
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File: k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier: NXUDCU/QoWwfveshGyPJSKohvhhw7oQ3ijIFbwP3DUY=
Subject key identifier: EA:6E:35:06:2D:53:F5:6D:BA:DF:C6:73:9F:5E:CF:BD:AD:B0:53:72
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer: /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial: 01974E577A1AFAE965E7656686B14EBBE897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number: 06DE
Signing time: Sun 08 Jun 2025 07:00:45 +0000
Manifest this update: Sun 08 Jun 2025 07:00:45 +0000
Manifest next update: Mon 09 Jun 2025 07:00:45 +0000
Files and hashes: 1: GdYDqrOhgB8exVYYyIqPRX61C-I.roa (hash: NWfhvpFN96SLGPQqqCOWVE/72vTziFHwtrYFSPDHX60=)
2: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: Iv18T1GzVVefAG38swkCulSYx+E+5q4BZWTM7eRT/sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:7a:1a:fa:e9:65:e7:65:66:86:b1:4e:bb:e8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Validity
Not Before: Jun 8 07:00:45 2025 GMT
Not After : Jun 9 07:00:45 2025 GMT
Subject: CN=ea6e35062d53f56dbadfc6739f5ecfbdadb05372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:02:36:c3:32:91:49:37:6e:c1:71:3e:9d:27:
71:96:3c:ff:6d:1e:36:a1:df:3e:e9:8a:e9:94:6d:
33:f0:7b:db:1b:65:10:1c:bd:21:25:6d:95:fc:fd:
17:ab:b0:43:71:31:d3:2b:7c:5b:8a:31:e3:cf:a9:
7b:0b:b6:d7:ec:22:fa:5d:48:76:a3:2c:49:a1:f9:
0d:53:fb:b1:8f:df:47:42:d1:f9:56:17:3f:53:7c:
b7:97:03:99:03:bc:73:8d:0e:7f:cc:81:c3:85:14:
ee:36:94:6c:01:e8:5c:f3:06:70:4c:27:d9:18:56:
78:90:a6:4b:12:9b:d9:3f:f3:7c:8b:74:5f:60:d2:
75:61:3e:f0:34:eb:17:e2:96:68:12:6c:ec:bb:85:
b9:0f:2a:84:38:ba:1b:74:94:92:c2:3d:99:8c:6a:
8c:ff:5d:44:69:c2:bd:08:56:dd:96:0f:d8:03:1f:
ec:aa:0d:36:d6:a2:79:88:89:01:b6:05:dc:f7:3f:
dc:53:dc:d7:22:ec:c9:0d:55:4d:aa:c2:d3:72:dc:
83:cc:7b:6a:2a:d8:fe:60:0b:b8:ec:ae:04:af:6c:
48:41:87:4c:0a:b7:69:e5:79:f1:a3:15:ca:ad:eb:
9a:5d:c8:d6:2d:9f:70:ea:2b:bf:65:3c:40:10:b3:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6E:35:06:2D:53:F5:6D:BA:DF:C6:73:9F:5E:CF:BD:AD:B0:53:72
X509v3 Authority Key Identifier:
keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b4:fd:09:96:17:a3:3d:66:1f:46:b4:13:64:ea:94:ef:99:
0e:77:25:28:be:a5:d5:7a:a2:4d:18:7d:8b:b6:e1:af:38:94:
6b:e5:32:9a:4d:5b:a9:45:d2:98:02:8a:6f:34:46:8e:ef:bf:
75:e2:92:73:3b:71:03:20:68:73:28:b0:cc:31:75:72:01:9d:
80:93:9e:df:e8:fa:99:19:6a:e2:03:30:bf:15:3f:d4:e2:6b:
12:ae:17:f5:cb:fb:00:65:24:60:7e:3b:af:b8:9e:36:ec:c8:
a4:23:b1:84:14:27:3d:eb:ce:10:87:57:c9:3b:cb:9a:8a:93:
6d:95:be:70:df:2b:ed:5f:1c:09:47:d2:1b:22:c0:7b:c1:f8:
0f:6d:83:40:01:2f:df:9d:2e:b6:2c:01:bc:6b:95:d7:33:05:
64:fd:6a:8d:e9:c0:c1:59:d1:b5:ed:70:fc:76:35:b7:50:8a:
05:8d:95:0c:9d:c4:56:3b:1c:cd:a6:21:ca:2b:a3:00:87:70:
13:d0:08:19:02:1d:54:2b:9e:c7:f2:78:da:c7:4b:49:f2:59:
2a:af:8e:08:d2:58:03:37:c5:4a:3f:b1:c2:83:93:8f:ec:a5:
1e:4b:30:58:74:07:59:0d:30:28:9d:08:1b:9c:3c:d1:f7:48:
df:63:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:47:33 2025 by rpki-client