Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
File: 0dMLd0soDDfhxe1dimnLmvZIsGU.mft (raw, json)
Hash identifier: 8dBy06rhVA+BW89NWWP+3wMTw2W0OqjVK8J0gfWo1D0=
Subject key identifier: E5:E5:1D:5A:09:D7:20:84:1E:3D:E8:6D:99:13:58:F6:C7:D7:CD:ED
Authority key identifier: D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
Certificate issuer: /CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Certificate serial: 0197B8903E34AFB837D6699D5121AE2BAD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
Manifest number: 0A23
Signing time: Sat 28 Jun 2025 22:02:30 +0000
Manifest this update: Sat 28 Jun 2025 22:02:30 +0000
Manifest next update: Sun 29 Jun 2025 22:02:30 +0000
Files and hashes: 1: 0dMLd0soDDfhxe1dimnLmvZIsGU.crl (hash: 2hRljnPfjTiVHGZ7jOfUow0A3gCdy56EpD66HsctUQU=)
2: Z6jijp-NqGecwIu65j-qEMAm0nw.roa (hash: 19TQbomnm0YTugnf3c9Z0fKykpuT1EtKWHuZ0GsZG+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:3e:34:af:b8:37:d6:69:9d:51:21:ae:2b:ad:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Validity
Not Before: Jun 28 22:02:30 2025 GMT
Not After : Jun 29 22:02:30 2025 GMT
Subject: CN=e5e51d5a09d720841e3de86d991358f6c7d7cded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:67:39:94:6b:79:39:af:97:6d:c6:b0:b6:
61:df:1f:0e:8f:56:57:71:8e:d0:71:09:b5:85:07:
96:01:4a:8a:f3:ce:43:aa:1b:17:87:7f:63:72:20:
92:7a:e5:69:72:5a:33:02:03:c0:ef:be:13:4c:d3:
4c:8f:12:7d:e2:37:f4:35:b5:89:c2:74:d2:08:b4:
fe:f1:56:38:55:f7:ed:5e:48:8f:0f:2c:d5:91:1e:
96:52:b1:66:76:25:ef:e2:3c:b0:ba:da:39:a6:bf:
54:b3:c9:23:7e:12:ac:37:e4:50:fc:9a:f2:8e:be:
b6:00:f8:e3:8a:50:63:eb:1a:0b:5c:36:6b:82:82:
70:4d:f5:79:50:c9:55:d7:bd:d8:48:6d:c3:1b:ae:
c8:67:57:45:fb:b0:0c:1e:ed:65:03:81:98:9d:e7:
19:34:c5:4c:e3:67:31:49:0a:85:99:9b:40:2f:76:
53:62:48:39:49:2d:c2:29:cf:d4:32:9c:39:4b:1f:
93:17:e9:67:69:c6:47:3f:ee:29:6d:34:84:62:d5:
35:ef:6d:7a:ab:05:2d:99:76:a6:31:24:10:99:1a:
2a:bc:93:af:0a:1f:57:8e:8f:10:f9:d5:ed:5d:ac:
cb:bb:3a:ad:07:e1:a7:c3:c0:6d:e2:43:54:76:d6:
b2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E5:1D:5A:09:D7:20:84:1E:3D:E8:6D:99:13:58:F6:C7:D7:CD:ED
X509v3 Authority Key Identifier:
keyid:D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d7:d7:5c:25:8d:66:35:38:8d:fe:a1:3e:63:30:49:5f:a2:
de:93:87:a7:40:57:66:5f:ec:59:30:f2:a3:96:59:56:64:ec:
b9:af:9b:5e:24:f2:25:b0:58:5b:85:64:6f:b6:b7:03:74:01:
f5:b1:df:ce:d8:ee:73:33:d5:59:11:45:26:79:a0:70:eb:ff:
a8:36:d0:6a:80:a4:98:98:c1:e9:cb:d3:92:96:b3:34:40:60:
97:74:29:9f:20:07:7b:8d:98:1e:af:72:21:c7:6d:d4:a7:38:
f0:97:cf:9f:c4:89:e7:51:36:61:27:e8:82:58:75:45:49:a7:
0c:30:21:3f:b1:6c:09:a2:f7:ce:2e:02:0f:51:c5:88:01:a3:
dd:17:92:e3:98:05:3e:bc:ce:aa:f3:a5:ad:d2:2e:fa:83:36:
e1:f9:fe:ef:46:0b:96:86:40:df:a4:6f:da:b2:bb:ac:30:b7:
79:17:51:c7:69:ac:a6:dc:dd:84:2c:9c:88:dd:9c:8b:e0:48:
3e:f5:a9:ef:bc:45:e5:60:8e:71:04:e4:bc:3d:b5:22:83:09:
a4:57:20:4c:cf:db:db:80:4e:e6:be:6b:58:7d:9c:f3:49:cf:
5a:b9:44:ad:24:17:17:27:89:f0:f1:d6:50:fc:84:d4:f4:cf:
8c:6a:cb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:35:04 2025 by rpki-client