Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
File: 0bS-sKan4ShKv0OFNIz0hhALn4A.mft (raw, json)
Hash identifier: tHTE1pEYgAV6luC2cAmz+LQZ4vOq4U2YyGHtjPqp04Y=
Subject key identifier: 2F:F3:69:5C:96:E7:32:D9:49:99:64:2A:05:3B:50:31:EF:97:8F:38
Authority key identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
Certificate issuer: /CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Certificate serial: 01974855275C927F42E75AD8C06366F9BAAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
Manifest number: 0D7C
Signing time: Sat 07 Jun 2025 03:00:29 +0000
Manifest this update: Sat 07 Jun 2025 03:00:29 +0000
Manifest next update: Sun 08 Jun 2025 03:00:29 +0000
Files and hashes: 1: 0bS-sKan4ShKv0OFNIz0hhALn4A.crl (hash: 4N3ENLocrKmM+EZgF278+8rHsATFFeUFI0r3+mvVYfY=)
2: c4vhQn8zi1dmhfuFlEzS457ekqY.roa (hash: K0d7LR2NOcizL+J6fo8ZUFPUHzj1ReR3yGovArPpqzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:27:5c:92:7f:42:e7:5a:d8:c0:63:66:f9:ba:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80
Validity
Not Before: Jun 7 03:00:29 2025 GMT
Not After : Jun 8 03:00:29 2025 GMT
Subject: CN=2ff3695c96e732d94999642a053b5031ef978f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:a6:96:32:b5:c1:af:28:cc:26:f5:34:e5:
5a:b3:84:f4:91:bb:d4:4e:10:b8:1a:c0:bc:42:52:
05:df:d8:63:d7:30:0d:b5:3d:d3:3a:00:ac:da:0c:
92:2f:54:d8:85:66:10:82:37:19:26:23:d6:7f:cd:
50:b3:5c:02:07:40:3d:ce:3a:02:8d:54:66:88:6c:
0f:fa:1b:3b:b4:ed:d6:55:7d:ae:d8:f6:38:2c:2f:
13:e5:13:bc:3f:81:1f:9e:e5:d0:9e:d8:6c:3a:75:
af:6c:bc:29:87:1a:ed:f5:b4:17:18:c9:61:59:5c:
fe:f3:19:7c:bc:c7:da:6f:af:b8:73:73:91:3c:72:
a7:cf:05:3f:69:52:c5:e1:32:67:3d:4a:f7:5b:a5:
fc:e3:3b:8b:e4:2d:6a:1b:4a:6d:15:7f:00:87:d2:
9f:10:ae:56:bd:cd:5a:41:f0:b4:aa:2a:2c:2f:e7:
3f:55:19:f3:05:9c:17:d9:4a:2c:1a:36:4b:d5:a4:
1b:79:33:a5:cd:26:b5:96:59:4c:fe:01:8d:88:1a:
58:6b:f4:59:36:fa:33:c9:80:9a:06:d7:dd:6f:b7:
40:1c:b8:8d:24:0f:0c:e7:13:e6:fc:56:c0:d8:cd:
8d:49:b0:4b:a4:b1:02:6d:1f:18:8d:ba:fe:ea:2a:
24:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F3:69:5C:96:E7:32:D9:49:99:64:2A:05:3B:50:31:EF:97:8F:38
X509v3 Authority Key Identifier:
keyid:D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:02:5e:81:f8:10:ee:21:8a:78:c7:cf:ee:d9:f4:0f:8c:d6:
cd:a5:cc:d8:18:65:bb:b4:1d:d6:9e:12:29:62:1b:19:64:88:
0c:6c:8a:ee:1a:fa:84:0c:2f:c5:25:01:f4:c6:a1:05:72:df:
78:f7:eb:14:fc:e2:d5:1a:e9:ff:8f:8d:c9:bf:bf:e7:73:5c:
57:ae:97:4f:19:03:a4:83:8d:0a:6c:7a:d3:9c:5b:8d:fb:7d:
fc:ad:7b:eb:3d:90:a7:6e:f5:53:f9:94:c2:02:c1:72:92:1c:
c4:b9:67:be:79:e7:95:af:44:83:dd:89:0b:70:91:c7:3d:73:
b0:b4:59:51:8c:da:e2:55:8e:7e:3c:76:5e:a9:a4:5d:32:60:
3e:32:33:aa:b2:6d:a0:12:09:2a:6f:23:17:3d:ec:47:99:c7:
7b:c4:73:8b:99:59:ec:fa:6c:7d:90:70:39:66:c5:8a:f3:db:
0f:d4:5a:bc:24:c7:66:5e:39:0e:1d:a8:e7:be:99:43:03:92:
de:e6:85:3f:06:6f:a2:f1:05:69:3f:9b:85:b8:60:57:34:16:
fb:3d:44:d6:4c:08:21:8a:a6:11:7e:b9:7d:bf:06:08:5b:e6:
68:6b:3d:a8:ce:63:95:01:20:66:90:c2:d6:1b:ed:30:c4:86:
59:d1:f6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:16:33 2025 by rpki-client