Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
File: C0ojfRF9934LiqUS9vJfsgf5orE.mft (raw, json)
Hash identifier: +S8ZO1N8E+1Yyx4P7xsSuh9jc78n6Q2uveamJwXlW6Q=
Subject key identifier: B2:AC:10:09:7D:B4:40:70:E1:24:B3:C7:92:CD:52:8C:FC:49:45:D3
Authority key identifier: 0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
Certificate issuer: /CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Certificate serial: 01974AE91557B8D1DD2A27025BE0BA80D553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
Manifest number: 1118
Signing time: Sat 07 Jun 2025 15:01:18 +0000
Manifest this update: Sat 07 Jun 2025 15:01:18 +0000
Manifest next update: Sun 08 Jun 2025 15:01:18 +0000
Files and hashes: 1: C0ojfRF9934LiqUS9vJfsgf5orE.crl (hash: BVS9FVKxRma42TefM+gstiqlJZue9WTch+NnCuYtoao=)
2: ubaYGhsK3un9FzpeOuJImEsVY0k.roa (hash: GKSurghCGTsvWWfo6kF8DtoCXANGJM6Q52lyK44WE3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:15:57:b8:d1:dd:2a:27:02:5b:e0:ba:80:d5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Validity
Not Before: Jun 7 15:01:18 2025 GMT
Not After : Jun 8 15:01:18 2025 GMT
Subject: CN=b2ac10097db44070e124b3c792cd528cfc4945d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:9e:19:fe:88:1c:7d:a7:be:2b:85:7d:92:
ce:a0:06:6f:2c:a5:d9:47:0f:00:fb:5f:2e:73:b4:
75:b5:97:f4:6e:6a:89:07:5c:8e:db:79:cb:0a:f8:
b4:9e:73:79:8f:30:db:19:85:aa:bb:a2:5d:2e:b3:
3c:a7:35:a9:ef:de:bf:a2:7d:02:48:08:09:63:70:
e9:a3:be:93:7b:3c:29:2a:87:ff:76:5d:81:6f:84:
32:b8:7a:33:30:8e:ab:ac:e8:32:10:8f:ed:e2:78:
76:6a:07:c1:2e:68:81:a9:e8:f2:9f:2e:f3:6c:c3:
33:08:01:ab:09:e4:f1:eb:b1:92:ef:57:13:0a:7a:
85:c7:e6:7f:52:03:85:63:85:d5:d1:15:1f:52:25:
3e:7d:f7:3a:20:d5:18:d2:de:58:62:41:eb:f4:19:
b3:37:3a:5f:31:14:72:ea:96:d0:22:e5:0c:35:03:
d5:a7:20:1a:77:a4:bb:6e:45:8e:e6:77:02:fa:07:
50:82:06:4d:68:b7:2c:91:b1:31:86:5a:c5:29:66:
12:65:5b:ea:ce:d4:e8:36:a7:69:4d:a8:c8:bf:2c:
ea:61:04:86:d9:de:21:86:d0:14:96:32:87:2b:f8:
ad:0f:ae:10:c1:4e:5c:17:9c:38:ce:97:9f:f5:54:
32:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AC:10:09:7D:B4:40:70:E1:24:B3:C7:92:CD:52:8C:FC:49:45:D3
X509v3 Authority Key Identifier:
keyid:0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d3:f8:3d:12:38:f4:03:f4:77:33:aa:8f:0a:6c:15:23:98:
34:94:1d:e5:0e:20:46:2e:4f:51:89:0b:4f:61:09:cc:68:d8:
55:61:4c:71:51:8e:38:6b:36:02:e1:9d:7d:e1:9a:fa:3b:1d:
b4:eb:ce:6e:11:4b:bd:99:b9:e4:ab:8a:72:ee:13:3a:39:68:
38:65:58:04:3b:71:75:55:6d:fe:7a:97:72:b6:79:c2:1e:7a:
e4:dc:d3:a4:58:2c:65:00:9b:de:ae:f6:44:66:95:46:59:00:
cc:a2:af:9c:44:52:f0:3a:79:c5:a0:69:25:43:72:04:cb:17:
da:c3:e2:fe:44:f7:14:6b:4f:c5:d7:38:b6:ee:da:74:9e:6d:
37:39:da:c0:da:28:e2:cd:69:75:36:12:b4:80:51:15:e6:39:
20:2e:02:cd:e0:e4:65:3e:0f:29:ef:a4:12:29:e1:36:06:7a:
c1:10:d9:5b:fe:0b:39:ee:dc:64:33:56:60:d2:e2:86:07:6c:
d3:de:09:bb:0d:9c:c5:84:1d:88:1a:12:f3:01:cb:17:f0:2e:
56:44:e3:e1:33:a0:e7:a7:ec:d3:4b:8e:61:5a:68:a0:d7:0c:
f3:a6:d5:f7:91:1d:da:db:5e:02:06:a6:81:5e:60:88:5d:52:
fa:89:49:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:35:58 2025 by rpki-client