Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
File: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft (raw, json)
Hash identifier: vZg8WNLUYD8Zgg+UniURXIHqtmdfYa/4uzBnImTGGDs=
Subject key identifier: 4C:50:20:CA:9F:F4:47:B7:47:9D:B8:21:C8:E2:6A:74:CB:DA:83:63
Authority key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Certificate issuer: /CN=d2323101b29596ff442d3749373b8e9983354670
Certificate serial: 01975911F07F3C24E5E25F5073403A2ECEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
Manifest number: 128C
Signing time: Tue 10 Jun 2025 09:00:37 +0000
Manifest this update: Tue 10 Jun 2025 09:00:37 +0000
Manifest next update: Wed 11 Jun 2025 09:00:37 +0000
Files and hashes: 1: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl (hash: M/21UEk9Mr9W2PvRYzfXuDepxr5QOR3k5k76+4cgtx4=)
2: 68zFv9YtD3NrAFeU4wp9olsTM-s.roa (hash: pnT0iUdcMHrqvl0nnH7oLBNpzo/eCuulVPG8TY9HMQI=)
3: QaIK-rl-UO6iCpNPezV_L0xU2YU.roa (hash: xhqiUIeuQiCwC9en8JMr8aD8gps5b0AVPyZ6zETgu08=)
4: WOXWvBeCokpSOHl_JrntVW9NKAM.roa (hash: eB6i8745ycqxVgNK38j0RIcjXGqo0GZI7gH9QRyDDJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:11:f0:7f:3c:24:e5:e2:5f:50:73:40:3a:2e:ce:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2323101b29596ff442d3749373b8e9983354670
Validity
Not Before: Jun 10 09:00:37 2025 GMT
Not After : Jun 11 09:00:37 2025 GMT
Subject: CN=4c5020ca9ff447b7479db821c8e26a74cbda8363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e6:74:95:ff:72:85:27:ab:71:c8:1e:c4:af:
bb:b4:c7:0e:ea:01:00:c4:c4:98:5b:cb:2e:50:20:
f8:61:8f:dc:cc:1e:98:2b:23:26:2b:78:d1:e9:79:
d0:ff:2f:d5:85:b3:4c:22:30:95:a0:19:ab:6e:3c:
82:e3:8f:30:00:d6:1d:86:9e:95:c3:43:e3:b0:fc:
10:2b:05:9c:9b:54:53:ac:ff:3a:84:37:dd:16:25:
eb:2c:ad:e1:c7:50:b5:cc:3e:df:1f:95:fa:ec:05:
68:6e:d7:70:8a:43:79:13:e1:a0:ac:20:d2:cb:91:
1f:7a:30:8e:34:38:d6:cc:ac:75:32:ee:7b:eb:7f:
71:5a:44:07:75:74:6a:b6:42:67:8a:4e:09:ec:67:
c2:0b:d0:7d:09:71:a9:be:8f:28:e8:e8:b1:5e:3e:
f2:e3:bf:13:c9:7d:3f:11:de:b4:75:65:e0:1a:8d:
d1:2c:e9:6c:d3:5b:5c:b7:81:d3:00:bb:a5:d9:bc:
52:5c:30:ed:97:a6:a1:de:af:3a:cd:27:42:42:2f:
19:fd:bd:e2:57:af:b4:cd:49:2d:9f:9e:84:8e:6e:
9a:38:93:af:80:e1:fd:39:2d:79:81:2a:56:d4:77:
34:8f:dc:f2:b8:cb:cd:60:d9:ab:80:83:c9:39:bd:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:50:20:CA:9F:F4:47:B7:47:9D:B8:21:C8:E2:6A:74:CB:DA:83:63
X509v3 Authority Key Identifier:
keyid:D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:84:66:d1:aa:83:d5:9f:91:9f:94:f0:dc:e8:ec:d5:dd:a0:
91:e6:66:ec:b1:ed:40:a5:c5:f7:c7:72:8c:91:9b:fe:f1:eb:
bd:9b:e0:07:f5:20:c4:72:27:91:9d:11:6c:bd:65:35:5a:4a:
d9:29:5d:04:77:12:b3:86:c8:37:fe:45:0a:ab:91:05:8f:9d:
cb:42:30:25:3a:f9:1c:6a:62:81:0b:f2:24:8f:c1:84:95:3b:
c9:3d:cf:48:9d:f1:7c:2b:08:29:59:e5:ff:c1:30:57:d5:24:
4b:e1:ab:8c:1f:f6:49:51:a8:1d:58:7f:e3:ee:10:55:79:90:
2e:e8:e9:17:66:2f:cf:26:46:79:b5:a6:ba:63:2d:f6:3e:a0:
e5:f3:20:56:c4:b8:c6:59:5c:45:05:1f:0f:0a:b9:1c:77:5d:
69:2f:79:82:e6:aa:30:f4:1b:36:a2:7f:53:b1:f8:85:7b:a2:
df:98:32:0f:51:94:2d:74:1c:bc:c0:d2:47:bd:27:89:8f:35:
34:22:97:70:87:ce:8f:89:9f:b5:0c:46:d0:f3:88:16:e1:04:
80:e4:f9:c9:b0:1e:be:0e:85:76:83:18:6d:3f:62:30:15:a8:
3f:76:a7:93:e3:34:f1:da:46:7b:ee:9e:01:96:9f:58:e3:43:
47:59:2f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:27:42 2025 by rpki-client