Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
File: 0VK0wfXUhO78KxWX9FUAOrZUsFU.mft (raw, json)
Hash identifier: ZNpMY289N/5YdVl4KEpapTCc5SU/mNQ5MTT6NyUI+Mk=
Subject key identifier: B3:38:07:95:D9:2D:CF:ED:28:4C:34:5E:D6:14:4F:78:0D:01:74:81
Authority key identifier: D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
Certificate issuer: /CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Certificate serial: 01975D25B0DCBDB9157686CB558F0F6E5D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
Manifest number: 1587
Signing time: Wed 11 Jun 2025 04:00:40 +0000
Manifest this update: Wed 11 Jun 2025 04:00:40 +0000
Manifest next update: Thu 12 Jun 2025 04:00:40 +0000
Files and hashes: 1: 0VK0wfXUhO78KxWX9FUAOrZUsFU.crl (hash: +ccWZcAAduEdRe+rE9l0892lECqbhdIHhG/KKEEerIA=)
2: IjvsoBUG9ktBfZ3shBFq4X7nJnE.roa (hash: ZOvBCy3Gp00mtEZBuX+IHu80U1fpsi2/qrYNX8CCasY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:25:b0:dc:bd:b9:15:76:86:cb:55:8f:0f:6e:5d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d152b4c1f5d484eefc2b1597f455003ab654b055
Validity
Not Before: Jun 11 04:00:40 2025 GMT
Not After : Jun 12 04:00:40 2025 GMT
Subject: CN=b3380795d92dcfed284c345ed6144f780d017481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:af:4b:6b:6f:d3:0a:4d:57:b7:b4:50:f2:
a9:2d:94:da:b2:4a:68:2c:74:07:01:5b:17:74:07:
5e:0b:a5:a2:36:7a:49:71:e5:78:20:47:e2:37:08:
62:ac:69:74:90:ae:aa:90:a5:55:67:4a:34:03:64:
dd:66:be:ce:da:55:24:d3:c1:68:7c:30:a3:db:af:
96:42:73:37:0b:f1:7c:8f:92:1b:38:67:f2:67:8f:
3d:24:96:7c:c0:86:eb:77:87:37:e0:0b:22:c3:f6:
8a:fe:00:fd:46:cd:d0:3e:39:4e:89:9c:30:6a:2d:
92:3d:50:3d:38:66:d5:03:1b:24:69:24:37:66:00:
e4:be:01:22:c8:c5:c0:f4:9d:90:92:0a:a4:d6:00:
c7:37:2e:2b:77:54:e4:8f:97:35:d0:ea:7a:f6:c4:
cc:c1:0d:ff:ba:2d:83:67:6d:00:65:d7:7e:b7:39:
e5:0c:cf:a9:22:be:c0:f3:98:33:25:d7:d3:c1:36:
b5:60:c4:55:de:dc:3d:e6:65:d8:74:05:36:c5:ed:
06:31:98:46:bd:ca:8c:c2:3a:01:f2:9d:5a:5e:f8:
d5:9e:8a:89:3d:ff:23:d7:d4:11:88:3e:f7:9e:e5:
6f:2c:be:ed:c0:a7:7f:3d:dc:38:70:c2:68:f7:78:
4c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:38:07:95:D9:2D:CF:ED:28:4C:34:5E:D6:14:4F:78:0D:01:74:81
X509v3 Authority Key Identifier:
keyid:D1:52:B4:C1:F5:D4:84:EE:FC:2B:15:97:F4:55:00:3A:B6:54:B0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VK0wfXUhO78KxWX9FUAOrZUsFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/379e32-02e0-4339-882b-2f75195216b9/1/0VK0wfXUhO78KxWX9FUAOrZUsFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:01:ba:58:be:91:ca:9e:b7:40:76:49:ff:e5:3b:74:db:0a:
18:e6:90:4d:24:16:d5:cc:26:ad:d1:25:7b:e1:3e:3c:a7:4b:
bb:13:d8:d8:80:ec:8d:66:a8:67:f1:84:53:61:75:28:ae:90:
de:4b:d0:7a:16:49:6d:af:49:6e:1b:18:f1:e9:78:ca:bc:0c:
93:a8:a1:de:61:93:10:b0:c5:19:ed:15:04:7a:e4:cc:c2:0b:
9c:0d:9d:e3:5d:ae:93:dd:6e:9c:c8:f3:e8:d4:df:85:9f:7c:
b7:39:15:fb:df:9c:5a:6d:c2:24:94:47:7c:4e:39:82:35:ba:
a4:1d:b4:d5:df:4d:2b:25:7a:1e:8b:46:00:b3:59:cf:ac:64:
c5:5d:96:62:f4:c6:a1:f0:22:4b:87:b2:00:da:d1:a5:0e:b5:
c3:12:42:d0:10:69:fa:a9:9d:24:2a:29:7c:38:5f:c6:45:bb:
74:24:f6:3b:69:c4:d1:45:09:8c:1a:f0:18:0d:de:ee:01:b4:
71:18:b2:1f:66:e6:a9:8c:d9:27:2a:33:2e:14:8f:c7:73:9c:
35:bd:a1:b8:79:55:c5:73:13:ea:62:46:40:6a:2f:d5:a3:a0:
a4:f2:af:c8:96:67:b0:10:b3:14:06:6b:9e:cf:bc:c4:a7:0d:
c6:aa:99:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:35:58 2025 by rpki-client