Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
File: 77RcySOXjBokve6WzHs683OG0qg.mft (raw, json)
Hash identifier: j0NPm2J6ucs3HPYBE5eXADuHL++TazW4eMA/FZ4+akw=
Subject key identifier: 4F:32:B9:D6:33:58:4B:40:28:3B:12:51:1A:09:53:C6:1F:F7:EB:5F
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Certificate issuer: /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial: 0196BDEE4310232AA8E6724905F87A0CCC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
Manifest number: 0CD6
Signing time: Sun 11 May 2025 06:00:30 +0000
Manifest this update: Sun 11 May 2025 06:00:30 +0000
Manifest next update: Mon 12 May 2025 06:00:30 +0000
Files and hashes: 1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: wJUBh2nvK+1ybXIH31nytd6/gap/HqJ/hDevgnqGumk=)
2: ONW_HHb2ZjsySF4n5zNLufP_Ugo.roa (hash: Fs9suOzCDzlX3MVkt67omPbuhLWfHekY4xcrsMfgW7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:43:10:23:2a:a8:e6:72:49:05:f8:7a:0c:cc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Validity
Not Before: May 11 06:00:30 2025 GMT
Not After : May 12 06:00:30 2025 GMT
Subject: CN=4f32b9d633584b40283b12511a0953c61ff7eb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:87:62:96:59:98:54:e3:39:51:a9:26:6e:
08:f4:ca:63:3d:12:80:bd:9d:7d:04:43:5c:5b:a6:
13:ef:6d:56:3e:07:e5:c5:a1:aa:17:4c:0d:02:65:
1d:dd:6f:91:c8:6f:20:db:06:18:71:74:52:7d:fa:
53:05:f1:fd:bc:ec:a5:a8:0c:5a:6b:47:36:06:90:
d0:a4:c8:84:b3:5c:32:29:29:b1:50:ad:11:4d:90:
81:0f:14:5f:83:c2:d3:b9:b1:b8:b7:3c:b1:d6:53:
5a:68:23:55:8e:3c:2f:0a:e8:87:73:66:79:e5:4d:
62:7b:0f:1e:5e:2d:a4:21:97:18:dc:28:57:ae:93:
86:af:f3:f5:cf:02:95:b7:58:5d:14:d2:bf:f0:68:
08:9f:d3:51:0b:50:b4:75:3b:72:6c:dd:60:3c:48:
fd:2f:2e:24:c1:56:02:01:de:5b:a5:2c:e3:56:31:
71:ee:a0:ed:1f:c3:3a:be:21:c2:51:a0:5b:8a:d7:
70:5d:d7:da:34:a6:e8:64:ad:cd:4e:c7:2d:9c:a9:
48:19:7a:b5:9f:bb:c4:3e:57:ca:bc:e3:cd:85:d9:
32:24:2d:e4:6b:aa:f4:1c:40:88:79:88:8d:57:d8:
83:bc:0b:69:fa:a0:67:1c:82:a5:50:08:3f:c8:e4:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:32:B9:D6:33:58:4B:40:28:3B:12:51:1A:09:53:C6:1F:F7:EB:5F
X509v3 Authority Key Identifier:
keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8c:06:01:9f:bb:d4:49:3a:10:dd:7f:99:79:c2:9c:0a:9f:
a6:b4:7d:5f:df:d5:5d:1f:6e:55:fe:d6:86:33:dc:a0:72:e5:
77:2a:ac:b8:80:3e:93:0a:b6:70:8d:72:af:21:37:a7:a3:3c:
fc:ef:63:39:6e:93:5d:93:12:c3:98:f7:65:3c:d2:f7:d1:51:
ab:02:65:97:83:7d:71:17:3a:a6:62:60:3d:9b:61:91:4f:fc:
dd:94:4a:17:8b:a5:ec:f4:f8:36:ba:59:d4:9c:a5:78:76:1d:
8c:66:dd:7d:f5:71:2b:69:5e:1c:63:00:fc:cf:41:b4:dc:23:
7d:2a:90:a9:24:1c:30:54:bc:ee:bb:49:05:50:7e:59:22:50:
eb:2d:66:56:3b:a9:f1:0a:2a:d4:98:ec:88:ab:c9:a9:36:b9:
ab:24:00:6d:d9:d5:29:d7:33:a1:96:a8:fc:f2:11:d7:da:68:
26:13:03:0d:96:52:25:ec:5e:aa:97:1f:2a:8d:54:45:68:72:
bb:fc:9c:08:cf:3a:6e:37:cd:65:d1:57:42:e1:a1:62:b8:1d:
97:48:cd:4b:0a:06:15:a4:e0:95:56:db:1a:a7:86:77:4b:34:
5a:2d:08:10:76:20:62:bb:b1:7e:4f:68:35:c2:f6:fd:41:5b:
b7:60:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:41:47 2025 by rpki-client