Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File: d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier: to7VzIqlWV8bwcn+WuQ2qpCwaebQLh4x7tHQ8azVkUY=
Subject key identifier: DE:C0:41:85:8E:A9:30:BE:19:84:42:7D:52:B2:22:5F:E9:D4:51:49
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 0197440B1796595939CDD2681F2702E6C22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number: 0D52
Signing time: Fri 06 Jun 2025 07:01:06 +0000
Manifest this update: Fri 06 Jun 2025 07:01:06 +0000
Manifest next update: Sat 07 Jun 2025 07:01:06 +0000
Files and hashes: 1: B2IMeTT_3aTfHDkJlGE0ghQbFDk.roa (hash: 9QqvH1LHSxTx6M/amoR6Uht8hCig8jnepvjGfXmWyhk=)
2: ECREWCSjB2P9M1NdQJkNhFBrz0I.roa (hash: +tEm/N3DaMPpPkId6V2tgAfvUGEuMx60jSfnQrCgr48=)
3: HTHZV637COqOMMv4cRAf8uyfPWQ.roa (hash: B2/vOhPVX6+TL3e+PEOrnbSL8UQQyNInIECqtVOI3Z4=)
4: IaeTEwJtU2EKstOhMSF78ATUCXM.roa (hash: DXtwHkKmOCisIkHvbgh1YerTYxT5FkGSDRKk1ziQyBY=)
5: ZZUO68-zxdfnWQL29ZUtG9LLugc.roa (hash: 0h/+/ARohlLe8FbEefTrGt5FPoB1oPmk+Sl96f01Yto=)
6: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: vX+8Urw15y2ZA0/oMCig+j//c/z5jlxI408Af2zWJRY=)
7: e9K3ROTtQGAIvma-lxNEnMwJC2A.roa (hash: FZXtwNH18f+yarE1SlyyM2bCUezbZToQsOy/EnG3HSs=)
8: kZzNXyqdPd_aCyfdeTA4-Vt_eag.roa (hash: 7D43/2woHLE921UFuQulERKrZTbyhIaHRG/3D0MgTLs=)
9: qmOZwfWbfR6XjYwl5pYRt79e34Y.roa (hash: wP6Og39PiJakVD6q3dK8IAoysYFGH1TxQgPn9ZY7c8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:0b:17:96:59:59:39:cd:d2:68:1f:27:02:e6:c2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Jun 6 07:01:06 2025 GMT
Not After : Jun 7 07:01:06 2025 GMT
Subject: CN=dec041858ea930be1984427d52b2225fe9d45149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:d8:b9:61:37:18:0b:c9:7a:3f:7b:dd:b1:
c6:45:75:b5:b3:45:3f:77:7b:cb:16:2d:b5:fd:b7:
0b:10:e4:af:8e:86:4c:9a:a2:98:2e:8a:bf:85:9a:
47:b7:ec:ef:da:fc:e4:9b:bd:dd:c9:c4:a7:5c:a2:
d4:a2:dd:a3:78:20:72:1a:22:e1:ba:f7:4b:a8:82:
8f:88:a7:4b:6a:6d:17:5d:3e:3c:9e:31:20:63:bf:
7f:cf:1f:05:c0:3e:30:f5:69:18:9c:e2:e5:12:35:
61:95:ab:7a:78:3f:e0:1e:07:c9:14:97:8d:34:97:
41:61:e4:96:f4:65:19:65:f5:59:07:2e:01:4f:68:
f1:34:e7:c9:ec:8d:66:16:39:2c:de:44:f1:63:0a:
12:56:da:b7:04:07:5d:90:86:11:da:ae:5c:2b:0d:
17:b8:be:e1:04:01:e8:be:07:48:76:66:de:5d:d7:
14:5b:33:d5:c8:e4:59:72:1b:b4:80:7a:06:0f:59:
cf:8b:c8:73:94:e2:a4:32:d8:db:68:79:e8:4f:32:
56:10:eb:b2:8d:1a:6d:a5:3c:b8:81:6f:fa:15:37:
39:42:ad:ee:7d:4b:93:e4:56:ac:7d:ac:0d:be:59:
ad:ba:d0:2f:ad:44:32:0f:0f:e3:37:8f:f2:a5:e2:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C0:41:85:8E:A9:30:BE:19:84:42:7D:52:B2:22:5F:E9:D4:51:49
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cf:d4:23:8e:d8:94:e4:c6:0c:36:1d:2a:fb:01:aa:e9:52:
85:7a:43:1d:64:84:e5:87:20:d5:20:93:60:a8:74:2b:1a:8b:
61:f3:8d:b2:7f:9f:b8:aa:29:2e:ff:a3:92:bd:d5:8a:90:a1:
a3:d4:dc:d5:a3:87:c3:6a:8f:94:9b:a9:57:af:ec:d5:6a:fc:
97:db:46:36:19:82:5d:db:b9:04:cd:ad:33:75:0c:df:3c:7d:
93:7e:cc:65:52:82:6a:ca:da:bd:c8:e2:22:84:95:3a:1d:bb:
d3:54:74:a4:5a:67:cb:3f:2f:a2:e7:e0:81:08:72:88:c0:61:
f5:1a:f8:ad:24:d0:2d:30:9a:d5:ab:65:f4:1a:b2:31:57:16:
d0:c3:f2:fa:c6:dc:a4:be:60:9e:b8:94:e5:04:22:33:70:8c:
5f:8f:a0:b1:4c:cb:1f:18:81:41:b1:8f:83:d8:0b:02:bb:c4:
e8:fa:23:9e:c3:bf:fa:98:60:0c:b1:07:66:4e:d3:19:4b:ec:
6c:49:2e:2a:1a:fa:2d:13:cc:5a:a1:1d:1b:a3:1b:5b:c3:a9:
32:f3:fa:a9:c7:80:da:ad:17:86:ba:92:7b:c6:8e:6a:dd:c3:
13:2f:4b:92:0d:e6:0b:76:26:fb:af:d4:69:8f:2f:f8:fb:62:
1b:7f:6c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:21:09 2025 by rpki-client