Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File: 08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier: 4vj7KkdfF1kZzntJqwi/VBFKN5/8y1fwIFjx6xKt+Y8=
Subject key identifier: 70:04:C0:5B:68:7F:35:46:7B:04:68:64:93:4B:FF:38:4D:8F:46:BF
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer: /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial: 019752D902484AC5CE61C2F1F3E0E74B68B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 04:00:42 +0000
Manifest this update: Mon 09 Jun 2025 04:00:42 +0000
Manifest next update: Tue 10 Jun 2025 04:00:42 +0000
Files and hashes: 1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: ukdfM9iTCSNf6AKjXhVSiqCckAhqcDiLYTB+1n0s6pA=)
2: Z9dAkp6DWkibOyxuZSYF8JC0FP8.roa (hash: Di2cqBcEpf6hgxQLLA7v+y+JplI7ajbTFP4r/fEMeKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d9:02:48:4a:c5:ce:61:c2:f1:f3:e0:e7:4b:68:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Validity
Not Before: Jun 9 04:00:42 2025 GMT
Not After : Jun 10 04:00:42 2025 GMT
Subject: CN=7004c05b687f35467b046864934bff384d8f46bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:5c:21:41:e8:a4:8e:51:a6:f2:01:41:6a:
a1:6c:f7:d4:95:dd:f3:51:72:ef:3b:ea:de:57:92:
46:8f:37:d5:d2:bc:25:64:04:77:09:1b:86:7d:5c:
c9:ff:b7:a0:c2:42:3d:04:bc:58:e9:de:43:bb:8e:
2c:da:87:e2:84:e9:31:1f:7d:ff:a7:7d:c8:5b:8a:
2e:a0:91:c8:26:eb:44:a4:d0:17:bc:fe:23:4b:51:
84:7d:5b:68:9d:64:d4:fd:f4:3e:d6:e8:08:34:0c:
84:13:09:94:ed:de:6d:cb:8b:54:23:5f:92:53:e8:
da:bf:8a:b1:8b:a9:6a:ff:8b:b4:71:97:ab:4c:69:
58:94:de:27:45:8a:67:ef:34:6b:8f:51:98:98:10:
51:74:58:e2:37:9a:cc:9f:fe:f3:48:a4:df:eb:9c:
ca:d7:46:de:30:53:89:1b:d3:6c:44:46:77:d2:25:
05:27:c9:39:3d:63:7a:a9:42:32:6b:8d:18:f5:ac:
2d:e9:e7:ab:ed:d0:bf:b5:a7:99:0a:76:eb:4b:6e:
3a:f6:fa:a9:94:bc:98:47:9c:55:7a:8b:4f:7f:da:
c3:ec:6d:9b:bd:de:74:c0:8e:5f:6b:60:9f:a8:20:
ad:60:f5:c6:eb:a1:c5:d8:79:c2:9a:97:6d:f4:01:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:04:C0:5B:68:7F:35:46:7B:04:68:64:93:4B:FF:38:4D:8F:46:BF
X509v3 Authority Key Identifier:
keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e7:ab:0f:ac:dd:99:d0:a2:d2:55:4e:38:82:e3:e0:7b:39:
98:68:b0:d5:24:2e:86:9d:05:f1:24:49:fe:95:05:3c:05:65:
45:bb:9a:94:f1:7a:31:c3:19:f8:99:59:dc:80:a6:cc:24:0a:
cb:80:dc:4a:51:65:d3:57:06:d8:3e:cb:8b:9a:27:70:8b:fd:
c0:1a:23:41:30:95:cf:9b:7a:f6:46:71:59:bf:99:30:bc:e7:
ec:98:b5:ad:ad:e5:de:37:73:ce:0a:e1:49:08:95:6b:47:9e:
a9:bd:a1:00:32:e1:47:fb:8d:4d:28:60:a5:f9:09:c9:2a:06:
bc:fb:c1:d1:00:1e:a2:23:96:a4:cf:af:4c:74:3e:2b:6f:0f:
35:17:8c:14:70:f8:b5:fe:89:9c:b8:ce:09:12:13:8c:50:a3:
e6:c0:7d:bf:14:4e:df:03:16:00:6b:43:60:7b:88:5f:17:bd:
f2:fe:37:1f:84:92:2b:9b:26:48:77:1b:63:58:9c:ac:94:d6:
b4:ee:d0:4a:b4:06:54:05:10:8a:85:8c:f8:be:2b:e3:4b:7c:
05:a8:3a:76:e1:f3:79:02:0f:00:60:22:d3:02:5a:b8:00:ca:
2e:41:59:2a:46:1e:45:3f:6b:d5:db:51:d3:49:9d:14:6f:c8:
3c:60:db:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:17:05 2025 by rpki-client