Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: wQpjZuv9V8gXtJraV6VVPWSGLeZIUTF3sAVYeptsP+g=
Subject key identifier: 3E:A7:23:FA:B5:AF:3F:3E:83:8A:83:41:BD:AD:BF:B2:7A:71:C0:42
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 0197B6A053EE801551E4F1CB6A08C93478C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 09CC
Signing time: Sat 28 Jun 2025 13:00:49 +0000
Manifest this update: Sat 28 Jun 2025 13:00:49 +0000
Manifest next update: Sun 29 Jun 2025 13:00:49 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: j2F0mafI63PWjmwtQ0aomV5BU+9WcCTMf+XI+dQd8bM=)
2: Ve2RrvNi_87VDfl21Lq8fKe-sYc.roa (hash: Bwg7wRCqbsHk5Pn4Ah5pnRiyg8rpwcrSFyOQ2YGllyY=)
3: nc0QnNEGuF1kLi9w3egLsBhEL6Y.roa (hash: KWBWDWBG7Sj1CyJ1paoXUYeG29P/pnqgE+4DRW4DIYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:53:ee:80:15:51:e4:f1:cb:6a:08:c9:34:78:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Jun 28 13:00:49 2025 GMT
Not After : Jun 29 13:00:49 2025 GMT
Subject: CN=3ea723fab5af3f3e838a8341bdadbfb27a71c042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:c1:db:fd:b7:90:76:e7:3f:90:1e:76:3e:
49:e5:43:45:4d:bf:0f:f2:cb:1e:cb:99:83:f6:68:
d2:90:b9:27:d2:13:7c:0f:3d:02:ff:de:3c:16:5d:
f7:08:2a:45:04:55:1c:6f:c8:33:7d:af:64:de:d6:
f9:20:cf:30:a7:9d:b7:02:54:f0:ab:33:ec:22:4a:
43:2f:e5:82:8e:1c:8f:2a:bb:bb:8e:18:58:ae:f7:
e6:c7:d4:11:61:fe:da:ff:92:24:38:8d:6e:48:6a:
58:d7:99:10:97:ab:af:c7:e9:48:08:01:41:3e:5b:
5f:03:7e:f0:36:68:8e:47:26:e6:2b:b7:a1:72:36:
78:d4:69:b6:65:6a:c1:0a:1f:b9:e5:68:79:00:14:
56:43:c1:0a:6f:00:13:4a:16:7e:56:bf:5e:bf:f5:
55:f6:3b:42:80:80:6f:58:50:53:1c:e6:56:bb:e0:
70:a0:17:69:1c:6f:65:ce:95:62:1b:c4:b4:d6:f6:
e9:02:4a:ae:a4:5e:9b:9c:a9:23:1c:fc:56:03:97:
e5:3e:39:17:30:36:37:0a:e4:3b:6c:ae:9f:dc:01:
1a:cf:b7:e9:b5:7c:cd:84:af:ad:24:9b:f5:89:b6:
d5:4e:10:a9:1e:bd:8a:44:c2:10:0a:e2:43:07:f3:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A7:23:FA:B5:AF:3F:3E:83:8A:83:41:BD:AD:BF:B2:7A:71:C0:42
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9d:9f:48:f0:0d:df:b1:4e:5d:cc:28:52:0b:65:86:97:f5:
66:0a:3d:47:d8:b9:5b:33:34:ab:19:7c:63:a8:c5:25:ba:4f:
6c:eb:8e:93:a2:17:7f:14:d9:19:35:fc:03:91:37:a7:67:51:
52:2b:e1:7c:e9:cd:e9:6e:fc:e0:8e:f3:ab:63:8f:c5:c3:2e:
be:90:84:72:73:65:e4:cb:1c:ab:b7:05:e3:3a:3f:db:e9:ce:
62:df:2c:5f:8b:bf:f5:1c:69:57:fb:a8:ca:71:4d:dd:19:64:
13:60:0c:46:f9:b0:bd:d0:61:6d:05:39:fb:b3:d1:7e:0d:e6:
32:9c:0d:1d:02:94:fe:66:59:8d:b2:a9:a4:2c:dc:1f:2e:53:
71:47:6a:85:f9:2d:f6:2a:23:69:a3:f4:54:33:97:c8:52:89:
0e:14:57:3a:40:54:4e:ee:37:a7:28:73:43:b8:c3:ca:86:c8:
f8:3a:3d:e0:99:d1:5c:e3:06:70:6f:32:57:aa:01:6f:7a:5f:
10:fe:8e:a1:52:f3:15:0a:e0:04:9a:dd:e7:21:99:92:26:3e:
12:34:00:20:e9:8b:3e:42:a0:7f:f8:30:b6:b0:00:18:45:1b:
2d:4b:f7:7b:99:d0:a7:de:01:fc:56:bf:23:d2:02:13:c9:5d:
00:2c:d1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:07 2025 by rpki-client