Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
File: 43O80yVaDa1fSjUNEdyJH6C-BDc.mft (raw, json)
Hash identifier: oWTTRvCPqtuuCUU86jzPKXiwIFt1jDvefDJM2EBDJbw=
Subject key identifier: 1E:BF:C1:CB:1E:DD:A1:69:DB:28:F0:54:72:FF:23:5C:C2:8D:2D:F9
Authority key identifier: E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
Certificate issuer: /CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Certificate serial: 01976AAA9F542478C24D7106DA965B9EC971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
Manifest number: 065D
Signing time: Fri 13 Jun 2025 19:00:56 +0000
Manifest this update: Fri 13 Jun 2025 19:00:56 +0000
Manifest next update: Sat 14 Jun 2025 19:00:56 +0000
Files and hashes: 1: 1-AKJmO9q5axmG2bLlo_CKWpT7rI.roa (hash: IzbOHhtlqnCQLwohTNVhlpmomMZIZO83L4rK6yCvODA=)
2: 43O80yVaDa1fSjUNEdyJH6C-BDc.crl (hash: n43kn2ZJmq9/hyEqgcYqHAT2Vo4sy1EUaUlpl8pMkWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:aa:9f:54:24:78:c2:4d:71:06:da:96:5b:9e:c9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e373bcd3255a0dad5f4a350d11dc891fa0be0437
Validity
Not Before: Jun 13 19:00:56 2025 GMT
Not After : Jun 14 19:00:56 2025 GMT
Subject: CN=1ebfc1cb1edda169db28f05472ff235cc28d2df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:67:6d:54:dc:d3:f0:e1:4f:db:b2:41:f0:a0:
c0:f6:f2:50:80:ff:84:ba:48:8e:06:dc:01:d5:c6:
92:08:fe:41:a4:44:ba:20:40:54:e8:ee:47:a9:13:
18:44:94:bd:12:96:81:f3:b1:b0:92:e7:a3:fc:c8:
09:e8:e3:ed:87:dc:a4:4d:35:c2:15:1a:46:78:d8:
49:ae:f1:45:d4:ef:29:27:ef:c3:32:93:69:c2:30:
1c:fb:c3:43:27:55:0c:59:bd:f0:51:4c:4f:fc:15:
60:f0:5b:0d:93:91:05:f8:70:30:38:dc:0d:c5:17:
da:e6:ef:9a:54:3b:f7:e3:3c:f1:90:2c:7b:1c:c2:
d0:16:3a:7b:9e:0a:99:1b:71:14:aa:03:41:82:4c:
4a:d4:63:a2:c5:77:25:f6:f7:50:2c:ea:c0:85:09:
9f:e4:8e:af:bd:b4:00:ac:ff:55:8a:53:4b:0a:7b:
44:6a:0f:70:8b:67:f3:34:d3:2e:03:d2:dc:74:a7:
6a:85:d0:07:56:43:eb:20:69:94:73:10:4e:16:f6:
99:88:ef:e0:3d:ce:12:60:25:1f:c7:ff:80:6e:30:
5d:23:58:3d:6b:7e:69:2e:7e:9c:6f:ae:5e:ad:05:
69:bb:40:6e:7a:a6:74:0b:36:6c:48:1f:7f:ed:24:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BF:C1:CB:1E:DD:A1:69:DB:28:F0:54:72:FF:23:5C:C2:8D:2D:F9
X509v3 Authority Key Identifier:
keyid:E3:73:BC:D3:25:5A:0D:AD:5F:4A:35:0D:11:DC:89:1F:A0:BE:04:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43O80yVaDa1fSjUNEdyJH6C-BDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d20dbc-2ab4-43fb-80a2-04e7b1a8ce18/1/43O80yVaDa1fSjUNEdyJH6C-BDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f0:57:20:22:ff:66:a0:6e:5d:15:23:19:c4:e6:87:7d:be:
4b:d2:b7:21:79:5a:ba:17:f1:3e:fa:13:5d:d5:42:13:09:0a:
25:09:a5:4f:2a:37:32:24:a3:05:4b:29:fd:46:45:38:d9:a2:
ed:35:df:40:aa:e4:b8:0d:fc:6d:99:18:bc:48:5d:f9:f7:b5:
d9:e7:55:fc:7d:d8:b1:1c:0b:63:ae:1a:f6:4c:f6:6c:7f:59:
90:9d:ae:3c:73:5a:6f:3e:af:73:d7:1f:cf:bf:d2:ed:99:69:
3c:11:a1:d1:dd:41:3e:f0:d0:e0:47:49:4c:48:29:c6:b9:d6:
5c:38:06:e4:5c:57:2d:77:fd:53:bf:e2:5d:3a:dc:d3:66:eb:
86:cb:86:c2:d7:13:cd:0f:97:8d:d2:a1:51:8f:f0:0f:47:85:
13:6c:26:2c:8d:57:71:7a:c7:da:3e:41:8a:60:60:e7:31:65:
38:01:20:02:dc:bc:71:5c:93:a4:73:a4:8b:c5:48:03:64:c7:
6a:da:46:39:ac:65:2d:f6:66:3c:01:c9:f2:69:f4:84:2c:75:
2f:41:d1:92:12:98:97:ff:9b:a8:91:5c:67:52:f4:9c:75:cd:
5e:69:ca:07:5b:19:f7:b3:20:3a:9a:f5:7f:ca:28:ab:17:af:
53:ac:ed:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 04:39:43 2025 by rpki-client