Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
File: 0HCWDtmg2hybfiRX6ry2YEeNCK4.mft (raw, json)
Hash identifier: UBmooQzjXovLiirqOyiYlDz57MJcr1jSzYIy5uZnjoo=
Subject key identifier: 76:FF:41:B9:D5:99:49:EE:A1:DF:CC:55:D0:24:23:B3:4B:F2:1A:86
Authority key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
Certificate issuer: /CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Certificate serial: 0197B6A15D97C276730CEFDF811E15EA7EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
Manifest number: 0695
Signing time: Sat 28 Jun 2025 13:01:57 +0000
Manifest this update: Sat 28 Jun 2025 13:01:57 +0000
Manifest next update: Sun 29 Jun 2025 13:01:57 +0000
Files and hashes: 1: 0HCWDtmg2hybfiRX6ry2YEeNCK4.crl (hash: KmwqEhig1KwsL8rKASl2dExv5R73QtCfjmdzyo1Vy1M=)
2: ZYblDAaDwwmnrchNjFrf0zm4tO0.roa (hash: TUJh6mrSVIERTxbeRqv55tj1PiJ2BrobmYQdllbfBL8=)
3: a5ENWfgeJoTdkmkmWh2QDvelWp8.roa (hash: oka6UR7fuDvaS+P0EhzHRaWdX/8yDP3LK7DL0R3JiIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:5d:97:c2:76:73:0c:ef:df:81:1e:15:ea:7e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Validity
Not Before: Jun 28 13:01:57 2025 GMT
Not After : Jun 29 13:01:57 2025 GMT
Subject: CN=76ff41b9d59949eea1dfcc55d02423b34bf21a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:a4:ad:4a:e1:dd:d6:f0:3b:ca:7a:cd:05:
b9:46:28:b4:0b:13:e3:e0:cb:3e:0b:09:d4:d6:9e:
73:e9:57:14:1f:2d:42:f4:02:84:45:38:b2:1e:b5:
38:fc:8b:f7:6f:2a:f7:2b:f7:13:d4:a2:b7:82:e3:
b0:c2:bc:d3:cd:d6:35:07:f2:f0:21:e2:33:c9:f0:
30:9a:25:83:b4:97:a7:e9:74:7e:7c:5e:4b:23:13:
5c:22:4d:3a:49:94:4b:ba:1f:8c:ba:27:18:ee:ff:
5c:4d:9a:e3:8b:a6:f3:b4:c8:d2:8a:e5:ec:90:5e:
fb:bf:be:6b:92:01:6f:54:2d:e0:9c:68:77:47:07:
55:d4:9d:7f:64:a7:10:f5:6e:b4:e6:0b:be:4d:32:
45:5a:f0:27:7b:72:ee:9f:72:68:83:01:6b:22:09:
1e:ab:12:2c:6e:c3:94:bf:65:6a:ef:47:71:3c:d0:
7e:af:e2:10:fb:9d:21:45:e6:57:c9:d4:6f:38:af:
70:5a:ff:eb:b1:95:32:b5:c0:23:ba:8e:e9:ef:87:
cf:ab:09:5a:eb:fa:87:db:45:b9:81:d5:6e:10:19:
89:57:fd:4d:6e:cb:4a:7d:42:5e:a2:c0:3b:c6:c6:
af:0b:2b:43:51:ef:94:f0:ce:77:69:a7:1b:fd:56:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FF:41:B9:D5:99:49:EE:A1:DF:CC:55:D0:24:23:B3:4B:F2:1A:86
X509v3 Authority Key Identifier:
keyid:D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:29:58:f0:07:1e:2f:1e:26:0c:1b:90:7b:12:10:c6:bf:c1:
ce:9c:bf:e2:a6:3d:7b:17:04:9f:90:62:6d:2f:b5:04:66:a9:
17:6e:24:b0:26:e0:ae:d0:19:c4:1a:2f:ba:cc:36:ba:06:95:
40:7c:f0:2d:11:0c:50:4b:96:f7:e9:85:98:20:e0:7c:bf:7b:
ba:f1:f7:90:2d:d9:c7:ff:46:a5:22:6d:f6:60:3b:d8:9d:3e:
db:db:d5:1a:3f:16:e4:57:3d:ec:4c:11:39:d9:02:16:dc:c9:
60:a2:f0:7c:c7:0b:d1:71:b1:50:af:9a:43:aa:c4:2d:14:6d:
7f:9f:90:94:f2:c0:f2:a3:aa:89:cf:2a:af:b7:af:fa:af:9a:
e2:d6:10:7f:f2:af:3f:90:bc:5e:73:80:af:8f:cb:0d:c2:eb:
7e:40:eb:69:8a:8f:42:c8:22:de:d7:26:68:10:db:ae:c7:f1:
82:66:c8:db:85:b0:f4:37:d1:f9:2f:dd:a1:40:15:88:7c:97:
a9:62:c9:d9:1e:1a:66:f1:b5:96:31:f9:08:22:4e:ca:7e:4a:
6d:36:40:88:57:74:9d:ef:fd:07:42:b8:bc:7e:66:3a:ac:94:
9f:0e:3a:d9:fc:e9:9c:59:fd:c5:67:18:0c:cc:0a:b3:26:5d:
a3:78:c5:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oV2XwnZzDO/fgR4V6n7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNzA5NjBlZDlhMGRhMWM5YjdlMjQ1N2VhYmNiNjYwNDc4
ZDA4YWUwHhcNMjUwNjI4MTMwMTU3WhcNMjUwNjI5MTMwMTU3WjAzMTEwLwYDVQQD
Eyg3NmZmNDFiOWQ1OTk0OWVlYTFkZmNjNTVkMDI0MjNiMzRiZjIxYTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPOkrUrh3dbwO8p6zQW5Rii0CxPj
4Ms+CwnU1p5z6VcUHy1C9AKERTiyHrU4/Iv3byr3K/cT1KK3guOwwrzTzdY1B/Lw
IeIzyfAwmiWDtJen6XR+fF5LIxNcIk06SZRLuh+MuicY7v9cTZrji6bztMjSiuXs
kF77v75rkgFvVC3gnGh3RwdV1J1/ZKcQ9W605gu+TTJFWvAne3Lun3JogwFrIgke
qxIsbsOUv2Vq70dxPNB+r+IQ+50hReZXydRvOK9wWv/rsZUytcAjuo7p74fPqwla
6/qH20W5gdVuEBmJV/1NbstKfUJeosA7xsavCytDUe+U8M53aacb/VakMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHb/QbnVmUnuod/MVdAkI7NL8hqGMB8GA1UdIwQY
MBaAFNBwlg7ZoNocm34kV+q8tmBHjQiuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wMzU1OGUtNjg4Zi00ZTFjLWE2NmYt
NmVlZmRhMTEwOGFkLzEvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8wMzU1OGUtNjg4Zi00ZTFjLWE2NmYtNmVlZmRhMTEwOGFk
LzEvMEhDV0R0bWcyaHliZmlSWDZyeTJZRWVOQ0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSlY8Ace
Lx4mDBuQexIQxr/Bzpy/4qY9excEn5BibS+1BGapF24ksCbgrtAZxBovusw2ugaV
QHzwLREMUEuW9+mFmCDgfL97uvH3kC3Zx/9GpSJt9mA72J0+29vVGj8W5Fc97EwR
OdkCFtzJYKLwfMcL0XGxUK+aQ6rELRRtf5+QlPLA8qOqic8qr7ev+q+a4tYQf/Kv
P5C8XnOAr4/LDcLrfkDraYqPQsgi3tcmaBDbrsfxgmbI24Ww9DfR+S/doUAViHyX
qWLJ2R4aZvG1ljH5CCJOyn5KbTZAiFd0ne/9B0K4vH5mOqyUnw462fzpnFn9xWcY
DMwKsyZdo3jF9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:41 2025 by rpki-client