Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: YGonttWTb9oCyJkFCcxF3A43THRwMk1GubbrFMgJvIw=
Subject key identifier: 93:A0:FF:F7:9A:D2:90:55:94:B5:8D:9A:09:A0:7D:DB:C5:EC:CF:46
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 01974A7B5A80187991C372CA60741B15B49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0A9F
Signing time: Sat 07 Jun 2025 13:01:27 +0000
Manifest this update: Sat 07 Jun 2025 13:01:27 +0000
Manifest next update: Sun 08 Jun 2025 13:01:27 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: Iz+Ejdx4nbjKm6QW1BQTafPDDMYPR53WOGoEBECJ0Q4=)
2: 7p9fYepg7S5sPZLFet1T6ZdUO0A.roa (hash: 2r3FGqEA9Im8wCkJsvxrPrJGP9I8oT0rHkJZAkKFfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:5a:80:18:79:91:c3:72:ca:60:74:1b:15:b4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: Jun 7 13:01:27 2025 GMT
Not After : Jun 8 13:01:27 2025 GMT
Subject: CN=93a0fff79ad2905594b58d9a09a07ddbc5eccf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bc:93:67:b4:74:09:56:54:71:05:b3:6c:d4:
3f:cc:51:4d:d5:b7:53:f2:a6:29:e1:07:50:b9:ff:
80:95:a7:0a:3f:a4:28:a2:35:05:66:de:59:13:b8:
dc:a6:41:a1:9d:27:c4:ae:b9:b9:c9:68:c8:0d:25:
87:bf:99:d5:b6:51:6e:7f:e1:f0:96:24:bb:7e:e0:
6e:ed:d6:2a:b0:64:60:73:31:48:83:44:b7:3c:2d:
ca:f0:a5:47:67:21:ce:74:d3:ec:84:4b:61:54:64:
df:2a:23:3f:bf:9a:d3:a9:4c:a1:fc:90:33:30:ec:
5d:a7:94:3f:9e:9a:43:e1:c6:9f:e8:4c:1c:09:15:
71:6d:a3:98:73:ee:3d:3a:4e:14:0e:92:24:07:fa:
89:ce:fa:51:19:3a:57:93:38:88:0a:b4:0e:14:9c:
18:1e:e5:ad:4f:11:b3:08:20:36:bf:b7:2f:61:83:
d6:d7:0d:3f:37:68:e7:13:d9:26:75:93:56:d7:d9:
4c:1b:ad:2a:f0:4f:2b:4a:10:8a:19:24:b5:2c:70:
59:c4:53:12:86:ef:7f:63:4b:c7:14:c0:72:5e:7f:
f4:3b:a5:67:d0:04:af:ce:f2:9d:18:d1:ef:dd:50:
ad:e7:d4:2a:05:df:25:de:e1:7d:ae:82:ef:b0:e2:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A0:FF:F7:9A:D2:90:55:94:B5:8D:9A:09:A0:7D:DB:C5:EC:CF:46
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0b:58:80:d9:7a:a4:80:fa:e9:b2:b6:81:c2:7f:6c:89:2c:
f6:7f:17:52:02:9f:78:d5:a6:11:5b:ed:a1:40:2d:33:1e:38:
76:99:89:55:d9:5e:84:49:4f:eb:5c:46:70:09:11:80:3e:bc:
a6:ed:a2:ca:ac:7d:ed:16:ee:da:61:a7:71:e5:75:b4:03:5a:
37:fb:10:e8:da:31:cb:79:c7:67:20:89:4a:c3:4f:71:fa:dd:
d1:9b:49:4e:e2:6d:d4:58:2c:29:ca:f0:35:b0:73:fb:3a:12:
4a:1d:26:a7:dc:a8:fa:11:f9:ba:b4:31:b8:43:31:11:04:ae:
8d:05:e8:80:ff:48:da:d4:9f:94:13:bc:b1:6c:39:1c:40:35:
78:4d:b8:3c:50:c8:91:79:b6:8e:50:97:19:9e:b6:8b:02:8f:
73:8a:9a:88:4e:37:34:b7:69:11:84:3b:24:9a:5c:5f:cd:1e:
05:da:cb:37:af:bd:7f:cc:ed:b6:08:15:b1:04:be:53:0d:38:
5c:6f:cd:d1:dd:d6:b1:32:61:15:4e:79:07:72:65:1e:c0:d4:
df:2a:dd:d7:ee:f4:30:2e:72:ec:ad:da:8f:32:77:e1:35:8e:
4f:e8:8c:ca:2d:2f:9c:b5:65:ae:0e:3d:bd:60:d6:a5:75:b5:
43:d3:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:33:52 2025 by rpki-client