Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
File: 0SIIZtpI4MfP--jHOjUcKkexpNs.mft (raw, json)
Hash identifier: JFUmt1ZWmlV0NL+bhm0xTYAjeC3ll15zcu+vuIjQUQ0=
Subject key identifier: DA:30:6E:48:91:F5:3F:C4:94:08:4C:A9:59:4A:2F:52:34:99:0B:A4
Authority key identifier: D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
Certificate issuer: /CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Certificate serial: 0196C494E211214E846DB28AAC23A7BE25CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
Manifest number: 02C0
Signing time: Mon 12 May 2025 13:00:13 +0000
Manifest this update: Mon 12 May 2025 13:00:13 +0000
Manifest next update: Tue 13 May 2025 13:00:13 +0000
Files and hashes: 1: 0SIIZtpI4MfP--jHOjUcKkexpNs.crl (hash: +iZ0E8PPkyng+VCTN28bP/GBUzLB1/DAs9zZiiVWZZM=)
2: BtILLkhjQwKc-cBqSY27nFkJu8g.roa (hash: j7KTEXdiX1vJGa7Y4gsoM737n4p+uU95jozk1BXznCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:94:e2:11:21:4e:84:6d:b2:8a:ac:23:a7:be:25:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1220866da48e0c7cffbe8c73a351c2a47b1a4db
Validity
Not Before: May 12 13:00:13 2025 GMT
Not After : May 13 13:00:13 2025 GMT
Subject: CN=da306e4891f53fc494084ca9594a2f5234990ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:ec:62:1c:5e:12:3c:75:ad:57:1e:06:3e:
5f:ff:0a:18:1d:3f:5c:7b:2a:b7:2a:c6:0d:7a:8a:
86:fb:be:f0:bf:1c:4c:e7:27:36:ca:07:1b:98:09:
f6:b6:f8:89:2f:a9:40:6d:5b:b3:b1:71:a3:ed:12:
aa:c8:f9:c9:f0:64:a0:ec:89:01:c9:48:3c:34:17:
ee:a1:d3:b7:2c:81:cc:81:28:dc:12:68:81:9c:81:
e7:f1:86:67:f4:78:95:26:68:2b:12:36:79:d4:9c:
0d:1f:bb:38:5e:86:cf:41:91:4e:07:4d:d5:3f:09:
8b:6a:36:95:51:71:03:94:13:48:89:b1:89:9c:65:
0d:a4:9f:b9:49:a3:b3:d1:21:93:28:60:ab:05:38:
6f:77:de:94:a1:81:36:50:76:aa:f7:9b:9c:86:91:
70:1c:e1:75:2b:05:a3:39:0c:90:17:ee:5d:23:6c:
88:2f:ea:e2:b3:d9:b2:9e:01:d7:66:98:b4:2e:77:
2e:80:8e:f7:e2:1c:58:ba:6e:d2:19:ec:a5:00:a9:
7e:ad:57:e9:2f:3f:a8:2d:0a:51:e2:29:e0:9e:5f:
ee:0e:86:cb:99:e3:58:23:3e:49:8e:76:9a:21:79:
83:b2:4d:f4:bd:48:a9:f1:e5:9c:ba:48:3c:83:47:
9a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:30:6E:48:91:F5:3F:C4:94:08:4C:A9:59:4A:2F:52:34:99:0B:A4
X509v3 Authority Key Identifier:
keyid:D1:22:08:66:DA:48:E0:C7:CF:FB:E8:C7:3A:35:1C:2A:47:B1:A4:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SIIZtpI4MfP--jHOjUcKkexpNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/60951e-7ab5-45d8-9015-95ecd6718887/1/0SIIZtpI4MfP--jHOjUcKkexpNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3a:14:0f:85:60:81:f0:bd:9b:1b:88:6a:bc:85:c6:4a:7e:
db:63:26:08:3e:ae:99:41:d4:9c:6b:2c:fd:45:a3:1a:32:66:
0f:b5:48:2c:44:84:08:4c:43:84:3f:1d:70:47:31:43:5d:cb:
9a:c8:2a:30:3b:13:4e:db:58:be:18:0a:c7:95:06:24:05:27:
30:af:0b:92:db:6e:83:11:f0:ed:bd:55:6e:a5:a4:29:b5:1b:
10:d1:88:d8:60:c0:5c:c1:d9:07:61:60:bd:c6:cf:b6:9b:27:
81:02:88:5c:ce:34:77:f4:8a:45:3b:28:28:36:6b:d0:8c:66:
7c:93:24:ca:cb:3f:69:16:21:6f:30:7b:9e:2e:33:eb:5e:e2:
0c:80:bc:35:89:53:3a:c6:7c:0a:cb:d9:87:d2:fa:46:9f:98:
6c:28:ef:2f:d2:b8:ca:af:7a:7f:f2:54:9d:95:f9:80:e0:be:
86:ad:43:68:4d:ca:15:e6:59:35:10:a5:23:0f:45:a1:09:17:
a7:c9:c8:25:11:85:a8:c4:c0:02:2a:81:1a:64:cc:c4:23:99:
f6:13:db:08:6a:7f:16:39:48:47:34:ff:24:bd:c3:6c:7f:ae:
40:ec:94:84:02:97:91:53:04:de:f5:5e:52:ae:5a:8e:65:3f:
c6:32:60:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:58:09 2025 by rpki-client