Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: 7RgzIjiClBRzcnjA8Y9BIfx0Y8/xJRhwCdGLHso7SoU=
Subject key identifier: 28:7F:F6:5E:1D:33:53:AE:65:56:EA:6A:42:B9:CB:6E:73:C4:08:B2
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 01975EDD0D3C060AD39DFEAA23FE724ABBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 1073
Signing time: Wed 11 Jun 2025 12:00:34 +0000
Manifest this update: Wed 11 Jun 2025 12:00:34 +0000
Manifest next update: Thu 12 Jun 2025 12:00:34 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: /MVqMxEOJQBQsPaIiJok+sJuED4SUj1fTcDA8oBs8BY=)
2: dylc3WZzrjgV2VB-T70ps5y7_v8.roa (hash: CjiSp/7ghqmIWPlGrqN52h+3zV23QhuVF2kvnW7CFVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:dd:0d:3c:06:0a:d3:9d:fe:aa:23:fe:72:4a:bb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Jun 11 12:00:34 2025 GMT
Not After : Jun 12 12:00:34 2025 GMT
Subject: CN=287ff65e1d3353ae6556ea6a42b9cb6e73c408b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:62:b4:4e:8d:d8:d3:f7:a6:3f:35:28:aa:18:
02:d4:3f:cd:6c:48:44:61:80:a7:e2:a3:85:51:99:
7c:68:c5:e3:83:40:dd:32:e2:31:ff:c3:06:30:17:
8b:00:87:cb:d7:95:00:01:5a:00:2c:8d:61:27:81:
8f:ab:08:bf:fc:d7:94:7d:ad:bd:f4:1e:0d:d2:a8:
c5:f5:fd:a2:f9:5a:7b:80:09:2c:5f:83:5c:fc:3a:
f2:9e:4b:67:5a:2a:1c:0f:45:8a:9b:c9:e6:f5:53:
f5:70:05:c5:76:bf:35:05:23:6f:05:80:cd:d7:b7:
6f:f7:ce:95:84:09:b1:12:85:af:56:ef:8f:c6:6f:
05:64:20:be:b0:24:f7:df:0c:01:c7:44:25:5f:46:
c0:72:a2:46:94:bf:54:a9:ef:2e:b3:28:56:d3:9d:
2c:1f:44:a3:8c:18:19:56:59:65:79:38:ff:98:9e:
f4:6a:36:d1:5c:11:77:d4:34:32:eb:d0:3f:25:c7:
ef:74:43:c8:e2:3a:1a:8f:94:37:1c:4d:4f:7d:fc:
99:af:e2:7b:8a:2a:47:cf:4a:cf:dd:75:cf:da:dc:
03:71:a5:14:19:90:fb:93:b4:bf:29:3b:54:51:dd:
4e:d6:b2:1b:f9:6c:56:72:0d:0d:e2:60:7e:9b:ea:
c8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7F:F6:5E:1D:33:53:AE:65:56:EA:6A:42:B9:CB:6E:73:C4:08:B2
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:cc:70:a2:a9:ec:db:59:b4:47:1a:4e:ac:6f:0f:ae:07:81:
58:36:3f:0f:79:6a:a4:bc:57:66:94:95:84:34:f7:f4:f4:b7:
70:2d:e2:c4:14:b5:4b:00:0d:0a:f9:85:2a:51:b6:09:68:b9:
d1:ee:ac:a1:d8:0a:09:19:09:57:21:8c:28:d1:12:0b:22:5f:
ed:e0:f6:e1:7a:ec:7f:c9:25:c6:e2:30:7e:11:fa:46:d8:bf:
ff:7f:ea:28:31:a2:df:2f:4a:fa:62:a1:be:69:0d:38:2f:3e:
b3:7d:51:e3:ae:93:b7:aa:48:da:a2:5c:ec:09:80:7a:28:3c:
30:d3:d4:c5:be:9f:05:24:d1:b4:16:67:26:c5:8a:7b:a5:fb:
15:55:53:1e:25:01:f0:21:a7:ea:c5:cb:ac:0b:14:91:3d:f3:
db:c5:97:d2:7d:0d:b2:b7:51:0a:3c:ba:1a:f7:68:c7:68:02:
c4:22:92:48:dd:4c:8e:12:df:02:11:c8:1f:10:13:23:2b:2c:
29:2c:c5:42:a9:da:ad:b1:41:e2:51:50:b6:00:53:04:38:4f:
e4:0d:be:a5:b3:6c:19:1f:8a:5f:38:73:4c:fc:8a:d8:e6:78:
6d:ca:de:f1:2a:63:e5:d7:93:f4:0b:5f:b9:24:87:e7:04:ed:
61:5e:8d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:38:33 2025 by rpki-client