Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File: DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier: GJuYoxUqUvYavuc8GywWfuRFqtdkeICJLi0d45k42bM=
Subject key identifier: A8:08:E6:7B:67:11:0E:29:51:80:0D:9A:67:B9:C9:22:9B:51:A3:8F
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer: /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial: 0197B7EA2DA410D71E47B1433F44C0C5D53D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number: 12CC
Signing time: Sat 28 Jun 2025 19:01:06 +0000
Manifest this update: Sat 28 Jun 2025 19:01:06 +0000
Manifest next update: Sun 29 Jun 2025 19:01:06 +0000
Files and hashes: 1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: OhSuy5TdfN9yMZ6zNPYTNG6G2n1auwubpAJv2ZMOtlk=)
2: MYyuhG97imzI5Pm1fkTfDLbKlzY.roa (hash: k660F4i2QJei9j4+uwjYRvwDfAYznP8Ua/OgE2wvOJU=)
3: hHJHjw71kMqAy3nNekCDF8-fv6E.roa (hash: fFUGKJTKX7mKwkHmDQYrtXQn9GbWgqgB8AHbXkjZidU=)
4: r4VU_uNqDC_tYxTm1Z-aicTmAoU.roa (hash: GEBOWS5Nmk+ZdCwQMB5B+9yuw+vJ1/5swydSImIPrxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:2d:a4:10:d7:1e:47:b1:43:3f:44:c0:c5:d5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Validity
Not Before: Jun 28 19:01:06 2025 GMT
Not After : Jun 29 19:01:06 2025 GMT
Subject: CN=a808e67b67110e2951800d9a67b9c9229b51a38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9f:8c:da:99:da:b0:b7:f8:20:e1:b1:dd:e1:
8d:8a:4e:87:50:a4:8b:e3:31:0e:ef:7d:df:54:1d:
ca:ba:1c:57:fc:4b:8b:5a:f7:4e:56:1d:79:a4:70:
13:15:0c:ed:e1:7d:71:59:76:55:0f:08:8c:bb:00:
20:9e:2e:41:60:47:83:6f:bd:c3:ce:9c:5a:70:de:
e3:ad:f4:f3:88:89:ef:67:46:3d:e8:3f:f5:e6:c0:
4d:84:8a:ae:44:e0:26:e3:c5:f1:69:f3:40:39:ea:
df:e3:15:7f:80:a0:4a:71:e0:73:9e:33:f3:5c:e4:
55:2d:78:70:67:1f:c1:ea:8b:59:53:4e:c3:e0:28:
df:76:ce:1c:85:a4:a3:39:b5:6f:97:2d:12:09:3a:
0f:01:7e:7f:52:42:71:26:b2:06:7c:68:7a:10:88:
ab:52:b8:c0:a7:59:6e:8b:97:5f:9a:71:75:85:22:
17:be:47:68:74:6e:61:30:9a:fe:37:05:e4:3a:ec:
43:85:a1:1e:a1:52:4a:c3:04:e5:aa:65:30:bb:99:
ed:1b:85:86:27:92:3e:d5:51:5c:37:96:86:4f:a0:
44:2b:57:9d:85:31:cd:48:74:cb:49:a8:b1:4e:12:
28:24:d7:72:72:d0:47:c0:65:57:1c:a9:54:75:51:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:08:E6:7B:67:11:0E:29:51:80:0D:9A:67:B9:C9:22:9B:51:A3:8F
X509v3 Authority Key Identifier:
keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b0:57:0f:e5:94:83:bb:8d:3b:fc:48:27:3f:7b:5e:ac:14:
c2:44:fb:bf:27:af:ce:7c:61:93:fa:31:51:72:8b:8f:6d:c3:
b9:36:dc:3b:18:5e:ac:c7:f6:87:65:6b:fa:8d:c4:8f:13:6e:
87:83:55:90:76:ec:0a:d7:ba:9f:9c:9d:33:a1:72:03:be:16:
93:a6:29:f3:e5:44:53:eb:cf:d1:a9:48:df:a9:52:9d:34:cf:
d3:8b:3b:d6:fb:96:36:14:ac:30:98:93:0a:fd:8d:52:77:5f:
35:5c:64:43:76:b8:6e:32:45:98:b6:a2:e7:83:d4:25:a2:52:
bd:43:89:b3:02:53:c7:82:e4:da:83:43:24:f1:40:89:cf:59:
02:88:92:6f:83:f3:a0:24:b4:43:f9:5a:3d:5b:bb:cd:29:96:
d2:45:81:48:d2:e9:3a:6b:e5:93:fd:9c:68:c3:12:04:bb:c6:
c8:27:7e:3d:9c:a8:b6:41:ce:bd:6e:c4:4e:64:8b:b6:0e:cd:
ff:96:3c:9e:0e:ed:bb:22:9d:c6:99:b1:15:e9:c2:f0:5f:d2:
26:ef:91:4e:ac:88:d3:93:20:8c:78:90:81:b3:89:0a:ac:11:
8a:12:8e:68:0f:f7:83:53:75:c8:6a:5a:13:d3:67:20:14:00:
0b:79:ff:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:46:19 2025 by rpki-client