Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
File: Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft (raw, json)
Hash identifier: jOHu/IkjntF3Ov1CnYTDODLms6sL/bYz0exGkvRMTEw=
Subject key identifier: 0D:07:69:E2:ED:60:E0:3B:D4:D6:13:23:52:90:CC:61:67:FC:D1:4E
Authority key identifier: 21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74
Certificate issuer: /CN=21ae8e675e2ed20095983cbb72084f9740281b74
Certificate serial: 0197B88EA37ABD17B15ED4B487598E9075D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
Manifest number: 05F1
Signing time: Sat 28 Jun 2025 22:00:44 +0000
Manifest this update: Sat 28 Jun 2025 22:00:44 +0000
Manifest next update: Sun 29 Jun 2025 22:00:44 +0000
Files and hashes: 1: 1-2_B9Ogc8_x7nBs1jdqDYo3SFDQ.roa (hash: ZY8ZMErSrWlcbHGhfdUXbnzcBBOjC4a82DQaY7L6wwY=)
2: Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl (hash: MGjuBidvnEyNPTKdSyy8paQ6QCJ9SBA6IicPl5M8SkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:a3:7a:bd:17:b1:5e:d4:b4:87:59:8e:90:75:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ae8e675e2ed20095983cbb72084f9740281b74
Validity
Not Before: Jun 28 22:00:44 2025 GMT
Not After : Jun 29 22:00:44 2025 GMT
Subject: CN=0d0769e2ed60e03bd4d613235290cc6167fcd14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:5c:ba:67:83:a1:f1:a7:0f:f7:5b:18:0f:
00:4f:4a:be:a0:00:6a:e3:da:24:c1:0a:ca:e6:c3:
1e:ac:11:75:86:a8:47:70:07:62:22:9f:04:bb:7f:
66:99:6e:4e:a0:d7:00:00:75:a7:24:12:86:68:0b:
24:b5:69:48:ed:7f:a3:7e:09:3c:d9:33:0c:1e:08:
23:78:89:59:61:fb:de:82:a3:26:f0:e2:11:36:ab:
96:af:b3:c0:b0:ae:1f:65:a0:db:b8:8d:56:ad:04:
99:25:a8:9d:8a:da:84:4d:32:19:41:c1:c3:d3:7e:
82:10:00:1d:c2:f3:9b:4f:c8:d5:e4:f5:50:1f:d4:
01:eb:77:5f:91:01:88:e8:dc:dd:fd:81:b8:c1:72:
22:78:7f:4b:19:f0:3e:7e:db:c3:51:8d:c7:7c:8f:
f4:96:98:79:db:4d:59:49:e5:17:93:cb:72:30:ca:
dc:1d:c0:f3:9d:5b:d1:70:67:18:93:15:2e:78:e6:
39:99:2c:bd:e2:f7:13:91:a2:a2:45:cf:9a:94:4d:
a3:52:84:96:ee:0b:b9:0f:7a:9d:ed:96:89:cf:40:
96:fb:46:b5:b7:d6:b9:e8:e4:dc:d5:8c:cf:01:52:
33:ae:13:8a:95:e7:88:7b:9b:20:fc:e4:29:7e:02:
c9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:07:69:E2:ED:60:E0:3B:D4:D6:13:23:52:90:CC:61:67:FC:D1:4E
X509v3 Authority Key Identifier:
keyid:21:AE:8E:67:5E:2E:D2:00:95:98:3C:BB:72:08:4F:97:40:28:1B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9f79f9-3fde-45b5-9203-4f7f263cfaa0/1/Ia6OZ14u0gCVmDy7cghPl0AoG3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:52:4b:87:b2:21:a5:ec:f7:73:cb:96:13:f6:b2:4f:b2:17:
46:9c:cd:2a:63:b8:bd:b1:0d:a2:98:f0:04:f1:8d:5e:31:c7:
db:17:85:9e:b8:91:13:47:2b:75:b4:36:92:76:07:74:45:0f:
8b:ea:24:4a:e1:45:d3:a6:4d:4f:53:cf:f7:2d:03:10:e8:e8:
54:2c:c5:e6:fa:03:86:d4:52:4b:e4:75:b5:ee:4b:ff:9e:e1:
b5:ac:8a:c6:18:fc:3c:65:e4:a8:5a:d8:35:6e:07:e4:88:72:
60:aa:ba:51:69:3f:ec:68:a7:b1:a1:4b:7e:4e:fd:73:40:92:
65:f3:d4:39:2e:6b:3e:a2:57:d5:66:83:ba:f8:15:62:99:76:
a0:db:49:65:c2:f2:4c:0c:2e:d3:cb:1b:97:71:e3:28:4f:6b:
95:db:8f:73:ce:17:0e:f1:93:c2:95:39:87:8f:fb:91:d9:b0:
f2:34:0c:8b:3b:90:8a:9e:36:37:f6:41:04:1b:f8:1e:90:76:
44:1e:5d:c0:b1:ab:da:2d:d4:81:15:cc:fb:da:21:67:08:32:
78:d7:fb:d2:40:b9:5a:22:93:70:b0:26:48:a2:d5:23:b5:ac:
c9:ed:9c:09:1a:be:e1:e5:fd:74:6d:8d:3b:46:14:79:b7:22:
15:0d:d0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:22 2025 by rpki-client