Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier: 3P/M5xmwoKqfe2azYtsA13D912nA+7WYAjBVBrOKtxE=
Subject key identifier: 2F:F2:AE:16:80:09:8C:C1:62:7B:C3:B4:89:A3:4B:5D:CA:20:82:83
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial: 01974E8E8CE263B09256FF3D92068ACF51E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number: 0871
Signing time: Sun 08 Jun 2025 08:00:54 +0000
Manifest this update: Sun 08 Jun 2025 08:00:54 +0000
Manifest next update: Mon 09 Jun 2025 08:00:54 +0000
Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: xGEFqI1D6JcrDyQsGyb9eFzI2pteIaX+bw+cgnKWmPI=)
2: 3t2rbtcOEw5sD7uRjCXTPR4SMU8.roa (hash: oLSU3YNaGRS7ljQgete6uiDJRLwSKNoaWdOvOIOXxdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:8c:e2:63:b0:92:56:ff:3d:92:06:8a:cf:51:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
Validity
Not Before: Jun 8 08:00:54 2025 GMT
Not After : Jun 9 08:00:54 2025 GMT
Subject: CN=2ff2ae1680098cc1627bc3b489a34b5dca208283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:d1:f7:c5:08:bf:7e:24:1c:35:d1:29:23:
d4:90:3f:55:10:96:eb:da:dd:39:db:7e:e0:90:a3:
e9:66:45:59:ef:33:36:68:d3:46:fa:64:0e:60:41:
6d:40:d6:fa:0f:81:63:98:0b:98:bd:84:6e:cc:25:
8f:b0:ba:a2:9f:3a:35:18:61:fe:46:57:97:a7:17:
20:f7:44:b1:44:69:d7:b4:68:f1:9e:7e:e6:89:49:
30:70:cf:42:03:43:43:da:74:57:4e:7e:4f:50:6d:
37:64:f6:8b:33:bc:15:a4:a2:77:23:79:11:58:a0:
c2:fb:29:b6:41:26:51:48:1e:3f:cf:1e:3c:3d:cb:
85:14:c1:d8:c4:af:c4:89:e0:ba:d8:39:12:2f:d5:
47:72:9d:b0:e4:4f:6c:08:7e:0c:3c:d7:9e:5d:59:
af:aa:db:25:38:40:03:0d:87:b1:31:6e:c0:fa:1a:
3d:95:6c:bf:a6:37:c4:f3:88:b6:03:10:13:4e:e0:
e7:2e:63:cb:f4:03:11:fc:86:b2:d5:bd:86:00:8d:
ba:f6:fc:6d:fa:1d:0f:5f:d0:df:db:7d:04:86:a7:
75:5e:4f:42:51:b5:85:59:02:d8:a2:8d:dd:a0:f5:
0e:a6:bd:23:fa:cc:7b:a7:02:c7:fc:57:82:63:30:
2b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F2:AE:16:80:09:8C:C1:62:7B:C3:B4:89:A3:4B:5D:CA:20:82:83
X509v3 Authority Key Identifier:
keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f6:c7:d0:6c:53:f5:38:11:3f:0f:81:54:36:d2:67:21:98:
a0:31:8a:63:7c:14:99:1b:dd:27:d9:11:1f:85:b7:75:5e:21:
a6:6e:66:52:bb:81:e5:11:76:c9:41:ff:d0:b8:98:b2:85:0c:
19:a4:5b:93:bf:e4:0a:9c:36:43:27:41:9a:d9:6a:52:29:17:
e1:3d:90:6c:78:8d:7f:00:4c:8f:19:50:2b:d0:8f:ba:8e:57:
1f:14:c9:48:ee:1e:9e:71:61:56:fa:36:13:d4:ee:d4:89:39:
05:76:f9:ab:01:2b:52:d5:33:73:06:db:a0:32:33:aa:7d:8e:
52:b2:38:b4:c3:be:26:ed:f3:ee:32:ab:cc:29:82:8a:83:f8:
d6:16:9d:19:21:4e:cc:05:03:ad:31:0d:31:fd:85:85:e3:86:
ad:97:1e:b9:48:6b:fd:2f:0f:ef:65:35:bb:49:99:85:86:06:
02:62:ff:53:10:85:14:09:f0:cf:2b:40:ca:47:51:a2:7a:0a:
73:9d:72:29:3b:f1:17:4a:2f:b8:e7:d7:9c:14:97:a2:2b:83:
0f:33:8e:57:d6:e2:71:f1:ea:ec:d7:a5:2d:4c:28:6e:69:6d:
0b:71:52:c6:25:bb:d8:b8:d7:6a:f0:6e:9e:0c:da:68:f9:38:
00:c1:6f:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjoziY7CSVv89kgaKz1HlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMTBlZTc4YmJkNDg3ZDM5ZDc5Y2IxOTgwODVlOTg0Zjcw
MmEyMDgwHhcNMjUwNjA4MDgwMDU0WhcNMjUwNjA5MDgwMDU0WjAzMTEwLwYDVQQD
EygyZmYyYWUxNjgwMDk4Y2MxNjI3YmMzYjQ4OWEzNGI1ZGNhMjA4MjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwejR98UIv34kHDXRKSPUkD9VEJbr
2t05237gkKPpZkVZ7zM2aNNG+mQOYEFtQNb6D4FjmAuYvYRuzCWPsLqinzo1GGH+
RleXpxcg90SxRGnXtGjxnn7miUkwcM9CA0ND2nRXTn5PUG03ZPaLM7wVpKJ3I3kR
WKDC+ym2QSZRSB4/zx48PcuFFMHYxK/EieC62DkSL9VHcp2w5E9sCH4MPNeeXVmv
qtslOEADDYexMW7A+ho9lWy/pjfE84i2AxATTuDnLmPL9AMR/Iay1b2GAI269vxt
+h0PX9Df230Ehqd1Xk9CUbWFWQLYoo3doPUOpr0j+sx7pwLH/FeCYzArQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/yrhaACYzBYnvDtImjS13KIIKDMB8GA1UdIwQY
MBaAFNAQ7ni71IfTnXnLGYCF6YT3AqIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEJEdWVMdlVoOU9kZWNzWmdJWHBoUGNDb2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8wYWQ0NmUtZThmZi00MmE5LTk4YzUt
ZDc4ZjYxNzJiMTU1LzEvMEJEdWVMdlVoOU9kZWNzWmdJWHBoUGNDb2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8wYWQ0NmUtZThmZi00MmE5LTk4YzUtZDc4ZjYxNzJiMTU1
LzEvMEJEdWVMdlVoOU9kZWNzWmdJWHBoUGNDb2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/bH0GxT
9TgRPw+BVDbSZyGYoDGKY3wUmRvdJ9kRH4W3dV4hpm5mUruB5RF2yUH/0LiYsoUM
GaRbk7/kCpw2QydBmtlqUikX4T2QbHiNfwBMjxlQK9CPuo5XHxTJSO4ennFhVvo2
E9Tu1Ik5BXb5qwErUtUzcwbboDIzqn2OUrI4tMO+Ju3z7jKrzCmCioP41hadGSFO
zAUDrTENMf2FheOGrZceuUhr/S8P72U1u0mZhYYGAmL/UxCFFAnwzytAykdRonoK
c51yKTvxF0ovuOfXnBSXoiuDDzOOV9bicfHq7NelLUwobmltC3FSxiW72LjXavBu
ngzaaPk4AMFvDA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:42:01 2025 by rpki-client