
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier: lU6/5YRgsMUs/OjdxGT75Wg5CuQVsYAc2dVh7gPmejQ=
Subject key identifier: 64:43:A8:4F:4B:91:BA:EB:D8:85:8C:60:C2:FD:54:D0:4F:9D:58:92
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer: /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial: 01976BF479A3FED7EE85746CBC02CDDE0148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number: 0283
Signing time: Sat 14 Jun 2025 01:01:13 +0000
Manifest this update: Sat 14 Jun 2025 01:01:13 +0000
Manifest next update: Sun 15 Jun 2025 01:01:13 +0000
Files and hashes: 1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: V9/kjXrv7DyrXFBbDDebKU1O30PD8njmpEA23RInuDc=)
2: fMqs9FskGDIW9ZbaQwk0qUEC3ks.roa (hash: CtgaQ4J8AgrMFT4kVvGV6ADv6GPEnX8MMv9l/y32iWU=)
3: idiMTHuxguw5KJd3P5FoGJbinyo.roa (hash: n+9BnqU/yI6WzHcfhLc6mXo8IOBS4JMkN/uhkjIXEGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:79:a3:fe:d7:ee:85:74:6c:bc:02:cd:de:01:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
Validity
Not Before: Jun 14 01:01:13 2025 GMT
Not After : Jun 15 01:01:13 2025 GMT
Subject: CN=6443a84f4b91baebd8858c60c2fd54d04f9d5892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:81:0e:95:d6:93:9f:08:91:4c:63:a8:b4:
ef:f9:55:99:22:3f:87:3d:e5:81:4c:08:f5:a8:c3:
8c:59:ea:77:5f:96:87:06:37:a8:b3:f0:a8:b0:58:
08:1b:de:00:f3:89:de:58:41:67:5b:3e:b6:86:8d:
64:bb:71:6c:22:b1:09:ce:d4:cb:d8:78:5d:73:1f:
80:b5:f9:17:40:0b:95:c2:e4:38:97:8a:0d:af:93:
bc:c2:ed:5a:74:64:c8:31:1e:07:02:5e:6b:8a:f0:
8d:a2:6e:2f:12:64:2a:7b:49:a3:c3:01:7b:ac:94:
8e:9e:f6:ae:7a:ee:d0:31:31:7e:43:3c:c7:e2:91:
bb:9c:98:1e:a5:66:8c:61:19:20:3d:eb:09:ac:38:
1b:5f:13:dc:3d:d8:f3:6a:9f:14:7e:43:f6:17:7e:
1a:d6:40:fc:3d:a7:b1:01:34:47:04:c8:00:2c:f1:
ac:b2:15:86:84:95:5e:00:ae:1e:41:5a:72:cc:b7:
5e:7e:a3:b3:25:ab:8b:04:b2:74:d8:a2:fc:eb:4f:
b1:01:29:97:12:00:92:a2:53:69:1b:6d:d7:05:94:
2a:67:8a:9d:65:c0:1e:72:5f:70:65:e0:93:83:35:
c3:97:f4:c8:1a:f4:33:57:44:d1:85:e4:e2:c2:fe:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:43:A8:4F:4B:91:BA:EB:D8:85:8C:60:C2:FD:54:D0:4F:9D:58:92
X509v3 Authority Key Identifier:
keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:27:00:6e:5b:b0:f9:96:fd:8e:b4:88:5f:7c:f9:e3:90:80:
67:28:3d:6e:8e:33:a3:4e:02:e7:79:f3:38:97:fc:25:22:e3:
38:2a:9a:65:4c:e8:27:16:55:b6:72:fd:12:44:4f:34:d4:53:
fc:f6:73:0b:08:1f:4f:45:65:5d:98:14:2f:41:6f:a0:27:a7:
d8:33:0c:30:08:e3:4d:27:8c:db:85:d5:7d:b4:40:5e:20:97:
f7:47:38:59:64:b5:72:1b:cd:8b:ff:27:41:2a:02:87:bb:96:
65:d2:98:c6:e1:ef:7b:b4:9f:34:d1:da:f1:cc:41:67:4d:3b:
a6:ee:10:99:07:1a:37:f6:e5:de:84:67:ce:53:b9:fb:ff:d1:
58:3c:08:2c:be:14:45:03:84:45:a3:3e:63:4a:68:8a:1b:d7:
80:88:af:52:5a:3a:07:ec:df:48:56:fc:6a:38:0d:55:33:fb:
5e:67:49:0d:86:58:0e:2b:4f:4c:ad:08:c9:73:cb:de:cb:2c:
d2:90:4f:fb:a5:7b:e0:0c:8e:59:09:60:c4:7f:81:22:82:cc:
b1:83:e9:fe:70:3f:0f:70:32:68:f6:cd:38:ba:0e:e4:3e:1d:
08:d5:97:e5:ed:d7:7f:ff:e7:87:28:72:f1:cf:95:db:64:af:
c7:19:6b:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr9Hmj/tfuhXRsvALN3gFIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNmJkZjU0MzgxZjYzMDc0YWRmOWExYmQ5Nzc3ODc3YTcy
MDA0NmMwHhcNMjUwNjE0MDEwMTEzWhcNMjUwNjE1MDEwMTEzWjAzMTEwLwYDVQQD
Eyg2NDQzYTg0ZjRiOTFiYWViZDg4NThjNjBjMmZkNTRkMDRmOWQ1ODkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuneBDpXWk58IkUxjqLTv+VWZIj+H
PeWBTAj1qMOMWep3X5aHBjeos/CosFgIG94A84neWEFnWz62ho1ku3FsIrEJztTL
2Hhdcx+AtfkXQAuVwuQ4l4oNr5O8wu1adGTIMR4HAl5rivCNom4vEmQqe0mjwwF7
rJSOnvaueu7QMTF+QzzH4pG7nJgepWaMYRkgPesJrDgbXxPcPdjzap8UfkP2F34a
1kD8PaexATRHBMgALPGsshWGhJVeAK4eQVpyzLdefqOzJauLBLJ02KL860+xASmX
EgCSolNpG23XBZQqZ4qdZcAecl9wZeCTgzXDl/TIGvQzV0TRheTiwv7RlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRDqE9Lkbrr2IWMYML9VNBPnViSMB8GA1UdIwQY
MBaAFNFr31Q4H2MHSt+aG9l3eHenIARsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFd2ZlZEZ2ZZd2RLMzVvYjJYZDRkNmNnQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wZmU4ZWYtNTkxMS00NGM0LWFmYTMt
NzlkZmQxNGMzOTYwLzEvMFd2ZlZEZ2ZZd2RLMzVvYjJYZDRkNmNnQkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wZmU4ZWYtNTkxMS00NGM0LWFmYTMtNzlkZmQxNGMzOTYw
LzEvMFd2ZlZEZ2ZZd2RLMzVvYjJYZDRkNmNnQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiycAbluw
+Zb9jrSIX3z545CAZyg9bo4zo04C53nzOJf8JSLjOCqaZUzoJxZVtnL9EkRPNNRT
/PZzCwgfT0VlXZgUL0FvoCen2DMMMAjjTSeM24XVfbRAXiCX90c4WWS1chvNi/8n
QSoCh7uWZdKYxuHve7SfNNHa8cxBZ007pu4QmQcaN/bl3oRnzlO5+//RWDwILL4U
RQOERaM+Y0poihvXgIivUlo6B+zfSFb8ajgNVTP7XmdJDYZYDitPTK0IyXPL3sss
0pBP+6V74AyOWQlgxH+BIoLMsYPp/nA/D3AyaPbNOLoO5D4dCNWX5e3Xf//nhyhy
8c+V22SvxxlrVA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:43:04 2025 by rpki-client