:6c:d6:4f:56:4e:3b:
48:de:29:0b:f0:85:c2:5e:1c:16:4f:12:bb:b7:a8:02:fe:78:
0e:37:e6:ab:91:40:8b:7e:88:5f:30:ed:72:a9:9e:47:eb:60:
d8:48:66:db:fd:83:cc:3c:8f:e3:b1:4f:7d:f2:61:d6:a9:5a:
72:00:7b:e9:16:c1:af:e3:21:95:eb:eb:f4:fd:2e:4d:ef:83:
02:66:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:14 2025 by rpki-client