Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
File: 0YiojVldwu2ML5I5ZFxOjF5zfTE.mft (raw, json)
Hash identifier: m7+SB5Qb6YAsPbZe2zyS2YrE5vLrbVLP5gS/Hqrcldw=
Subject key identifier: 50:54:35:06:3A:E9:EF:F0:9D:9D:FD:A0:DE:34:94:03:65:65:8D:8C
Authority key identifier: D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
Certificate issuer: /CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Certificate serial: 019745F8DD7F57338E3EBB023D4DBAFAF6F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
Manifest number: 11C2
Signing time: Fri 06 Jun 2025 16:00:26 +0000
Manifest this update: Fri 06 Jun 2025 16:00:26 +0000
Manifest next update: Sat 07 Jun 2025 16:00:26 +0000
Files and hashes: 1: 0YiojVldwu2ML5I5ZFxOjF5zfTE.crl (hash: 9LATlFifymb9D/AyXJ071nCLdD+HBa8YxJf//M4L5U8=)
2: iA-R6MvKiO2KGX3TDBYr9y6CrrY.roa (hash: 6ESf6+qQijHxJ/aR5LxiBT1mSFdRreQchWcCwlb/jhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:dd:7f:57:33:8e:3e:bb:02:3d:4d:ba:fa:f6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d188a88d595dc2ed8c2f9239645c4e8c5e737d31
Validity
Not Before: Jun 6 16:00:26 2025 GMT
Not After : Jun 7 16:00:26 2025 GMT
Subject: CN=505435063ae9eff09d9dfda0de34940365658d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:92:48:0b:df:31:2a:6e:cf:2b:8c:02:03:
9f:a9:6b:0e:7a:55:3b:23:6c:e1:bd:c8:0d:f2:98:
7e:54:2f:11:9d:ed:23:c3:24:7f:f4:55:48:08:8d:
a2:f0:89:29:d8:ba:f8:96:03:0e:e0:57:6d:95:0b:
68:ad:85:15:ab:e7:c2:4f:22:47:1b:bc:2e:49:4f:
e5:8c:3d:e0:0f:3d:ab:15:e3:d6:84:44:4a:78:31:
35:3a:21:52:cb:54:37:c7:06:12:50:ed:85:fc:18:
96:19:6a:e3:2e:52:f8:9d:53:75:53:8e:5c:12:df:
8b:d6:6e:4e:77:99:23:d9:cf:ef:6b:fa:d3:53:ff:
b5:e7:28:be:55:10:c0:c3:17:fb:d6:38:6d:f9:a0:
b3:39:10:26:c3:ef:3c:b3:d7:15:1d:57:24:b1:53:
15:9f:ae:d0:36:26:8f:58:69:cb:79:6d:e5:54:61:
e2:05:13:c4:1f:b7:a3:c4:08:bb:57:af:75:09:04:
79:e5:59:09:e1:3f:a1:3b:6e:98:be:c2:18:c3:50:
28:73:f0:db:da:50:ad:13:a0:99:34:dd:fc:b6:de:
31:45:85:ff:50:3d:86:3b:15:97:ba:fd:6c:2c:e0:
1a:38:62:f9:81:1f:62:34:60:cd:d3:7d:b0:96:ce:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:54:35:06:3A:E9:EF:F0:9D:9D:FD:A0:DE:34:94:03:65:65:8D:8C
X509v3 Authority Key Identifier:
keyid:D1:88:A8:8D:59:5D:C2:ED:8C:2F:92:39:64:5C:4E:8C:5E:73:7D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YiojVldwu2ML5I5ZFxOjF5zfTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0cee19-af0f-4e93-8010-d953f4854757/1/0YiojVldwu2ML5I5ZFxOjF5zfTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:25:4a:e7:b6:4e:a0:67:92:7a:1e:db:3f:48:38:69:2e:e3:
d6:fe:14:37:e8:e5:a9:85:31:13:79:4b:41:5e:21:1c:44:29:
a8:fc:fa:0e:05:48:c5:2d:6b:0b:80:1f:c7:c0:e1:79:cf:4c:
64:e3:42:9c:f3:bf:c6:61:0f:2a:f7:ef:06:d4:28:32:13:bf:
33:ec:e4:0e:c1:fd:b8:e1:13:ae:33:91:37:3d:b9:18:d8:b0:
6c:1a:6c:85:f6:aa:33:c5:c1:15:df:d9:49:62:b0:dd:6d:f9:
5a:11:06:8e:ec:e2:cf:11:61:ba:af:fd:93:14:c6:55:3e:d0:
dd:1f:11:01:71:aa:85:a3:05:70:94:39:f9:18:b5:65:cc:34:
ea:8e:ca:85:44:ce:e6:7c:f1:09:ae:61:e3:e8:9f:27:d8:6b:
4f:86:0e:93:7a:98:c2:fc:71:3f:45:98:99:ec:c8:5e:bd:d6:
90:93:13:52:06:fd:3c:6f:28:f4:cc:de:86:20:58:63:25:39:
92:37:53:60:ab:77:e2:53:69:e6:c4:a0:d4:52:93:a8:12:16:
cd:7d:e7:a1:60:81:9e:ec:c5:70:27:4c:bd:b5:5e:a8:4b:df:
96:78:0f:df:98:22:21:42:9f:7e:ab:b1:d1:0b:01:b5:22:cc:
ed:43:bf:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:32:47 2025 by rpki-client