Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier: Xv5YCCMPrNzgPokS5DhJjK8mDpZJUdvX0Pd4Ls5jDyw=
Subject key identifier: 83:A3:7C:9B:1C:F5:29:60:AF:EA:48:1B:F9:14:DA:92:17:A4:B1:0F
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer: /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial: 01974A43CA902075777C99D0966C03E067EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number: 0C66
Signing time: Sat 07 Jun 2025 12:00:46 +0000
Manifest this update: Sat 07 Jun 2025 12:00:46 +0000
Manifest next update: Sun 08 Jun 2025 12:00:46 +0000
Files and hashes: 1: JS20272zzOd7lsvAhAy2fEVjeyI.roa (hash: cOcrvgmIxE66W+f+FGaVHK7zq1S4gdeOGb2xk9gX0lg=)
2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: AtL3iPYoqnu6SiMxTWCcGrWqwTo8unpBGz61XygqDP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:ca:90:20:75:77:7c:99:d0:96:6c:03:e0:67:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
Validity
Not Before: Jun 7 12:00:46 2025 GMT
Not After : Jun 8 12:00:46 2025 GMT
Subject: CN=83a37c9b1cf52960afea481bf914da9217a4b10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:2c:af:76:fa:99:93:df:0e:6e:6a:cb:dc:
b9:5e:99:55:76:44:1a:0d:24:1e:b9:af:f8:40:97:
6c:d9:d4:29:43:63:cb:c9:62:eb:2f:79:71:8f:33:
98:19:61:4b:46:af:90:0b:ab:49:d5:a8:09:57:17:
08:4e:9f:b9:70:c1:65:2c:93:5d:44:e6:51:37:5b:
f7:5e:da:41:d7:d4:4e:c7:c4:3b:6d:c1:11:fc:f6:
8c:7f:2c:72:eb:be:83:77:2c:a4:8f:5d:75:e3:fe:
ed:58:dc:f4:51:8e:25:29:63:e1:41:8f:6c:f4:97:
a8:28:bf:8f:42:80:15:25:7d:70:4e:73:34:ab:4d:
55:9a:35:6c:00:48:47:2e:38:b7:3c:22:a7:35:b8:
8a:ea:a1:c0:7a:8c:b1:fe:78:97:54:86:11:4c:48:
d2:a0:ce:12:5f:e8:77:41:13:de:43:59:b7:ad:0c:
65:46:06:70:e6:28:ad:56:d5:f4:c7:b1:64:9f:57:
8f:d4:de:d0:a9:8f:1d:f4:07:89:b6:7c:2e:9d:d0:
34:d3:a7:6c:d7:12:e0:9f:41:ef:e1:b8:2b:9c:84:
58:2e:d7:2e:51:9e:b1:c4:f4:cd:ae:d9:ef:38:04:
f4:83:34:77:1a:4c:a7:b8:3d:c0:5c:a7:fb:41:c0:
5e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A3:7C:9B:1C:F5:29:60:AF:EA:48:1B:F9:14:DA:92:17:A4:B1:0F
X509v3 Authority Key Identifier:
keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ad:b9:44:03:87:39:d2:fc:f1:46:54:20:f4:86:b6:13:d6:
95:8b:17:0a:4d:a6:77:10:ba:6d:ee:1d:73:c0:79:a4:2c:f9:
66:b6:f8:f8:bb:ae:e4:2c:7f:b8:61:69:6b:c5:79:27:9f:c1:
ed:42:27:0f:f5:4b:75:e5:bc:48:09:b7:b1:06:71:05:70:cc:
0e:d9:cf:8e:89:8f:ba:e8:c0:e5:54:0f:27:9e:9f:6b:39:76:
2a:8c:47:70:ca:d5:8a:f6:1b:c9:f7:0d:66:75:0b:5e:db:41:
10:9c:f1:19:1c:ae:af:fc:ac:81:73:9a:74:5b:69:f8:95:df:
39:24:0f:b0:f1:55:00:51:f3:e0:21:4a:3b:80:98:b1:81:33:
9d:48:c8:e0:1b:32:a3:22:40:da:5b:51:6c:50:b8:13:1e:5c:
e5:03:12:01:fd:51:73:45:18:f5:c8:bf:af:a3:ea:11:bd:bd:
51:a9:9c:89:f3:3a:5e:bb:83:22:73:64:aa:1b:b9:81:bc:b1:
ec:9e:af:6d:01:68:c3:ca:eb:7e:38:dc:7b:8f:b9:c8:16:7b:
77:67:86:6f:37:92:fb:94:0a:fa:a5:67:e9:83:a8:a4:a9:ae:
68:07:49:ff:73:2e:eb:94:49:c6:83:8d:29:7d:e2:2f:ec:5a:
1b:c2:31:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:26:57 2025 by rpki-client