Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
File: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft (raw, json)
Hash identifier: 0NHT1QrSgQWXRi+d1pwOoDDe7aQz7s9zK5IlXembQkU=
Subject key identifier: C1:9E:22:9B:34:F9:2B:46:2A:81:22:13:F2:C7:11:EB:D2:B4:A0:AB
Authority key identifier: EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
Certificate issuer: /CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Certificate serial: 0197B6A07240D7BE710EF971FFC5988FA470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
Manifest number: 0BAF
Signing time: Sat 28 Jun 2025 13:00:57 +0000
Manifest this update: Sat 28 Jun 2025 13:00:57 +0000
Manifest next update: Sun 29 Jun 2025 13:00:57 +0000
Files and hashes: 1: 61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl (hash: 5JxxgnyUA+Tam3A1aeroj/kpFIOsA6lz8GGGKtjM3jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:72:40:d7:be:71:0e:f9:71:ff:c5:98:8f:a4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb50b439d488e1b1a69e3586098621956c0edc7b
Validity
Not Before: Jun 28 13:00:57 2025 GMT
Not After : Jun 29 13:00:57 2025 GMT
Subject: CN=c19e229b34f92b462a812213f2c711ebd2b4a0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:52:75:3a:c0:95:b3:51:e1:3d:13:ae:9d:f9:
c6:cb:ab:f4:8e:29:58:06:8d:8e:25:7c:5e:2a:10:
70:e3:f4:0e:fc:b3:0c:fa:1e:5f:33:96:60:22:7e:
fe:93:e3:c4:55:fb:2d:b0:03:f1:c0:e8:1a:1b:db:
24:f3:7d:a0:dc:21:3d:10:48:98:80:85:9c:fa:1c:
ed:e9:30:4b:b1:63:9d:1a:ac:f4:c8:ac:9f:51:f3:
fb:2d:75:0d:28:ba:9b:e0:a0:c8:92:88:d0:3f:10:
19:76:c8:b1:c6:47:50:65:65:e2:92:26:fc:d2:ae:
d3:64:07:fd:e1:83:98:9a:42:42:02:2b:ea:c0:37:
86:40:3f:32:d6:56:8a:cb:56:fb:7e:68:d6:0e:12:
15:73:0b:b4:df:8e:49:ab:b4:45:36:c4:80:9b:16:
c3:87:4d:f4:ba:20:6a:b2:fa:84:7f:9d:3e:96:28:
da:f4:03:61:ad:4d:11:7b:4c:88:16:fa:b7:c1:bb:
e6:6e:c8:de:31:8e:09:59:dd:fe:8f:86:a2:2f:5a:
3d:45:17:16:3a:3c:5d:4a:fe:6e:6e:07:94:9c:f7:
a6:8c:a4:df:50:9d:29:dc:5a:6f:62:2b:23:d7:bb:
03:ec:80:d4:c4:22:eb:85:7b:61:80:fc:be:1d:d6:
3c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9E:22:9B:34:F9:2B:46:2A:81:22:13:F2:C7:11:EB:D2:B4:A0:AB
X509v3 Authority Key Identifier:
keyid:EB:50:B4:39:D4:88:E1:B1:A6:9E:35:86:09:86:21:95:6C:0E:DC:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61C0OdSI4bGmnjWGCYYhlWwO3Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c83e8f-2457-4e8a-a6bc-3a7980314ea2/1/61C0OdSI4bGmnjWGCYYhlWwO3Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5f:e5:41:d5:f2:82:d0:18:6e:f1:9b:5d:c2:f6:7f:49:d5:
2b:77:34:79:44:2a:0c:b4:60:3a:c5:fa:a9:f7:14:62:7a:97:
59:c5:13:47:2f:8b:16:12:47:7f:f6:66:3f:53:4f:cb:a5:6d:
fb:52:96:36:5c:b3:6c:9c:d0:73:92:0b:8e:b0:67:98:e9:01:
80:8d:5e:54:89:8f:cc:97:7a:c1:75:08:7f:7e:79:32:7b:ce:
0a:74:ef:16:1e:78:f9:c9:d8:0d:4e:19:fb:52:b0:97:d1:ac:
bf:c4:41:83:7b:cf:29:11:4e:a3:07:89:07:a6:30:ef:87:cc:
4d:51:3d:a5:af:e1:20:63:35:31:1d:b0:cb:80:b2:34:96:08:
80:c1:84:5d:ae:0f:4c:c5:b1:91:cb:9c:1f:75:16:76:18:2c:
ee:2b:d8:58:e8:92:63:71:e0:fb:02:db:af:0c:95:95:0c:69:
ab:a1:18:31:ec:ce:75:d7:06:06:5c:3e:6d:48:7a:91:4e:bd:
ae:be:41:9a:98:8c:a1:76:93:7d:00:37:39:c4:6f:e1:c0:e2:
f5:78:3f:d1:39:89:e9:ad:b4:a1:e3:3e:ce:ac:c1:e7:9c:f9:
fd:8c:12:2f:12:29:6f:60:f5:1e:b6:29:bf:9b:69:33:52:64:
0b:c6:90:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:03 2025 by rpki-client