Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: JEZ+yXGdA29SaRiZBdFdtgJs+5QxDenBl1AMcyBmHvw=
Subject key identifier: AB:65:37:14:95:D2:15:CE:5F:9F:65:A6:2A:69:18:B9:0B:26:A7:7C
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 019764A831767451124296A2F5F0F1FB235A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 1076
Signing time: Thu 12 Jun 2025 15:00:33 +0000
Manifest this update: Thu 12 Jun 2025 15:00:33 +0000
Manifest next update: Fri 13 Jun 2025 15:00:33 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: w52K29tpDmUQQKDmb2im1iIAaQAtiDc93D0FgS459AM=)
2: dylc3WZzrjgV2VB-T70ps5y7_v8.roa (hash: CjiSp/7ghqmIWPlGrqN52h+3zV23QhuVF2kvnW7CFVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:a8:31:76:74:51:12:42:96:a2:f5:f0:f1:fb:23:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Jun 12 15:00:33 2025 GMT
Not After : Jun 13 15:00:33 2025 GMT
Subject: CN=ab65371495d215ce5f9f65a62a6918b90b26a77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:af:60:c7:62:49:d9:97:20:67:b7:aa:b2:
78:6a:be:32:ad:33:34:b4:55:e4:98:da:5c:c8:87:
0c:df:48:d4:17:11:cf:e3:c0:94:6d:71:01:bb:50:
9f:f1:a5:0b:37:ef:82:72:bb:56:e6:9c:f1:6e:89:
9f:db:63:8b:b2:b4:f2:00:d3:ed:cc:bb:4e:94:86:
c6:94:a5:ca:ca:84:be:00:f1:e9:72:77:66:4a:f2:
a6:a9:7c:27:7a:84:f7:07:84:d3:fc:1b:55:e8:cf:
6f:ad:05:79:42:54:76:74:1c:a9:2b:35:c3:d0:7e:
7c:7d:60:25:20:0c:0a:bb:a1:7f:d8:f8:4f:a0:0d:
00:25:71:71:9e:7a:aa:99:f5:38:8b:8e:b0:db:bd:
a9:55:61:de:04:aa:96:d6:6f:a9:b6:fd:06:23:76:
60:30:85:67:ac:1d:55:4b:82:ed:e9:de:02:a1:ce:
91:b2:4d:0f:c2:8e:08:b3:6d:5d:9e:7e:25:53:ef:
f2:33:3d:76:ec:08:00:58:a9:72:bf:1f:31:7f:a4:
90:fb:32:62:18:40:47:08:45:60:64:7d:ad:38:27:
38:ba:7b:e6:84:78:3d:93:ca:92:c6:b5:db:dd:ec:
21:31:47:cf:fc:b5:24:a3:d5:4c:b5:d2:20:ea:e0:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:65:37:14:95:D2:15:CE:5F:9F:65:A6:2A:69:18:B9:0B:26:A7:7C
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ad:d7:fa:50:79:34:36:7f:15:a0:00:39:31:fd:63:12:9c:
16:2f:d1:1e:07:1d:45:a0:84:be:e0:c7:6a:a3:88:ad:04:7b:
0f:2e:9d:13:47:5c:c3:ea:ec:4e:8a:c2:fe:b9:89:78:fb:35:
33:48:f4:38:10:a1:f5:3e:80:25:cc:1b:9a:5c:7f:f2:a5:81:
a1:55:0a:12:24:bd:2a:87:4d:ba:9e:bb:2c:a4:4f:d7:b6:0d:
4c:bd:33:f9:8c:ab:76:4e:eb:1b:31:07:c0:de:5e:0b:ff:62:
38:16:76:0d:68:7d:06:05:4f:97:20:bb:34:72:79:b0:80:ae:
8b:d6:f6:44:7b:5c:25:fe:20:dd:9a:d2:80:32:8f:3d:ba:ee:
9b:37:19:f8:47:2f:cc:9e:41:bf:da:1b:08:04:90:a0:62:9f:
a6:74:68:fc:c4:00:3d:77:1d:b4:3f:e7:6b:f1:6c:7a:2f:b1:
37:55:1c:46:cd:6b:d6:04:c1:0c:6a:2d:d1:33:e0:02:99:ce:
01:cc:09:ef:65:e3:b0:34:2d:ae:0c:39:69:c4:ae:60:2e:2c:
92:93:81:11:cb:14:5b:27:18:1d:7c:a4:b0:d1:c6:12:93:09:
13:93:f4:3d:20:03:77:6b:c2:8e:84:2a:19:e8:9d:cf:61:d7:
38:60:ff:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:04:51 2025 by rpki-client