Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier: zDE2b3QT+rko09EgYdjpas1PStZ+635PVjRAyWCZcfg=
Subject key identifier: BD:C5:4B:DD:D1:7E:0B:82:3B:9D:49:63:08:F3:3D:AC:E9:CB:03:E1
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 0197B74589A86820EC5E306578614B360A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number: 0D68
Signing time: Sat 28 Jun 2025 16:01:17 +0000
Manifest this update: Sat 28 Jun 2025 16:01:17 +0000
Manifest next update: Sun 29 Jun 2025 16:01:17 +0000
Files and hashes: 1: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: A6BV4JeCUyHFYfrEyRK9rgTYhqSkaUAECwzOX9yXJbY=)
2: CZnlkiY3og8rtBoo7Koc6sXsHTo.roa (hash: Rvhx0o8KGhpASZKp5ZJ69K1clVCJo2tPstcBWQs04Wk=)
3: INWe7JHY3LSZtRLCNKJA9CyWVj4.roa (hash: Yo4nt69BrN4AQ4hoMVSQ6OOsFPB4EPZWgV8+aVYUE7U=)
4: nGmNNcPYPqUlkXgs_RQgBIHWHdU.roa (hash: qd/h+GWajfOX6OMR5HYNSJZTt3Etfb5C3Mcx9RhNRgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:89:a8:68:20:ec:5e:30:65:78:61:4b:36:0a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Jun 28 16:01:17 2025 GMT
Not After : Jun 29 16:01:17 2025 GMT
Subject: CN=bdc54bddd17e0b823b9d496308f33dace9cb03e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:53:6e:41:f1:15:b2:e5:3f:4b:ef:8a:83:
25:71:e2:ba:4a:9a:46:19:13:3d:81:17:dc:88:9b:
51:c4:15:32:29:c8:79:1b:e7:eb:b5:bf:0f:ca:72:
72:1b:81:84:8d:de:60:bb:03:21:d6:fb:b3:46:8c:
0d:a9:e1:36:df:17:d1:b7:6a:f6:bc:34:ee:c3:38:
20:6d:a8:6f:4a:d5:38:3b:69:e5:1f:78:46:7f:6d:
21:b4:5b:80:9f:7b:83:a2:1c:0b:c4:69:20:6a:fc:
e2:eb:18:ee:b8:e1:f7:db:ee:df:bf:14:b7:54:10:
d0:c1:37:04:4f:9b:71:7b:22:c5:02:6a:9f:7a:e6:
73:ca:e4:3e:78:3e:e5:78:ec:01:5a:cf:ab:5d:c0:
cb:46:33:a3:b2:62:6a:79:5a:c7:24:da:cb:12:86:
07:13:93:74:19:ec:06:e8:a3:91:04:0f:ff:7a:6e:
81:d9:0e:16:ef:b2:61:58:ab:79:60:6b:b5:1f:d1:
3e:be:5a:04:3c:f6:c7:21:f3:39:e9:93:1f:cb:c5:
c7:6b:c2:07:a2:ac:f6:5e:e9:52:ba:f2:46:50:69:
95:e8:2b:8a:3f:0b:c6:3f:3b:5e:c3:d1:42:27:f6:
d2:02:0c:3b:f8:e8:c6:04:75:90:00:79:07:c2:8c:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C5:4B:DD:D1:7E:0B:82:3B:9D:49:63:08:F3:3D:AC:E9:CB:03:E1
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b8:af:e0:25:c7:46:e3:a2:19:71:1d:48:3d:1b:90:62:93:
79:ef:af:b5:51:bf:e3:89:66:b9:81:41:c6:23:7f:2b:04:2b:
84:64:3b:7d:0e:2a:bf:df:f4:b1:2e:95:2a:0f:a1:8d:b6:5d:
bf:f9:13:5b:4c:da:09:cc:d0:ca:77:b4:c6:24:a8:20:14:9e:
9f:eb:a5:61:5f:51:3b:05:fc:5a:82:80:29:a9:b5:5d:fe:b3:
f5:fe:51:36:d6:dd:15:49:19:ec:b3:50:80:11:6c:86:1c:c2:
ff:6e:f2:18:08:60:5b:86:2d:43:dc:3e:23:11:a6:2f:4f:cb:
0a:13:fe:c2:bf:0b:2d:ae:57:1d:b6:70:81:5d:c1:ac:06:28:
08:e0:8c:d6:5e:bf:66:45:5b:af:2c:f4:4f:28:cd:25:99:6b:
dd:45:bd:ba:3a:0b:54:08:11:b6:7e:56:27:4c:f7:2f:72:91:
a6:88:dc:b4:c1:56:51:38:e5:76:b9:e4:9d:43:52:35:3f:bb:
c1:29:d9:08:cb:e5:0e:2a:a0:41:e0:3f:bb:20:5f:0d:20:f6:
76:60:ee:e0:a5:70:a4:2d:ab:6f:6e:8e:11:be:c1:8d:dc:83:
17:ec:15:a6:64:f6:08:af:a1:70:e0:47:96:84:30:44:b4:65:
a5:23:91:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:04:20 2025 by rpki-client