Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
File: 0i870LrmA6t5BgKpa7vEK1Mi6I8.mft (raw, json)
Hash identifier: sydi8BYv0kuYyE50xL5JKk3ZL1Oy+Uzf6DukhCROJ+8=
Subject key identifier: 46:7A:C5:E3:06:80:DA:9F:DA:46:FD:40:9C:66:6C:4D:89:23:D8:5A
Authority key identifier: D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
Certificate issuer: /CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Certificate serial: 0197C793D6AC987AADAD9968E45B41FB37CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
Manifest number: 0C3D
Signing time: Tue 01 Jul 2025 20:00:44 +0000
Manifest this update: Tue 01 Jul 2025 20:00:44 +0000
Manifest next update: Wed 02 Jul 2025 20:00:44 +0000
Files and hashes: 1: 0i870LrmA6t5BgKpa7vEK1Mi6I8.crl (hash: 7RBKmB/24jlNNYAR/J/tnMX/g4me37/WhJAHOtf27gY=)
2: 1-Mnf3JnGm30D3TVdL8D8i-JJTg.roa (hash: FQArZOtG/iI5+2OZ+rGhEkabMbeYZiFVJ69aFAVvKUM=)
3: ViACi2znHcxjvEoTWJabRySlSug.roa (hash: /lKDXYbMBEGiN9zYRBMEKiyvRO0eOc45ePzpVSUQyuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:93:d6:ac:98:7a:ad:ad:99:68:e4:5b:41:fb:37:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d22f3bd0bae603ab790602a96bbbc42b5322e88f
Validity
Not Before: Jul 1 20:00:44 2025 GMT
Not After : Jul 2 20:00:44 2025 GMT
Subject: CN=467ac5e30680da9fda46fd409c666c4d8923d85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:96:1d:14:7e:21:05:6e:0a:b7:29:a0:ed:
47:44:36:d1:0c:cf:20:0a:b8:fa:34:69:0e:67:2b:
8f:3c:10:1d:64:dd:ea:a2:3c:41:93:8e:e1:a5:0c:
d1:5d:b1:f5:4b:b9:53:59:bd:06:e1:b7:b8:de:6b:
d6:61:19:f8:c1:67:bd:12:4d:ce:97:5f:31:48:b5:
3b:b9:d6:40:d2:ee:47:9d:17:af:42:ff:dc:b3:08:
c7:81:d0:b8:d4:f8:58:e1:28:4e:c5:af:e7:22:34:
88:1d:d4:1b:61:fc:d7:9f:df:49:a3:d3:15:f8:2e:
7b:65:97:ab:c7:d6:c7:3a:04:ca:6b:ab:3b:a3:c5:
d0:8d:5c:ff:91:45:cd:dd:65:30:2f:69:18:2e:8d:
f7:b8:f7:40:a5:4f:55:d1:d5:1e:aa:fa:bf:50:18:
df:59:a2:5c:7a:70:a6:e0:f7:b1:b4:ae:70:b3:be:
1a:0c:7f:24:ac:40:71:57:5f:84:8a:02:2f:b1:2c:
75:5d:7e:57:05:74:6d:0d:ab:1f:73:88:01:c2:86:
bb:ca:a2:18:e4:1d:27:49:9a:b3:4b:80:51:35:9a:
d7:7f:f0:a2:db:ae:f8:c9:b8:5e:35:dd:d9:e3:59:
7f:60:79:0a:00:fb:1f:cb:be:f6:7a:52:46:e6:73:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7A:C5:E3:06:80:DA:9F:DA:46:FD:40:9C:66:6C:4D:89:23:D8:5A
X509v3 Authority Key Identifier:
keyid:D2:2F:3B:D0:BA:E6:03:AB:79:06:02:A9:6B:BB:C4:2B:53:22:E8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i870LrmA6t5BgKpa7vEK1Mi6I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6e51cb-517f-4cb1-a3a0-d721bd2e9d53/1/0i870LrmA6t5BgKpa7vEK1Mi6I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:01:6e:6a:3a:cb:42:40:e5:49:8b:9d:3a:7b:63:36:29:11:
b1:d9:fb:9b:14:7f:a1:c5:8d:a4:eb:e1:04:ac:b2:12:52:c9:
55:7a:4a:9b:f2:9f:5c:82:49:36:9a:75:d1:d6:f3:93:71:18:
28:16:e7:cf:c5:14:fc:67:16:ca:49:0b:bd:5a:8c:a3:6a:72:
bf:68:03:45:7c:bd:ef:8c:1b:57:5e:f1:64:41:a2:48:25:df:
69:4a:6a:e6:80:04:86:9e:a5:44:f0:23:af:f7:09:d3:a2:d2:
d9:48:9b:ac:9e:fd:34:ae:f3:79:fe:39:bf:9f:31:dd:05:9d:
6a:c1:4e:5e:00:71:ae:e7:b4:84:6d:23:a3:32:50:0b:24:b0:
ef:90:70:45:f6:90:1e:c6:74:e2:32:12:60:e7:d4:39:20:cd:
fd:1f:d1:92:9c:0a:f2:30:43:88:6e:00:12:01:b3:ea:a0:6c:
06:10:66:c5:bf:8a:ea:dd:df:d3:0b:a9:03:29:19:11:75:17:
19:83:1a:e7:1f:7f:1d:c9:0b:29:1e:68:62:c3:9e:70:03:89:
ed:e5:76:36:0d:3e:bc:fa:b9:46:e5:8a:c8:ab:ab:6f:d4:12:
31:14:f6:fa:3d:c8:03:a7:fe:fe:07:d2:fe:77:04:bc:ff:59:
ae:10:ff:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:05:09 2025 by rpki-client