Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier: /DuJ1Adw4y4SDh1fe6m8RxKA3F+4Tx1X8hHSucxA4WU=
Subject key identifier: E9:4B:E5:54:2F:15:AB:B1:E8:C8:C9:2B:BC:41:A6:0B:4E:2C:9D:9A
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 0197B7456BBFD15E0F0159C7A7455608C4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number: 0CAF
Signing time: Sat 28 Jun 2025 16:01:09 +0000
Manifest this update: Sat 28 Jun 2025 16:01:09 +0000
Manifest next update: Sun 29 Jun 2025 16:01:09 +0000
Files and hashes: 1: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: qYZy23yeCBWZh5NPWVlE6G6x2E+5PZCw+0rFPr5eL3A=)
2: Qfno-jAugdwOIbQTtdk6Qt14vp0.roa (hash: K+5ZvY56wsKUyUpWT9EX8Ty0xGLLwMy0SXranx21Z8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6b:bf:d1:5e:0f:01:59:c7:a7:45:56:08:c4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: Jun 28 16:01:09 2025 GMT
Not After : Jun 29 16:01:09 2025 GMT
Subject: CN=e94be5542f15abb1e8c8c92bbc41a60b4e2c9d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:b0:b4:42:b0:62:5c:c6:ce:86:d1:55:e2:70:
99:ce:d4:5c:bb:e4:2b:b5:21:97:a9:e8:3b:21:0e:
f9:90:b0:e3:54:37:2b:7a:aa:01:33:cb:36:b1:83:
52:13:be:cc:76:6b:10:b1:5a:87:5f:8e:1e:be:2f:
cf:61:bf:4a:75:c2:c2:92:b3:4e:6a:f5:1b:50:d8:
9f:96:8e:32:41:e6:61:82:9c:e5:ab:e9:d7:a5:2f:
b1:98:4a:26:1e:e5:50:82:10:34:6b:54:e3:22:0e:
b6:97:b8:97:5c:71:c2:9f:70:71:82:24:05:c3:d5:
e4:25:80:e5:96:0e:de:a8:56:bc:68:bf:7d:33:28:
58:23:c9:4a:fd:e4:47:f0:44:10:e6:c1:9d:16:73:
a0:29:cd:8d:7a:2d:cc:96:5f:d7:18:78:34:d7:60:
4b:9b:82:bf:6d:09:8f:7f:8b:3c:28:ff:b7:af:ca:
bb:7e:32:f3:f9:47:ba:8d:e0:8b:eb:a2:14:70:96:
c1:a4:13:80:d0:6c:36:4c:90:4e:33:24:e7:d1:4e:
8b:3b:4f:6e:9f:c6:c9:d5:2c:8c:96:12:7d:c0:e2:
01:65:10:6e:a0:39:5a:97:c5:a0:5f:e3:cb:e6:03:
cf:f8:df:ec:ca:0f:83:f5:ab:ab:e9:1e:37:a3:81:
6e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4B:E5:54:2F:15:AB:B1:E8:C8:C9:2B:BC:41:A6:0B:4E:2C:9D:9A
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2f:8e:85:40:8e:8c:be:34:98:ec:8e:21:2c:ac:df:be:cc:
fd:d3:6c:cc:4e:b7:f6:a5:72:26:7a:eb:54:b6:18:c2:c5:84:
d2:2b:17:36:ca:21:ee:23:33:1a:5f:c6:3c:fa:1d:d5:0c:ec:
ca:43:ee:9d:79:65:0f:bd:05:2b:de:fe:db:37:50:49:2c:f9:
18:0f:53:fa:ce:ea:67:af:f0:ab:e6:d5:bb:cd:6a:f7:94:38:
91:3d:ce:da:24:81:8f:73:ca:46:4f:27:2a:46:fd:07:4e:dd:
a0:c5:40:90:c2:c3:0b:b3:83:09:ca:60:32:e9:2d:01:52:12:
9b:2b:5c:14:16:9f:18:1e:42:c0:6d:8e:14:c7:55:6e:96:f5:
a6:b4:ce:ab:0f:35:08:d5:66:83:49:6a:12:9a:39:9f:dd:29:
54:dc:dd:ab:b4:bf:55:46:c9:fc:0c:5b:b5:51:03:92:54:fe:
91:33:7a:75:d4:23:30:a3:5d:6b:39:2c:77:95:6b:83:3a:a3:
56:87:4b:95:ff:78:c9:d7:77:17:19:97:99:0a:e3:77:1e:4e:
f4:69:f3:31:e6:9f:ca:72:1d:b6:14:78:73:e3:e4:48:d9:de:
15:d3:73:4e:94:91:95:2f:42:06:66:df:7d:86:3e:f8:65:5a:
98:26:ba:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:04 2025 by rpki-client