Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: F1UG4A5LGNCORAFZeZjIeTgdXc61vHjuY6u68oCG/NY=
Subject key identifier: 9C:52:53:C9:A7:81:2B:6F:41:1D:8F:D5:89:1E:B6:15:27:5E:D9:5D
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 01975045E61529A913D5B429223E8D442B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 1258
Signing time: Sun 08 Jun 2025 16:00:47 +0000
Manifest this update: Sun 08 Jun 2025 16:00:47 +0000
Manifest next update: Mon 09 Jun 2025 16:00:47 +0000
Files and hashes: 1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: ucTI35Q2jzISlykP4Onauk8ecDgsU2U55Om3wZDIDYs=)
2: EAKe9346ONHQ_VuM_WxVCj_cv4Y.roa (hash: 5H5/ZpQAnmY/nM8N1VtyRS6/84qLoSsU0G+AmpT2T/k=)
3: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (hash: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:e6:15:29:a9:13:d5:b4:29:22:3e:8d:44:2b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Jun 8 16:00:47 2025 GMT
Not After : Jun 9 16:00:47 2025 GMT
Subject: CN=9c5253c9a7812b6f411d8fd5891eb615275ed95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:79:5d:5b:ba:31:3c:7a:4d:f8:4a:62:23:1a:
90:dc:5e:74:c9:3a:a2:6a:41:ea:34:7a:aa:4e:7c:
ad:94:91:22:0b:65:2e:1a:7a:f0:e0:4a:e9:22:dc:
3a:38:43:d8:1e:e6:73:4f:01:28:d4:bd:05:de:7d:
bd:35:4c:3f:e0:82:16:22:d5:0a:8b:7c:2e:04:a3:
e6:09:79:8a:18:ae:6a:80:85:59:a2:1d:be:08:77:
76:50:bb:34:0b:12:da:79:a0:b3:01:c5:0a:74:0d:
28:36:f9:c0:2c:9c:c0:4f:6e:2d:6e:75:06:5d:c2:
32:d5:99:76:64:fb:b7:0e:23:31:1f:6f:71:70:c5:
b3:0c:48:47:16:7c:aa:20:22:c6:0d:19:f9:10:af:
7f:e7:d4:2d:4b:62:07:f7:97:a6:b1:a3:6c:21:40:
f0:2a:9e:2d:0b:23:bc:8e:a5:78:f8:4c:d6:27:78:
23:60:6f:6a:e1:8b:a9:de:20:64:94:20:86:f8:2c:
a0:31:61:85:63:9d:eb:8f:52:df:2b:87:20:c2:df:
ed:ad:3e:45:5c:f1:f2:d6:72:63:20:e7:b9:ac:f2:
c5:2c:7f:97:5f:c5:b8:39:38:0d:88:32:65:4b:b8:
6b:d3:5f:24:02:5f:47:dc:43:2a:68:2d:fb:bc:3c:
c9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:52:53:C9:A7:81:2B:6F:41:1D:8F:D5:89:1E:B6:15:27:5E:D9:5D
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a4:a9:06:ed:83:67:f8:e3:f6:2b:cd:97:79:c5:58:0f:db:
70:77:98:e2:a5:7d:33:bf:69:bd:e4:d4:71:75:c7:2e:1d:a5:
af:bb:c5:74:ea:d2:b9:4e:1c:1a:ea:83:d0:f2:ef:b8:bd:28:
10:74:52:c3:26:1f:1a:eb:a3:86:0e:e3:0e:47:3a:e9:cc:d4:
1b:4c:84:12:10:09:29:4a:9a:75:b9:e9:ab:61:99:ac:c6:a7:
51:57:0b:49:3c:ba:fd:14:43:c2:78:b7:57:18:c1:3e:48:48:
72:6a:ad:0a:ef:40:50:7f:05:af:5d:ec:27:9c:77:aa:20:a8:
a0:33:65:4b:32:02:74:08:a3:39:37:78:d1:3e:95:20:e3:2a:
d9:b0:53:7d:4e:85:26:59:bb:c1:09:45:00:66:3b:83:98:20:
80:06:9c:9b:23:ec:30:c2:13:95:45:44:22:98:07:99:1f:85:
f0:83:7d:bf:04:89:91:1c:81:17:e2:ba:b8:80:d2:2e:c7:2e:
43:37:ef:90:b3:e5:e7:f7:9c:bb:97:4b:0d:d4:aa:f1:5b:77:
13:7b:72:95:d6:4b:f9:06:82:ea:b0:d1:7f:d3:71:67:0e:50:
7a:9b:24:aa:2e:cf:b9:b8:3b:6a:86:12:66:4f:6f:e5:4c:6c:
1e:01:c8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:41:41 2025 by rpki-client