Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: FyL32rnWqN+64X2bWAK3UlS+eSfCqZgM/jGtcOeELXk=
Subject key identifier: B7:17:9A:C9:75:51:12:05:21:4C:80:46:5B:F5:13:90:40:32:DB:3F
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 01974C69753659B9F296271C51F8BDA259EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 010C
Signing time: Sat 07 Jun 2025 22:01:08 +0000
Manifest this update: Sat 07 Jun 2025 22:01:08 +0000
Manifest next update: Sun 08 Jun 2025 22:01:08 +0000
Files and hashes: 1: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: FkZb/eOcYywJsPsz505icGLoKgmKMJ4ooS0r0Ex9NZ0=)
2: MEk6COdLayDwspMkca7X6AtTbGc.roa (hash: LzuFK2lAnPM5ilB5mo7OmDeySV6Fxi80CkdMaYJoff4=)
3: ejchce-hV6tRVRay48MMQu7AoMY.roa (hash: lMIzybFQd6b9BY1auWIGvBebble5XxNM96EF4zsuItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:75:36:59:b9:f2:96:27:1c:51:f8:bd:a2:59:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Jun 7 22:01:08 2025 GMT
Not After : Jun 8 22:01:08 2025 GMT
Subject: CN=b7179ac975511205214c80465bf513904032db3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:ec:a6:81:49:29:3c:9d:bd:f4:c7:67:4e:
35:84:f8:8b:ef:87:63:f0:b9:3f:06:ce:f6:00:c1:
04:77:e9:7b:9a:31:e0:a1:9e:f4:26:fd:03:08:87:
14:a5:b2:4e:cc:23:2f:99:c0:52:8f:1a:d7:95:dc:
7d:65:8d:32:b6:16:08:fc:71:3a:5d:bf:c8:5b:a6:
9e:01:c4:52:4e:d9:d2:1e:da:8a:94:d7:05:35:08:
a1:31:ef:2b:f1:c8:fb:56:9d:c2:94:e4:92:26:cb:
bb:92:8b:8c:6a:93:9c:f2:4d:40:ed:cb:e0:9b:5b:
77:c1:2c:24:d2:5f:64:c2:d2:2c:d4:38:9e:33:97:
f9:87:37:99:cf:e8:57:55:92:f5:23:a2:f4:b5:c3:
6c:72:e6:16:29:c1:00:06:08:d1:a8:fe:e2:b1:11:
ec:02:69:71:2c:2b:75:c2:2b:93:0e:6f:db:54:68:
e1:30:4b:6c:0b:26:c0:b8:92:6e:42:7b:1b:59:7d:
e4:2a:cb:7a:c9:be:80:21:b2:8a:e4:1e:9c:3d:f2:
92:6b:5a:3e:9d:91:a7:8d:13:fd:f5:cb:eb:91:a6:
ec:f4:0a:96:df:93:22:83:94:07:3a:6f:6d:43:6c:
bb:a5:03:18:60:63:8d:66:95:b4:49:cb:ac:99:3d:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:17:9A:C9:75:51:12:05:21:4C:80:46:5B:F5:13:90:40:32:DB:3F
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9e:ff:6a:ed:d5:e1:ff:22:47:55:e3:0a:3e:e0:68:0a:b1:
2f:5a:39:e9:45:2d:42:a2:7b:ae:49:27:46:db:75:fc:9d:50:
30:5c:01:d5:ca:8b:2b:aa:8b:2a:7a:28:66:63:79:5a:07:c9:
d9:c5:52:66:32:45:a4:f6:86:27:45:9a:32:d5:67:98:bd:5e:
a5:f5:43:70:42:aa:db:c9:40:5c:1b:c3:be:bc:9a:5e:f0:80:
d7:ba:8e:23:b4:28:d8:c5:41:43:82:31:bb:97:31:a1:4a:69:
ed:e3:06:31:70:be:53:9f:9f:11:2f:25:4f:be:d1:64:a3:16:
b0:5b:95:22:b3:92:46:4f:1a:f8:b5:14:80:a4:39:c6:e0:b3:
a6:20:c7:c0:a3:ea:ed:b2:34:94:f4:09:76:05:8c:0f:2f:d7:
fb:bd:83:df:6a:92:ef:29:6e:aa:a0:a5:0f:d5:f1:9e:d5:8b:
dc:c6:5e:98:1b:9b:cb:40:dd:e5:93:5e:ef:dd:08:18:80:be:
4d:01:2b:40:5a:1b:71:1d:e6:68:e9:6e:57:aa:ab:de:96:30:
33:d5:46:19:d6:2b:a9:33:ee:fc:03:8a:4a:0c:7a:33:77:78:
d0:aa:9c:f3:e1:df:06:07:f3:81:4f:b4:0d:d9:a1:14:ba:f1:
3a:63:af:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:14:58 2025 by rpki-client