Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
File: 77RcySOXjBokve6WzHs683OG0qg.mft (raw, json)
Hash identifier: hKfyX/QG1OMcfNpIkKTYgKs9Xk4OKglapQcsJECNQHo=
Subject key identifier: 98:F6:80:C2:3F:AA:A8:76:F7:34:9B:BA:1E:D8:C3:EB:66:7D:92:21
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Certificate issuer: /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial: 01974EC515B0F378743D68057C2DAABCC79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
Manifest number: 0D21
Signing time: Sun 08 Jun 2025 09:00:28 +0000
Manifest this update: Sun 08 Jun 2025 09:00:28 +0000
Manifest next update: Mon 09 Jun 2025 09:00:28 +0000
Files and hashes: 1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: aVJbFRNCC5LGVAe7bfSb5BqH9bbpA9cJ5Q6dieefa8I=)
2: ONW_HHb2ZjsySF4n5zNLufP_Ugo.roa (hash: Fs9suOzCDzlX3MVkt67omPbuhLWfHekY4xcrsMfgW7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:15:b0:f3:78:74:3d:68:05:7c:2d:aa:bc:c7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Validity
Not Before: Jun 8 09:00:28 2025 GMT
Not After : Jun 9 09:00:28 2025 GMT
Subject: CN=98f680c23faaa876f7349bba1ed8c3eb667d9221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:e6:c8:93:94:f9:8c:30:da:8c:f4:b7:55:
5d:a4:e5:c9:73:db:8a:b9:cd:37:78:43:f1:ba:16:
42:4c:2e:28:ae:b3:1a:7a:59:d2:1e:44:f5:c5:83:
4c:71:41:50:13:28:de:4e:f6:e4:0e:f7:67:54:7e:
f9:d4:86:fc:0d:69:ed:20:69:57:39:d8:8a:2e:11:
42:3a:be:37:50:6e:19:3d:31:bf:8c:30:67:2f:35:
a7:27:b7:9a:d8:99:61:de:6b:db:c6:e1:d2:55:9c:
38:95:3b:e8:1e:51:0e:c2:54:16:2a:64:29:4b:1f:
13:c2:21:c7:12:80:a5:dc:b4:ac:79:11:85:b8:eb:
dc:4c:2f:09:d0:cd:ab:94:4b:b1:49:a5:92:7b:c5:
8d:79:69:63:b2:75:fd:c4:aa:f7:c7:2a:69:14:6d:
02:9b:5e:ad:0b:28:f5:3a:59:10:eb:a7:0d:61:6c:
5a:6d:85:c3:ec:b4:2d:12:b0:e1:85:ae:b1:15:e9:
2e:77:b2:9a:c8:44:fa:84:00:05:c9:03:6a:cf:1e:
24:f7:99:cc:bd:19:cc:24:cc:7d:db:e5:57:25:eb:
14:bc:e4:5e:4f:cf:8e:20:27:72:77:83:0e:be:74:
00:bb:56:87:83:61:f1:fa:fe:5c:0c:dc:06:8d:7e:
26:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F6:80:C2:3F:AA:A8:76:F7:34:9B:BA:1E:D8:C3:EB:66:7D:92:21
X509v3 Authority Key Identifier:
keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:dc:59:54:53:4d:41:13:71:7d:c2:a5:3e:cb:e6:0d:88:ff:
69:fa:52:e7:8a:b5:72:c0:14:e0:73:3f:87:68:af:4a:ce:a8:
73:3b:85:51:46:d3:43:a8:a3:a1:3b:ba:d3:2e:95:b8:a6:e9:
2a:d6:e7:54:39:6e:e0:24:30:0f:33:99:d3:5b:2b:c2:36:54:
e6:6d:3d:8a:3d:17:86:22:a2:df:41:25:11:13:49:f7:d6:6a:
a3:a5:bd:c9:f6:75:1f:8f:5d:f2:cd:7e:3a:9b:63:50:7b:a7:
d4:8c:96:4e:15:9a:32:7b:02:5b:80:63:91:04:10:25:38:42:
df:a5:65:88:ff:47:d3:35:8d:fa:e5:ac:ac:ff:d8:19:29:57:
50:93:cf:24:e3:23:08:6b:a6:19:a6:0b:67:c1:31:95:de:5a:
4a:a2:57:25:59:ac:f7:3f:43:32:9c:3a:40:b5:a2:ed:9f:fe:
78:17:62:71:10:c0:b5:dd:94:25:9e:58:e9:7a:2b:4c:1e:02:
f1:dc:1a:42:66:f5:19:0d:1e:a6:7e:df:69:2d:20:4f:dd:a4:
9e:fe:b8:20:55:24:f9:83:35:14:49:99:68:93:6f:7d:7b:1e:
07:b7:28:54:c9:43:e8:7c:7e:c4:e7:56:6c:e4:d8:e8:56:74:
47:93:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:59:33 2025 by rpki-client