
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
File: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft (raw, json)
Hash identifier: 3LPpM4fhqPXV0Rj5P4t9omaVNlr4oF5Ex0tqlFtUWPU=
Subject key identifier: F5:D5:C5:D4:E6:D6:AB:F6:55:93:BA:3E:07:7B:10:51:E8:02:6F:ED
Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13
Certificate serial: 019749D59CA3EF105928DF5FE855F0BFD091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
Manifest number: 1166
Signing time: Sat 07 Jun 2025 10:00:25 +0000
Manifest this update: Sat 07 Jun 2025 10:00:25 +0000
Manifest next update: Sun 08 Jun 2025 10:00:25 +0000
Files and hashes: 1: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl (hash: pfKOLuWngQYtHcVhPuiu3977MZbNCCnUc/MMANTLeuA=)
2: f3ZAgsX9I3hAxsDfGccuc4frEIc.roa (hash: 4M3tVBuY11wpuTelZy7jmaALqx1HzWsWmiuVNlUHSTM=)
3: m2ywJd2kQJYTADIv61wmJdARYH0.roa (hash: ZTRMQxv3ksCR8s54WLYLbJtFtPpGkhVtVd7EKUXjlqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:9c:a3:ef:10:59:28:df:5f:e8:55:f0:bf:d0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13
Validity
Not Before: Jun 7 10:00:25 2025 GMT
Not After : Jun 8 10:00:25 2025 GMT
Subject: CN=f5d5c5d4e6d6abf65593ba3e077b1051e8026fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:3a:ec:5d:ee:ac:d8:c7:8c:56:08:9c:9f:
cc:14:3a:f6:39:10:b7:7f:71:20:aa:4a:9f:03:88:
4f:3c:96:73:82:b4:16:b4:79:53:cb:8f:cb:d7:c5:
bf:b3:4d:e2:9e:a9:28:0f:d3:db:0e:e7:a5:ae:b5:
46:1d:c7:51:7e:07:87:e0:c3:05:48:35:b2:5d:bc:
ec:63:b6:e1:f6:81:dd:5b:20:65:55:a7:4f:dd:96:
68:7b:4a:8b:cf:73:55:9a:aa:9c:f8:41:9f:a8:32:
6c:f2:df:fd:2c:32:96:d3:48:bf:7f:cf:8e:30:57:
85:d4:19:a0:ff:15:0d:05:6c:6f:d9:09:57:87:d1:
86:57:c5:f9:10:71:b2:3a:6f:7d:65:d1:4b:17:3d:
4b:d5:85:13:11:23:8b:56:e1:bd:0c:5a:34:8f:2a:
c0:bf:27:65:a9:d4:1d:bd:d2:61:c4:8e:60:7d:94:
ce:64:23:64:1b:14:c6:95:e0:42:01:71:91:ec:6e:
03:9b:bf:5c:c1:6f:eb:e0:c6:b6:c7:79:af:0a:13:
0f:33:31:7e:1b:a7:53:94:ef:ff:b1:66:e4:3b:2a:
7a:0a:9d:32:79:3a:c7:92:81:d4:f1:99:f0:50:fe:
15:35:04:5d:6e:90:6f:e1:34:b0:95:96:99:6c:0d:
a7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D5:C5:D4:E6:D6:AB:F6:55:93:BA:3E:07:7B:10:51:E8:02:6F:ED
X509v3 Authority Key Identifier:
keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a3:21:06:36:a6:be:25:67:e7:64:f1:0f:c9:61:51:77:25:
60:3d:92:b5:63:59:3f:e1:6c:0f:6e:14:2d:c6:12:9b:2f:e1:
ef:4b:92:ff:bc:a2:ac:69:33:8b:f8:41:c8:3c:c4:38:bf:02:
14:98:33:62:53:95:98:a3:3d:5f:a8:30:c6:a4:c0:56:8c:b7:
7c:54:83:8b:f5:fe:3d:56:1d:84:6f:2f:b5:16:b7:17:0f:5b:
4f:60:42:6d:80:3c:ee:a6:6a:a9:18:27:af:cc:96:aa:b0:b1:
bc:2c:21:cb:d4:1c:a9:2f:3e:64:8e:35:69:4b:d7:22:17:31:
ca:0b:68:e0:21:94:92:d7:ba:fc:fc:17:98:5f:81:01:4d:c3:
60:ed:73:d8:61:d3:b0:35:6b:4f:da:c4:23:9f:49:28:ab:1d:
01:84:4e:19:26:c8:1c:1c:95:f5:94:dd:4a:3c:34:99:d2:2c:
39:78:55:6c:59:86:84:b8:aa:24:28:22:d8:a4:57:39:9b:20:
7f:ea:3b:6b:83:e4:b1:12:5f:e9:4e:d9:a6:9f:e8:bd:cd:89:
68:72:1f:da:26:2d:ba:4d:31:c1:59:18:c0:ce:16:05:47:e4:
84:14:e4:38:5d:07:05:c9:d4:5f:46:91:dc:b0:b0:ff:cf:d3:
c1:8f:e8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:30:59 2025 by rpki-client