Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
File: a0dcb7gDO14R19tfLJl8hLpyXKI.mft (raw, json)
Hash identifier: Z3RDsNvwrbbCSL/oQOQDzdu8WDQjj0L7z1ICs1+2lJ4=
Subject key identifier: 4B:74:A4:14:9A:E3:A1:D5:5A:92:CE:F1:01:9F:37:4B:09:01:F7:58
Authority key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
Certificate issuer: /CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Certificate serial: 0197B6A21B59CA2D22170306892292326DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 13:02:46 +0000
Manifest this update: Sat 28 Jun 2025 13:02:46 +0000
Manifest next update: Sun 29 Jun 2025 13:02:46 +0000
Files and hashes: 1: OVBxJN_E7KClOVOyQO1dITqXrDc.roa (hash: gtF4A20X0QOWLiRvuhbFqEg7fy+sAd/zI+eINNfliv0=)
2: a0dcb7gDO14R19tfLJl8hLpyXKI.crl (hash: Ak8nilBGbcyeB3XS8000hJSm8SgxkcBnZBe3sl/JFEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:1b:59:ca:2d:22:17:03:06:89:22:92:32:6d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Validity
Not Before: Jun 28 13:02:46 2025 GMT
Not After : Jun 29 13:02:46 2025 GMT
Subject: CN=4b74a4149ae3a1d55a92cef1019f374b0901f758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:cb:14:a7:9a:83:1d:ed:04:f4:d0:a7:a6:
44:f3:c7:c1:a7:7f:c0:62:b2:cd:99:be:29:46:69:
a1:45:77:a9:28:b2:d0:98:c3:3d:a1:c3:15:54:f7:
4b:d2:25:1b:56:85:f5:26:cc:d3:f7:51:9e:2b:06:
69:6c:c6:8e:23:96:81:66:4b:7f:f1:8a:25:df:35:
b9:c6:5c:b7:14:c5:3a:00:38:0e:60:3b:e8:a4:08:
98:fc:40:b0:c0:95:7d:80:42:6c:c6:79:bb:b5:ee:
72:31:5c:16:e4:d8:a1:15:10:ea:68:af:32:f5:c7:
bf:a7:71:ca:f9:4e:4d:da:cb:ef:ce:17:e6:18:0c:
c1:49:ee:34:a8:99:4a:b6:b9:1e:b4:83:f0:b5:ab:
24:e4:f0:48:7e:bc:28:d1:e9:2b:53:0f:b3:c5:38:
7a:7c:7f:ab:b3:4b:4d:be:60:ae:58:20:8d:2b:20:
c0:78:79:9f:05:0a:00:c3:ce:29:85:d9:4e:3d:d9:
6d:da:31:01:78:43:26:f7:58:8e:7f:8b:b4:54:02:
ee:ed:2b:05:86:8e:4b:17:47:07:02:a2:31:c1:3f:
72:c4:7b:79:71:96:3d:f0:5e:ce:4a:b2:1a:78:31:
ce:d1:5d:b0:db:d7:3b:3f:10:6b:94:d0:4d:7b:5d:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:74:A4:14:9A:E3:A1:D5:5A:92:CE:F1:01:9F:37:4B:09:01:F7:58
X509v3 Authority Key Identifier:
keyid:6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:69:c0:d1:ea:c6:c6:3f:f2:15:a2:0c:82:88:50:40:99:9a:
b7:a6:5c:3f:d0:75:bd:57:f1:66:39:af:cf:20:8d:d3:79:2d:
30:ab:59:96:34:7d:db:9e:92:85:6c:bb:7c:f2:23:7d:c7:4d:
45:32:71:84:67:a1:ab:d3:e1:db:7d:20:d6:03:1a:d0:50:03:
4c:45:90:51:07:b0:e9:bc:0e:bb:8a:e2:00:b1:7c:dc:99:a5:
03:c0:e4:61:b6:38:dd:2f:52:31:87:3c:9f:a1:37:6b:50:67:
ae:37:92:eb:c3:70:12:1f:f1:a9:c0:0a:89:46:5a:24:c3:61:
c7:f7:ef:96:78:06:40:e9:43:91:3d:e5:c0:d8:3b:fc:88:6a:
5c:6a:4a:98:e4:03:9f:f8:38:7e:d8:3f:ad:ac:8c:1a:97:36:
f1:82:27:7b:47:26:67:fe:67:97:d0:90:26:2e:bf:f6:67:e0:
9f:48:00:ea:a2:ef:e6:be:d6:2a:34:95:e2:ec:eb:59:1a:b4:
f0:23:f7:47:5e:5e:72:ac:b9:f0:aa:cc:ab:46:e2:35:43:20:
78:96:74:69:bb:95:22:5c:1e:30:b3:50:e2:52:e2:10:2c:03:
57:9d:30:6e:53:7f:c8:2f:2e:9d:83:14:e1:91:a6:1f:13:79:
b6:44:53:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:29 2025 by rpki-client