Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
File: 0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft (raw, json)
Hash identifier: gco3gNW8hN1pEguM08dmiweXKF4Ht6kyUckrC2jzYIs=
Subject key identifier: 51:2E:BC:F7:6B:F8:58:5C:05:DD:36:20:86:0B:F0:98:22:BD:70:CC
Authority key identifier: D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
Certificate issuer: /CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Certificate serial: 01984A09D199FB9B0440E146462D44254692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
Manifest number: 1581
Signing time: Sun 27 Jul 2025 04:00:14 +0000
Manifest this update: Sun 27 Jul 2025 04:00:14 +0000
Manifest next update: Mon 28 Jul 2025 04:00:14 +0000
Files and hashes: 1: 0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl (hash: yweVV766hZm2x6jDnvjwWIbMo/1D0OaGfT4MHhkJMVI=)
2: 8YEIarEZx-dYy-m-KWzFFJwMPgc.roa (hash: /Oh4KoguX/e5aBAHRSFC+nV1NgF/Rk6lBFfGk9GKTMI=)
3: aSUDb8sQcFUdmzbKm4gdVmu_3-w.roa (hash: 8GJtsZCv+fojGQVCn6tX0KvBg6L31AUzVNGq91VjeYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d1:99:fb:9b:04:40:e1:46:46:2d:44:25:46:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Validity
Not Before: Jul 27 04:00:14 2025 GMT
Not After : Jul 28 04:00:14 2025 GMT
Subject: CN=512ebcf76bf8585c05dd3620860bf09822bd70cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d6:c9:7d:ea:16:f7:39:cd:ef:61:e8:e9:25:
a9:5f:b3:38:19:fa:e5:ca:d7:53:e9:89:68:1d:be:
c9:62:04:51:c7:4e:2c:5c:53:08:1e:b6:ca:b1:50:
b8:39:de:4b:2b:5f:6b:ae:dd:76:dd:a7:0c:c6:1a:
b1:46:49:7f:37:af:26:3e:81:70:f3:b2:d8:b6:3d:
f5:19:74:b2:40:46:9a:50:20:fc:b7:ce:0b:47:65:
35:cb:bf:88:c3:c5:c7:a4:d8:e0:4a:71:8f:63:b0:
8d:ce:86:07:d8:98:43:44:01:8d:7b:0f:77:a5:de:
5f:5d:d8:40:ef:fe:e0:33:52:f9:36:0b:0b:e1:32:
3c:23:70:34:97:05:ef:7b:5b:87:39:18:18:4c:ca:
ea:ef:6f:05:36:6d:97:ea:4a:85:b1:cc:6e:b8:93:
e1:f9:78:72:fe:d1:95:1b:32:01:13:00:a3:8e:fd:
3d:17:18:00:97:b5:18:d7:65:90:a4:d7:1d:b7:a8:
a5:83:8b:e1:de:a4:56:e9:4a:7d:1f:49:eb:9a:7f:
1e:0a:56:fc:cd:e2:1f:f4:c8:07:5f:c1:00:4b:6c:
a6:ad:31:bf:3c:c5:17:11:4c:7a:20:f1:ba:6e:fb:
f2:1d:79:1e:b1:47:27:e1:14:5d:a4:c7:22:25:0e:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:2E:BC:F7:6B:F8:58:5C:05:DD:36:20:86:0B:F0:98:22:BD:70:CC
X509v3 Authority Key Identifier:
keyid:D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9f:09:39:77:3d:05:3d:8f:28:5b:18:15:bf:54:ae:2f:dc:
76:08:0b:5b:45:c9:42:49:23:18:5d:7d:55:8e:46:8a:fb:1f:
9d:80:fc:66:6c:04:5b:1d:a2:c3:7a:e9:5e:13:6f:58:f2:e7:
00:28:20:0f:67:0f:f4:c0:49:ce:cf:84:ac:f9:0e:03:c0:e0:
fd:4d:b6:58:07:18:05:2b:e6:74:a1:30:0d:c5:ee:68:a4:af:
67:64:23:97:6f:ff:2a:5b:60:a4:7a:7e:c5:15:b0:5b:0a:de:
25:b0:7a:f9:6b:5f:5f:a2:62:21:0c:5f:51:3c:f6:07:0d:44:
fe:e7:53:e5:bb:07:71:3a:f9:21:12:d3:9b:2f:66:40:3e:d6:
83:cd:cb:74:59:1d:f4:ca:38:36:cd:13:2c:4c:f5:73:53:b8:
1f:a4:a4:dc:61:31:bf:0c:31:eb:bb:f7:8a:3b:06:3e:98:df:
b7:1d:b4:b2:29:76:a4:1e:63:2d:a5:cc:5a:7b:9b:d8:73:e1:
eb:67:5e:b5:dc:db:75:92:b5:bd:0e:a2:9a:7e:79:9e:de:ba:
f9:75:db:c3:5a:66:cc:af:b7:ae:7f:c4:fc:44:82:ad:c6:bf:
ff:e5:8c:9b:a7:ec:da:a0:0f:f6:88:44:fd:ba:25:ba:c9:18:
5e:b9:7b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:00 2025 by rpki-client