Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
File: C_t1KSifiPtLuHs5577cnZ8n1fo.mft (raw, json)
Hash identifier: UANLBtdu0t42pP0vQOa2WJZd7rF946ohH8LU0gZTMps=
Subject key identifier: 6A:55:D5:9A:18:2C:AF:76:06:66:F8:E4:14:1B:E8:C1:54:A0:BA:17
Authority key identifier: 0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
Certificate issuer: /CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Certificate serial: 01969FE42AD91856405E9D619A24ABF14A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
Manifest number: 0B0F
Signing time: Mon 05 May 2025 10:00:52 +0000
Manifest this update: Mon 05 May 2025 10:00:52 +0000
Manifest next update: Tue 06 May 2025 10:00:52 +0000
Files and hashes: 1: C_t1KSifiPtLuHs5577cnZ8n1fo.crl (hash: ftyA6fCmxwUnZK41IY5vNhyJlT8eyuEmRk00spGs2xY=)
2: whyZk-eGgLM_RCz6JHmHxo6hnC4.roa (hash: JprlHVW3ts3bvDOmnO+99r6acv/rg1V894NDodBDkxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:2a:d9:18:56:40:5e:9d:61:9a:24:ab:f1:4a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfb7529289f88fb4bb87b39e7bedc9d9f27d5fa
Validity
Not Before: May 5 10:00:52 2025 GMT
Not After : May 6 10:00:52 2025 GMT
Subject: CN=6a55d59a182caf760666f8e4141be8c154a0ba17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:b4:e6:e6:ec:87:1b:ea:0e:68:9c:fb:8c:
ef:c4:cd:87:39:0d:00:c4:f9:11:88:e8:b7:e9:4e:
fd:5e:8d:58:47:c8:b7:2d:43:a8:b3:0b:df:f7:fc:
40:b3:1c:10:fa:ba:d1:55:58:64:7f:4e:51:23:45:
d5:16:1e:31:e0:c2:89:d3:9c:87:db:0d:11:8a:70:
6f:64:83:fb:0a:4b:e0:1a:3c:f6:fd:0c:73:bf:93:
75:8e:31:e7:f9:7a:53:3d:fd:e1:7a:e0:78:b3:91:
0c:4f:4e:99:72:af:b0:c3:2f:10:52:09:27:75:0f:
4d:40:05:0b:b2:6e:72:f4:03:e7:55:3c:d8:37:81:
14:c3:49:93:84:1b:7e:a4:b7:03:e4:06:a6:4f:25:
48:34:48:68:03:0c:5e:f9:50:c6:8d:3c:16:7b:53:
93:ce:b0:7e:09:9b:ff:96:79:cd:ed:e6:50:3f:cf:
df:b2:50:84:19:f7:31:72:29:4f:16:8a:61:7e:a3:
47:9f:70:c7:db:5a:ec:97:23:5c:71:da:df:bc:00:
66:34:ca:91:70:e8:16:1a:b3:46:d4:2a:a9:53:a6:
99:9c:aa:c3:71:2f:1d:94:4c:06:48:8a:c9:e4:5b:
d4:71:16:4f:48:76:0b:93:6e:09:1d:e9:78:59:2f:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:55:D5:9A:18:2C:AF:76:06:66:F8:E4:14:1B:E8:C1:54:A0:BA:17
X509v3 Authority Key Identifier:
keyid:0B:FB:75:29:28:9F:88:FB:4B:B8:7B:39:E7:BE:DC:9D:9F:27:D5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_t1KSifiPtLuHs5577cnZ8n1fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/57d565-883b-48a2-a424-273db7d53898/1/C_t1KSifiPtLuHs5577cnZ8n1fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6e:66:24:01:c0:5f:d0:98:26:e0:30:3f:63:e2:2d:69:8f:
82:6d:61:90:50:fc:9e:e9:a0:ad:2b:44:3e:d8:16:f7:4a:51:
1c:d3:18:83:1a:d6:30:1b:e2:fa:ed:04:07:b6:80:07:95:fc:
95:4f:30:d2:61:5f:b9:30:72:8d:b8:e5:82:50:41:df:2b:b3:
45:e1:50:62:13:99:a2:76:ad:ed:84:5d:55:69:55:6b:24:3a:
25:64:69:93:d0:79:0a:5a:85:ea:16:e0:26:8b:aa:84:15:e8:
30:d5:b6:2c:c8:8e:ec:4d:91:60:a7:98:41:cf:c4:1b:62:21:
07:5a:b1:fa:f6:85:5d:c6:1d:92:bc:a9:d9:7a:8d:84:3b:26:
fd:74:9d:97:5c:d4:7b:53:30:20:43:0f:b2:57:40:4b:18:0f:
de:a9:dd:06:92:5b:37:35:c7:c7:77:e7:ce:dd:52:61:85:9e:
4a:54:00:2a:e3:d0:6e:58:f8:2c:f2:21:04:ac:a3:cb:ed:fc:
69:90:21:f6:00:f4:f7:99:c3:c3:05:9f:68:d0:d2:42:3a:6f:
87:12:d1:9e:6c:53:f5:5c:e4:90:85:e8:f1:61:c4:66:d6:4c:
57:f9:b0:9a:e7:33:f8:57:8a:39:ee:73:5e:12:c6:43:4f:d0:
9e:c4:4b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:27:51 2025 by rpki-client