Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier: X/x/VTmOziOlFgKzIN8Y8XjdkeVzNgqb4iUEmcohgvk=
Subject key identifier: A1:EF:3D:BC:CF:F3:34:B0:59:3C:D8:F8:02:9D:8F:6B:23:A7:B8:BE
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 0197B6D78C894108A409B8265D102A337E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number: 0C4B
Signing time: Sat 28 Jun 2025 14:01:08 +0000
Manifest this update: Sat 28 Jun 2025 14:01:08 +0000
Manifest next update: Sun 29 Jun 2025 14:01:08 +0000
Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: AAM9taLhRDDX93oue/E+uKqNS1TkDtY09QB2oaoriZ0=)
2: H2kmwp7spfqcIMI0clIF2k1Rvg0.roa (hash: zHi445ArIHvkJpCdV0dHlskzjilRLemFqJLsU1rnf8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8c:89:41:08:a4:09:b8:26:5d:10:2a:33:7e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: Jun 28 14:01:08 2025 GMT
Not After : Jun 29 14:01:08 2025 GMT
Subject: CN=a1ef3dbccff334b0593cd8f8029d8f6b23a7b8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:d1:61:30:4a:28:8a:7a:64:84:8d:51:0e:
2f:79:37:75:81:52:07:05:c8:49:2a:79:87:2e:90:
0c:cf:2b:bc:f0:d7:de:0b:fe:05:ad:d2:87:05:27:
47:8b:2b:ae:32:3d:22:65:ce:e7:e9:35:4c:69:c2:
62:76:02:fc:84:ad:3a:09:b6:6d:22:79:90:91:26:
25:01:67:dc:8a:38:e3:23:3d:37:c7:8a:57:d5:06:
e6:44:b6:de:2f:12:09:d7:4b:ba:b9:15:be:b4:55:
03:c7:89:6e:f2:73:32:7d:c5:fb:a2:61:fb:9d:bc:
2d:f7:db:52:a8:9d:1a:3b:65:c1:4a:e3:ad:cc:89:
56:24:02:7f:47:c5:dd:5f:d0:8e:2e:0d:3b:aa:f2:
70:cb:e5:31:4b:bf:4a:90:b0:5d:4d:24:1a:2f:fa:
02:a4:3e:65:b2:b8:2f:3b:0e:b3:ba:e9:02:04:dc:
b7:65:44:f0:2a:10:cb:3a:55:7b:89:ff:a2:bf:94:
7e:e8:c7:45:84:5f:4b:d6:12:ba:b0:45:8f:ea:4a:
a0:7c:96:f4:70:a1:31:b4:5b:c6:95:05:8d:83:0e:
c1:a4:7f:08:34:40:f8:4f:b8:31:e3:82:fe:5c:cd:
23:2c:12:f7:69:1e:a3:b6:27:46:08:81:0d:60:ad:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EF:3D:BC:CF:F3:34:B0:59:3C:D8:F8:02:9D:8F:6B:23:A7:B8:BE
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:92:2a:18:f6:c5:fc:03:5a:45:41:61:36:fb:4e:b6:a2:0b:
48:83:d8:61:44:b7:71:45:77:76:d7:2d:ca:4e:18:cd:71:50:
72:bc:ff:25:65:b7:92:39:f7:df:44:63:a8:f3:1c:6b:86:a2:
2e:c8:87:0d:15:df:b2:74:2e:50:32:aa:73:1a:4a:43:e5:8e:
4f:41:6f:50:af:6d:d5:88:a9:1f:12:0c:52:51:eb:1f:a8:d9:
80:db:75:09:5e:3f:08:3e:fc:10:a4:b8:66:d6:3e:5d:7b:d4:
97:21:d8:a4:08:6a:18:3f:c8:a4:70:10:b9:6e:6e:d8:6d:56:
b9:49:2e:41:93:45:b0:73:e4:39:15:42:9e:37:97:f0:de:11:
4b:31:fc:c4:6a:2a:f0:7a:1d:63:c3:9f:47:62:86:6a:e4:a1:
a0:4a:61:62:2e:8a:2c:d1:a1:90:4b:fe:8d:d2:89:09:a8:9a:
3f:44:e7:3c:33:ce:e4:4d:88:76:00:15:68:6f:86:dc:64:59:
58:91:f1:f7:85:83:79:24:35:08:66:48:8e:21:1f:58:a1:9d:
b2:3e:2e:14:b9:e2:8a:84:26:c3:05:58:9a:a1:f7:90:88:25:
13:b5:98:e7:c8:1f:a0:19:74:ef:71:0e:2b:8a:8e:94:7f:a6:
59:0d:3c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:08 2025 by rpki-client