Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
File: D5x3odzbju1izTyoClFE3E4kP04.mft (raw, json)
Hash identifier: ZjnhGm1I6R1qoYWlx5VXVrxT7G+4llC6l0S9o7/0lmw=
Subject key identifier: 77:59:FB:15:F9:F3:7F:EC:38:10:7C:3A:F2:F1:05:17:AA:42:F8:3E
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 01976F62A56CADF3BB3156CAEB53DB67B1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
Manifest number: 159B
Signing time: Sat 14 Jun 2025 17:00:25 +0000
Manifest this update: Sat 14 Jun 2025 17:00:25 +0000
Manifest next update: Sun 15 Jun 2025 17:00:25 +0000
Files and hashes: 1: D5x3odzbju1izTyoClFE3E4kP04.crl (hash: mg9HRTv0bDRoju11eG/dzfWX+or2GMofZZ/oHDsqVyY=)
2: EU9ZI9FwGK9Je2LIHv8oyryDbQ0.roa (hash: lg1hblUtV5bfdjAsYpP/FKql2pfxKFHlS2JkI4euny0=)
3: UttiV2rZhXbpiEroK90NOoWzeyo.roa (hash: clJAUfrgzlJXm2cn+fD7HIKwQaoQPkMOMFf6DpqSgo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:a5:6c:ad:f3:bb:31:56:ca:eb:53:db:67:b1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Jun 14 17:00:25 2025 GMT
Not After : Jun 15 17:00:25 2025 GMT
Subject: CN=7759fb15f9f37fec38107c3af2f10517aa42f83e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:79:91:ff:54:d0:34:89:c8:47:60:80:07:8e:
dc:6c:de:ba:47:47:55:73:c4:75:01:e9:4a:31:06:
6a:6c:7b:e6:9d:1f:64:26:c6:5f:50:6e:85:13:0c:
32:a7:21:11:50:dd:14:68:4e:88:54:46:11:f6:63:
a1:c6:c3:44:33:13:a1:6f:98:bf:1d:1c:9c:fa:dc:
09:96:e3:85:36:12:8c:18:de:34:81:96:ab:6c:04:
00:f1:ba:6b:00:da:15:19:65:62:a5:37:3d:6b:e0:
6b:f6:67:7d:52:c7:d1:60:e7:9a:85:a8:ea:64:02:
46:db:54:d7:ca:e9:75:ec:5f:93:1d:9f:39:1a:46:
ae:4e:5b:36:56:b5:38:b3:03:f4:71:66:8f:79:f5:
bf:26:f3:50:0e:a7:86:2b:7f:ce:bf:d1:70:c9:ed:
fd:bb:23:1a:d0:1d:c6:0f:9f:a8:7e:7c:67:e3:af:
70:8c:30:83:ec:d0:0f:2a:26:17:51:a5:6c:1f:3f:
45:75:a4:ca:20:57:43:e8:81:c0:c4:58:4f:c5:1b:
94:72:e8:d9:a3:c7:06:ce:22:44:bf:27:97:2d:2d:
f3:e9:41:fb:d2:4c:45:29:95:8b:a4:51:28:87:91:
8c:50:5b:e9:e7:3e:06:69:d3:94:62:50:5a:d9:37:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:59:FB:15:F9:F3:7F:EC:38:10:7C:3A:F2:F1:05:17:AA:42:F8:3E
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:99:f6:78:bb:5c:24:cc:21:6f:15:5d:51:9d:2b:64:67:68:
56:14:31:20:5c:f2:f2:ea:6a:e1:6e:64:11:10:3c:e2:11:bf:
46:c7:f7:db:19:ff:1b:51:20:41:8f:64:09:ca:24:6f:6e:73:
59:37:69:39:eb:b9:43:85:04:54:a8:db:55:70:42:be:f5:e4:
4f:8d:c6:c6:e6:7d:e2:58:ab:d4:c3:2d:81:f2:ae:9b:72:bd:
c4:e6:a1:97:b3:64:f2:7f:ea:fe:32:f7:58:15:f2:0f:0f:23:
f3:82:50:da:f3:1e:37:34:63:f4:1c:a1:91:e7:2c:47:ab:3e:
7a:73:29:b4:5f:da:15:6c:bf:26:31:d0:42:4a:34:f3:c9:ac:
96:21:bf:30:02:d3:0d:08:19:77:53:ab:b3:f4:38:2d:4b:ff:
45:45:6c:f2:c0:f1:7a:86:a0:90:de:cb:84:f4:12:be:fe:99:
ea:c2:0a:ff:d5:0c:bf:86:34:63:69:2a:b3:9e:c5:46:aa:bf:
60:3e:58:fb:9c:ee:f8:c8:8e:9d:1b:52:f6:08:77:c7:39:e4:
38:0b:ec:3b:1e:f6:03:98:39:0f:a3:06:21:b1:6d:f5:55:d4:
bd:8d:a1:2b:b2:67:c9:b1:c6:b6:3e:e9:db:1d:e1:de:30:93:
12:2d:51:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:40:07 2025 by rpki-client