Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
File: 0krezYS7F0i9NbmezqRncuAeyTU.mft (raw, json)
Hash identifier: N4ahcXnwVQPo+87GucU4nc3KYy4Gk0GpFhC+OU+Ak9I=
Subject key identifier: D7:58:E1:AA:4F:23:7D:ED:0D:BE:97:90:5A:CD:57:D1:30:30:95:1C
Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
Certificate issuer: /CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Certificate serial: 0197B7451EE104428A57BE3E588DE9A3D554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 16:00:49 +0000
Manifest this update: Sat 28 Jun 2025 16:00:49 +0000
Manifest next update: Sun 29 Jun 2025 16:00:49 +0000
Files and hashes: 1: 0krezYS7F0i9NbmezqRncuAeyTU.crl (hash: tq4UvhQiajw1RL2VZZ9V6C2cswCTn0pNXiIP7DOSxdA=)
2: UON5AT9SXUWq39L68I_y2_ZUikk.roa (hash: JwjZjFuzIaj/y6AQtmJH9bJqGEr4cg/qlCiSjx+pXxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1e:e1:04:42:8a:57:be:3e:58:8d:e9:a3:d5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Validity
Not Before: Jun 28 16:00:49 2025 GMT
Not After : Jun 29 16:00:49 2025 GMT
Subject: CN=d758e1aa4f237ded0dbe97905acd57d13030951c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3e:f8:b8:3a:fd:4f:a1:21:af:f0:19:ad:e9:
60:b6:b2:fe:e6:14:9c:ce:63:71:0c:15:03:3a:48:
1d:af:25:b8:62:90:d8:3e:59:31:6e:b3:a9:a0:dc:
e7:b2:ae:ae:e4:e8:6d:69:7e:2a:c0:08:b7:84:2d:
94:92:c5:72:bc:78:3f:4f:9e:ad:26:68:bf:46:31:
09:60:64:72:3d:bc:f4:35:93:f4:25:36:b9:61:cd:
aa:1d:ee:e9:35:37:d0:f4:1f:24:1c:fc:93:d9:86:
0a:ea:eb:b3:bd:a9:50:63:62:ec:92:a5:f8:4d:16:
77:7f:ce:5e:e2:62:96:0c:61:e7:ff:1d:cd:cc:1b:
22:5d:7b:1c:4a:d7:32:b2:4d:af:19:6f:e6:3c:27:
3c:11:09:e4:86:c4:b8:85:5f:c2:a7:07:1c:54:c6:
f8:02:12:4a:fe:54:21:06:c6:f7:60:f1:74:71:26:
f3:f8:05:ba:c4:7e:ff:f4:2c:2a:57:a4:11:12:9e:
6f:51:60:15:f1:1e:52:ce:25:c7:fb:19:c5:89:17:
c3:d7:0d:ba:0e:58:02:46:cc:d2:71:8a:13:38:c4:
37:60:81:c3:3d:7b:77:f7:66:4c:f0:5d:7c:45:18:
22:e3:08:93:2b:1c:b6:5f:10:03:cc:20:d1:ab:6f:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:58:E1:AA:4F:23:7D:ED:0D:BE:97:90:5A:CD:57:D1:30:30:95:1C
X509v3 Authority Key Identifier:
keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7e:7d:c4:be:68:f8:32:2c:7b:a1:8e:86:e3:5b:7e:6d:f3:
65:08:df:e4:8a:55:0c:be:62:ad:4c:9d:bb:d3:94:cd:cd:cf:
32:51:9a:a0:0a:9c:7a:d3:e8:15:e7:e9:08:74:75:d4:80:17:
d1:53:99:db:68:cd:87:1b:6a:23:dd:2e:a3:76:cd:4f:d8:46:
79:4d:44:87:21:8b:ed:d1:58:8d:1d:7b:81:ed:d5:bd:17:75:
48:d8:3e:20:c3:a4:38:78:72:15:5e:57:de:73:30:3b:fe:b8:
bd:02:5a:af:f8:9c:6c:d8:31:af:c7:af:17:e5:5c:35:8d:0b:
97:45:81:fd:ca:1a:85:59:10:e2:73:0d:3a:30:07:98:79:bb:
01:32:fd:ec:ec:75:3e:5a:09:4d:0a:d9:5e:d9:55:3b:55:b0:
24:ba:6e:f7:79:ce:9f:ad:1c:dd:92:fd:1d:c4:9a:67:bd:87:
d6:c4:6c:20:fd:6f:75:fc:35:f1:e2:49:1e:e5:67:bd:92:62:
cc:48:b6:74:39:d0:db:a6:6f:dd:2d:39:d8:50:84:dc:91:52:
13:ca:7d:b2:da:1b:40:20:7c:1a:04:23:f1:a6:d8:cf:85:48:
30:c8:ae:8c:cb:ec:4c:64:6e:5c:75:fb:92:27:50:15:d0:0c:
f1:37:00:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:19 2025 by rpki-client