Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json)
Hash identifier: vYZqTFAd/NuVsGCxMsMUn2qi02GW5ZkTTUiKoifnti8=
Subject key identifier: 5D:EF:A9:30:06:8D:9B:4B:07:27:3D:A5:F3:12:CE:0A:52:49:3A:23
Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Certificate serial: 0197B88EC42E4AC98078E03B99A2F50C4546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 22:00:53 +0000
Manifest this update: Sat 28 Jun 2025 22:00:53 +0000
Manifest next update: Sun 29 Jun 2025 22:00:53 +0000
Files and hashes: 1: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: ZDzVgeJKpzWfXepZ3ihBYrI4+EdQP1hwHRfQ9ISbn4M=)
2: yAlyRVhdV45Fhlz_SXSaEBYr95c.roa (hash: hbq+j/95NHgwMsXopbiJ/iZdMmpOcPkLx/w1fsKJD10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:c4:2e:4a:c9:80:78:e0:3b:99:a2:f5:0c:45:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3
Validity
Not Before: Jun 28 22:00:53 2025 GMT
Not After : Jun 29 22:00:53 2025 GMT
Subject: CN=5defa930068d9b4b07273da5f312ce0a52493a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:fb:19:88:cb:c4:95:d8:2b:76:3a:d3:8f:
b4:0f:dc:7e:78:23:9f:b0:fe:41:6d:41:40:8f:0f:
16:a3:28:c8:64:da:b5:fa:9f:a7:a2:53:fa:9b:82:
c2:b2:6a:ee:d6:99:6a:59:e4:15:17:1a:28:59:54:
83:66:7b:c9:b6:3a:a7:6b:cd:4b:ae:f4:c5:34:4a:
9b:ba:53:8f:2c:72:c8:d0:ee:38:9b:0d:06:fc:d8:
53:c9:29:bd:0b:cb:35:38:63:2b:e2:d4:e0:b9:f4:
cc:e3:a5:f6:d9:61:fc:43:2e:37:d4:55:53:9d:b6:
7f:cc:c1:74:4a:72:36:f3:75:0d:00:25:c9:92:b0:
ba:00:a1:ae:5f:08:4c:fa:22:e4:d6:0b:be:ec:45:
44:4d:b6:d0:02:99:21:50:ee:01:c0:36:2f:91:d3:
18:89:37:11:2c:4c:20:80:60:a2:4d:e8:74:56:f0:
83:d9:1a:c5:89:2c:91:65:05:0d:36:a9:03:90:8a:
6a:41:17:50:3b:03:df:27:bc:e0:12:37:f9:b5:27:
34:7b:b0:07:07:b3:44:19:38:c7:6f:13:bb:ef:dd:
f5:3f:4e:d6:9a:7a:cd:d1:45:cd:fb:81:8b:13:db:
f0:b6:67:6e:da:54:76:60:20:22:64:cb:0f:b9:3a:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EF:A9:30:06:8D:9B:4B:07:27:3D:A5:F3:12:CE:0A:52:49:3A:23
X509v3 Authority Key Identifier:
keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e7:d6:c6:27:8d:83:5f:08:3a:e0:cb:dd:75:76:0f:35:66:
7b:06:e5:20:bf:91:f3:1c:10:82:b9:59:24:42:f7:ca:e7:d9:
5e:f5:d6:99:83:51:41:f9:89:80:3a:fd:64:c6:5b:a1:1a:7d:
d7:27:64:ab:76:77:b9:48:b6:90:d4:a6:04:ee:97:81:65:1d:
00:02:37:88:29:50:05:af:f1:97:b6:21:a9:6d:c2:7a:e5:52:
63:ff:90:58:0f:a6:90:e1:e3:2b:ea:3b:99:62:47:cf:32:3a:
3e:00:06:94:0a:9b:1c:f4:d6:ee:8c:bd:13:8f:69:fa:b6:f1:
93:81:f0:d7:b8:e1:ca:65:cb:be:cd:61:70:4a:fb:63:30:3b:
50:af:7b:8a:c1:b1:0d:33:4c:06:28:f0:4b:49:70:ce:43:11:
2d:27:2b:e2:40:62:0c:a2:82:e9:71:69:cf:92:40:02:2f:43:
fe:28:90:9b:2b:79:73:c2:6a:aa:d0:e4:27:62:b2:e9:a9:02:
c2:1f:8a:7e:11:b3:a3:3b:9e:a3:aa:31:bd:ce:2f:48:9c:17:
0a:eb:d5:25:a4:6f:95:70:da:09:eb:d2:0a:5f:a4:35:b9:dc:
fb:7b:fc:f2:14:85:84:57:83:4c:55:0a:0c:ef:ae:cd:e3:71:
5e:45:44:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:32:08 2025 by rpki-client