Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
File: rO9NpWy5QNny99Ahryph-9OxTqg.mft (raw, json)
Hash identifier: eBZH0n/vZTGXfpBgLy7GBQGacL/gB8kGcVHTVISpfUk=
Subject key identifier: CB:1E:EA:1F:F8:D4:4C:B1:D1:94:0A:50:9A:83:BB:1A:AB:F0:0A:4D
Authority key identifier: AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8
Certificate issuer: /CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
Certificate serial: 01975D5CFAE142DFF6BA439C72E3A38D6431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
Manifest number: 0B8F
Signing time: Wed 11 Jun 2025 05:01:03 +0000
Manifest this update: Wed 11 Jun 2025 05:01:03 +0000
Manifest next update: Thu 12 Jun 2025 05:01:03 +0000
Files and hashes: 1: csc62_075z-O1jbjAbm_rCnKZRc.roa (hash: Tb7p7/2jlLjl4/3NDouCmjK2S/QTfoZSS+7FIIdOEgc=)
2: rO9NpWy5QNny99Ahryph-9OxTqg.crl (hash: FEU6LMgNVXcSrFJUaVfo9p7OUBa9O9Z/WcfhqyRYwlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:5c:fa:e1:42:df:f6:ba:43:9c:72:e3:a3:8d:64:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
Validity
Not Before: Jun 11 05:01:03 2025 GMT
Not After : Jun 12 05:01:03 2025 GMT
Subject: CN=cb1eea1ff8d44cb1d1940a509a83bb1aabf00a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:d5:39:9d:51:cd:b1:da:54:2c:40:a8:c1:
6c:0f:c8:41:96:7e:81:9a:3f:f1:05:2b:0f:98:5d:
70:89:d8:47:12:f2:bd:54:1f:f1:29:36:ed:d3:12:
0a:8e:9c:da:54:c6:46:41:e6:08:99:e5:7c:65:52:
1a:b8:88:ff:82:28:82:1e:69:4a:1e:64:34:2f:0e:
1d:8f:b8:be:0a:fc:a3:79:9e:4b:5c:4c:8e:72:92:
9d:ae:e4:22:65:e0:75:9c:e2:f8:d8:64:61:6e:5e:
a0:a0:49:c4:95:ae:d8:56:0d:26:df:d3:31:3d:12:
b6:14:54:0b:a5:32:00:3d:35:ca:b8:af:81:7c:fb:
7c:ff:e0:42:d7:d1:12:f5:73:96:97:be:79:46:25:
3f:ff:fd:d5:40:34:d8:d0:e3:5f:7f:13:ea:1e:e5:
54:ce:49:d2:66:8b:a3:42:61:10:20:6f:fd:42:85:
75:b4:0b:17:b1:98:12:30:75:41:5b:f6:d8:a2:8f:
6d:8d:0c:b6:e9:be:ff:43:a3:bd:ed:c5:49:8e:da:
36:87:9f:56:69:2b:b7:d7:b9:3d:32:6c:bb:78:99:
17:f9:a0:25:5f:91:fb:60:50:40:16:9e:ba:a1:3c:
b5:9f:5c:37:55:f4:d2:c5:47:ca:d6:a0:1a:f7:24:
58:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1E:EA:1F:F8:D4:4C:B1:D1:94:0A:50:9A:83:BB:1A:AB:F0:0A:4D
X509v3 Authority Key Identifier:
keyid:AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:de:5a:e8:dc:67:37:49:34:c6:9b:cf:b7:f6:36:f3:5e:21:
90:f0:b3:d8:1b:40:67:a3:37:6b:05:e1:4a:3a:5a:f0:51:1a:
b3:e4:b9:d3:b5:2b:29:cf:87:c6:29:e8:da:54:46:4b:fc:c7:
66:49:e5:a8:65:56:08:4a:0a:ad:50:76:2d:51:93:a8:f6:f6:
a1:bc:3d:0a:ba:68:bf:d9:b0:ad:21:c7:09:c9:1a:3f:32:39:
74:ae:c6:20:4b:b5:60:bd:5f:83:de:5c:76:54:7f:3a:9d:94:
7b:6c:32:d4:29:96:83:ec:96:f6:5c:9d:1b:1d:20:59:03:6c:
a4:f3:4e:09:00:d5:f0:5b:41:60:fd:bd:b1:99:47:d9:74:c9:
f0:42:09:bf:42:ab:42:c3:71:0a:62:0f:c3:cb:b1:45:a6:ae:
00:54:50:13:75:2d:14:b0:90:27:ad:e3:9c:29:e3:f5:9c:fb:
99:0f:9d:36:7d:f6:73:9e:32:9e:eb:c0:ca:7d:69:6c:80:ee:
dd:2a:35:d7:a1:ed:3f:ba:d6:bf:e6:ad:25:7d:c9:bd:96:91:
2f:74:ee:f7:2f:ed:dc:df:20:6a:ef:07:e4:7e:d6:c0:2a:77:
2d:f1:76:e2:48:ff:37:e0:f4:3d:cd:96:d2:52:df:a4:36:b1:
f6:5c:01:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:45:22 2025 by rpki-client