Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
File: 0RaDXQN3hmIKnp96DjYEmLtlQSc.mft (raw, json)
Hash identifier: kCE1n9dc98stpeU1uaHnua+Vulefx7/OQSjtfPrwGCI=
Subject key identifier: FB:0D:1B:E9:8E:03:03:7B:2E:FF:B5:F7:22:81:9F:FB:9D:7F:B6:2C
Authority key identifier: D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
Certificate issuer: /CN=d116835d037786620a9e9f7a0e360498bb654127
Certificate serial: 01974666C6F2E57B6C2F4ADF544BACD6381F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
Manifest number: 0992
Signing time: Fri 06 Jun 2025 18:00:30 +0000
Manifest this update: Fri 06 Jun 2025 18:00:30 +0000
Manifest next update: Sat 07 Jun 2025 18:00:30 +0000
Files and hashes: 1: 0RaDXQN3hmIKnp96DjYEmLtlQSc.crl (hash: /hn3YilEezaaNtVX/yrknnsfJ6y9CYr8CIHPLQjkars=)
2: Ve2RrvNi_87VDfl21Lq8fKe-sYc.roa (hash: Bwg7wRCqbsHk5Pn4Ah5pnRiyg8rpwcrSFyOQ2YGllyY=)
3: nc0QnNEGuF1kLi9w3egLsBhEL6Y.roa (hash: KWBWDWBG7Sj1CyJ1paoXUYeG29P/pnqgE+4DRW4DIYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:c6:f2:e5:7b:6c:2f:4a:df:54:4b:ac:d6:38:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d116835d037786620a9e9f7a0e360498bb654127
Validity
Not Before: Jun 6 18:00:30 2025 GMT
Not After : Jun 7 18:00:30 2025 GMT
Subject: CN=fb0d1be98e03037b2effb5f722819ffb9d7fb62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:a6:6c:94:cf:f8:1b:bb:ee:cc:ad:c5:64:
03:55:6c:10:ec:e1:42:f9:8b:03:d1:eb:06:9d:0b:
3a:1a:0b:1e:80:b0:06:bc:15:82:b7:09:4a:03:9d:
e4:51:9d:2b:55:fb:7a:2a:a5:d9:fa:3b:38:d0:33:
3c:13:fc:8b:17:80:7b:a9:e0:c4:3c:87:2b:84:db:
14:80:32:e0:c3:48:af:d0:85:02:70:ed:1e:f1:94:
6c:14:a6:7f:d0:93:01:6a:72:85:c0:cd:6d:89:1b:
57:98:60:db:75:5f:c4:3e:2c:5c:69:41:57:32:f9:
20:85:de:3c:74:90:44:2d:09:79:7f:50:43:87:9a:
18:61:92:52:55:9c:84:4e:bb:63:84:16:1d:8b:78:
2c:6a:97:29:d1:f4:1a:ff:b2:51:86:04:03:2a:05:
90:75:46:3e:b4:e8:57:7f:b1:b6:57:4f:6e:2a:53:
b5:e5:6c:a9:20:b3:19:f7:92:d2:55:a3:a7:f7:96:
d5:39:e3:eb:24:41:1e:60:4c:35:2a:a8:3a:37:7e:
68:d2:ab:5e:6f:0f:a8:61:22:51:3f:59:40:d7:cf:
45:ee:b0:ff:67:b2:25:7a:c9:ea:c8:83:88:c1:7b:
b8:29:f7:83:bf:cb:bf:0c:a0:0b:6b:55:7c:2f:57:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0D:1B:E9:8E:03:03:7B:2E:FF:B5:F7:22:81:9F:FB:9D:7F:B6:2C
X509v3 Authority Key Identifier:
keyid:D1:16:83:5D:03:77:86:62:0A:9E:9F:7A:0E:36:04:98:BB:65:41:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RaDXQN3hmIKnp96DjYEmLtlQSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f507cb-7371-4ad1-b7e3-16a7d60d5bea/1/0RaDXQN3hmIKnp96DjYEmLtlQSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3d:4f:7f:e9:1b:5b:db:c2:ca:67:0f:40:65:01:0d:2f:16:
a3:97:90:45:13:cd:79:ea:42:9b:ae:f2:5c:3b:fc:35:66:0c:
8a:bb:02:ef:c8:86:0a:03:60:3a:ac:72:7a:f4:66:0e:ed:14:
8c:ea:35:b5:23:b2:eb:37:63:62:6b:19:3c:8d:ec:35:97:dd:
e1:1f:8b:19:9c:e8:e7:22:99:06:ad:3c:b4:d9:c3:9a:03:d7:
86:3d:1e:84:11:da:c7:76:3b:12:48:2d:c2:d1:72:1a:c7:54:
90:e9:da:2a:1e:e3:dd:ef:8e:b2:be:8f:db:1f:82:66:c1:b1:
f2:6e:ce:90:83:5d:6e:2a:70:7d:05:57:40:0d:82:8a:f5:2a:
ed:3e:80:b4:f9:77:e9:89:92:43:10:df:32:76:83:08:54:9f:
64:1e:f0:06:ad:7f:c2:20:00:7c:98:d6:e5:d6:6e:36:35:d9:
76:e0:fa:42:28:08:0d:d0:d4:91:3b:69:c0:c7:fa:c2:b6:db:
47:a3:ad:1c:52:9d:57:7e:e1:f3:44:87:24:e2:c1:af:2b:96:
c8:57:76:d7:75:1e:ab:ab:81:3d:8c:fa:d2:cf:58:13:9f:aa:
af:6d:45:d7:87:8a:d7:d4:93:05:c0:a7:b2:46:67:f1:d2:72:
9b:1c:ff:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:04:48 2025 by rpki-client