Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier: gRy+DFJb/dnsKd/puqZ7+g+nmQVwRAUUXUWm9iUKNwU=
Subject key identifier: CC:DD:C0:BE:B9:74:AE:63:C7:46:8D:92:A7:76:A8:7A:4B:2A:6F:3C
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 01974A43B8297D714402A9F44F72B86A9D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number: 01D1
Signing time: Sat 07 Jun 2025 12:00:41 +0000
Manifest this update: Sat 07 Jun 2025 12:00:41 +0000
Manifest next update: Sun 08 Jun 2025 12:00:41 +0000
Files and hashes: 1: oo8iJLtCvQj5tOxPs0jWtfp64Qc.roa (hash: XKlJdTZMxFrgX9Jc6CyAN7uX/wDP3zOgo6gX8cl2wYU=)
2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: 3iiIJ+ja3PPmDXQvAke4xRzLXtzzGmf1Vu5wEgYILCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:b8:29:7d:71:44:02:a9:f4:4f:72:b8:6a:9d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Jun 7 12:00:41 2025 GMT
Not After : Jun 8 12:00:41 2025 GMT
Subject: CN=ccddc0beb974ae63c7468d92a776a87a4b2a6f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:46:d1:3a:12:71:3f:16:aa:7d:07:d0:86:
ba:6d:82:26:c4:a1:3e:9a:ba:27:9c:89:86:fc:b2:
d4:22:ba:dd:27:be:ce:fc:4b:92:05:62:85:1a:85:
d6:e7:f0:e8:9e:14:2b:a4:46:2a:4e:99:54:28:b5:
e4:00:82:dd:7f:18:07:bd:45:01:12:9e:e9:9f:c3:
c4:52:d3:2f:e3:3b:7c:8c:bf:ce:dc:ee:59:f4:f7:
65:4f:ee:21:33:5f:e2:17:5a:01:1a:05:52:b1:5e:
b6:97:ec:9c:89:3d:0b:1a:27:a5:9a:ff:b3:c0:a6:
55:b6:4a:45:a3:c3:0d:e0:48:c6:9e:e0:6b:5f:11:
c1:6f:f1:42:d6:59:e7:14:3c:82:b1:a7:35:61:db:
8b:28:7f:ef:73:d2:83:27:69:61:9d:8e:b2:06:05:
ba:ef:10:0d:05:a1:e0:90:26:0f:4f:9f:8d:65:6e:
33:4a:d2:a8:49:ba:02:d5:05:ba:03:23:96:e6:eb:
75:8c:81:e2:4a:cb:58:be:a5:75:49:6b:00:bb:f1:
a3:17:bb:4c:ed:4a:d7:fa:77:9b:a7:d5:18:a2:13:
40:d5:9a:90:77:69:32:31:30:50:f0:1b:c9:77:fe:
6d:bb:4b:d5:0f:22:a6:7d:22:e9:4c:43:43:b8:04:
99:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DD:C0:BE:B9:74:AE:63:C7:46:8D:92:A7:76:A8:7A:4B:2A:6F:3C
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:aa:3f:c2:73:d9:73:04:9d:4f:9e:65:84:75:8b:40:cd:7f:
fd:f4:15:55:c8:ca:fa:69:8b:7d:ce:b8:7f:b1:d0:4c:a4:3e:
bb:41:22:ab:50:79:0b:0a:61:76:0e:12:44:93:2f:c4:df:08:
86:f7:be:8b:e9:5d:54:1f:e9:9c:89:54:5d:a8:78:a4:3a:ae:
cb:8a:44:43:0f:33:49:1f:2d:3f:db:b7:e5:ae:13:43:77:12:
de:b2:b6:54:5d:6c:cf:a0:93:ff:18:b6:54:15:ba:8c:86:ec:
5c:73:7c:bb:82:22:35:f3:ec:d4:50:20:38:fe:ce:2a:81:76:
35:a4:cd:a6:3b:8f:ae:c9:cf:4b:c0:34:96:1e:7c:62:9d:ba:
35:0e:ae:da:55:bb:20:f7:fa:2e:1d:a9:e8:68:fa:6b:e2:88:
57:e3:51:50:20:8c:bb:9c:d7:00:2a:d3:d1:c2:a2:b5:e3:f6:
7f:a9:e6:4f:90:82:cd:fe:dc:af:c6:07:9b:be:7c:7f:b9:c9:
85:76:e6:5a:82:bf:6b:6e:5a:dd:1b:8d:32:d4:cf:2b:ce:39:
96:15:79:22:d0:df:c6:e5:3f:7c:8d:e5:09:68:80:91:42:e4:
3b:1b:bf:da:81:63:42:1b:43:98:dd:0c:cf:1d:1d:b9:da:96:
66:53:28:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:22:28 2025 by rpki-client