Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
File: ot5KBypby3TSDpLdu9f2R3w8j84.mft (raw, json)
Hash identifier: GTGTKfDNI2DSBxgiGeofrUKT3EC09Y4G5cJ6rfYOCgw=
Subject key identifier: 17:8D:87:3B:70:98:FD:41:1A:32:58:94:E7:BB:1C:59:C1:26:A0:B2
Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Certificate serial: 01974F33228A641D31DA8615CB845A3DFE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 11:00:40 +0000
Manifest this update: Sun 08 Jun 2025 11:00:40 +0000
Manifest next update: Mon 09 Jun 2025 11:00:40 +0000
Files and hashes: 1: cXzh2EByibI6pp16VOl9xphGioo.roa (hash: it2xcMVeYRReFR9yZ4UbpAh0VY8UGfjt29+46hCCzeU=)
2: ot5KBypby3TSDpLdu9f2R3w8j84.crl (hash: 1TW9wcEAOua5dLTgGCNVTIIMJJUH0eLdfepNAqN/GKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:22:8a:64:1d:31:da:86:15:cb:84:5a:3d:fe:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Validity
Not Before: Jun 8 11:00:40 2025 GMT
Not After : Jun 9 11:00:40 2025 GMT
Subject: CN=178d873b7098fd411a325894e7bb1c59c126a0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:78:09:c3:ca:1e:b5:ff:12:21:7d:88:99:
93:d4:46:21:32:36:30:21:f1:40:88:b6:4d:ba:1a:
cb:43:b6:41:65:88:a3:8f:20:26:3c:53:1e:34:e1:
f6:f7:85:f7:3c:b2:bc:59:d3:5b:90:cd:9d:be:24:
85:9b:74:46:de:d8:fb:67:e0:4b:cd:80:14:35:e0:
a5:16:4d:6c:3c:bc:c4:46:d4:3d:3d:e2:d2:eb:76:
e9:a6:30:a1:04:7f:6c:8a:d0:2c:71:a4:5d:68:1f:
71:21:d8:58:48:99:a8:51:54:8d:61:bf:10:59:c4:
eb:95:4c:72:4c:54:13:01:72:0d:c6:d3:9b:9a:b9:
6b:57:87:fd:f1:42:b5:e0:89:f5:08:b9:d3:d4:7b:
6f:8a:52:e0:8d:70:78:4d:cf:7f:1c:2a:5d:da:89:
c6:83:3d:c9:a9:10:d0:47:cd:3d:83:f3:b7:5a:0f:
c8:42:3f:07:43:48:12:74:a3:db:87:ce:ae:ca:3d:
7e:bd:47:ff:38:7f:1b:9b:9d:b7:44:79:74:b8:0a:
93:3b:42:0b:6d:cd:58:7b:27:7b:1a:fc:63:17:bd:
dc:bf:12:81:53:b0:ab:c7:b5:e7:2a:0e:8e:ab:1f:
67:46:92:40:8b:05:fe:81:39:05:63:bc:4f:e9:6a:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8D:87:3B:70:98:FD:41:1A:32:58:94:E7:BB:1C:59:C1:26:A0:B2
X509v3 Authority Key Identifier:
keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:84:b4:1b:cc:4c:de:09:0b:56:b3:c8:9b:92:e8:59:fc:dd:
f9:df:50:ec:3e:26:b3:12:43:f4:88:66:7b:13:60:81:91:b6:
0b:38:27:a7:2c:04:02:c5:ed:41:c9:fb:57:26:c9:79:18:9c:
24:98:d6:96:4a:5f:6f:b9:7f:52:d6:04:e1:2a:e6:28:bf:b3:
4c:81:bb:d7:4b:87:f6:86:fd:93:94:43:90:cb:f1:bd:2e:8c:
97:81:66:c6:c1:eb:5c:1f:65:c0:27:0e:82:98:9a:ce:c4:d9:
41:fe:99:88:c9:c6:2c:6c:75:61:7b:bc:c9:5f:ff:ed:ff:20:
84:29:69:ed:cb:ed:3c:80:c3:00:56:a7:64:13:6c:91:7b:30:
64:8a:09:71:40:c5:72:01:98:d2:bc:86:10:10:d7:55:3c:46:
4c:ec:32:41:a7:08:6e:1c:43:e0:92:01:be:29:62:ac:fc:21:
31:2c:fc:1c:2b:8b:cb:9f:a4:d5:78:de:c9:33:54:20:73:e6:
01:25:50:1a:fb:67:79:b9:99:a0:4b:96:e8:48:58:05:43:77:
de:49:90:7f:b9:c6:3a:d3:8a:ac:6b:99:f7:8e:92:08:5b:a5:
a1:7c:5b:c0:4d:cc:bb:7b:68:de:98:6b:bb:f1:96:d9:1a:82:
cd:48:9b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:37:31 2025 by rpki-client