Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft (raw, json)
Hash identifier: 4GigLGjKc3U5aRlB0SClAoB8NtbgI3z1nsFSns4mA1k=
Subject key identifier: F7:6B:40:62:79:9E:EF:61:26:F4:83:3F:DF:94:93:DC:06:5D:E3:D6
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 01974E8E5E23E1F9E3A41746D7CEB90F624E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
Manifest number: 0C15
Signing time: Sun 08 Jun 2025 08:00:42 +0000
Manifest this update: Sun 08 Jun 2025 08:00:42 +0000
Manifest next update: Mon 09 Jun 2025 08:00:42 +0000
Files and hashes: 1: D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl (hash: 44Lzhz/iYD89ZZPWxBXN0BmAGjQ/w22rpqcY+WatYug=)
2: H2kmwp7spfqcIMI0clIF2k1Rvg0.roa (hash: zHi445ArIHvkJpCdV0dHlskzjilRLemFqJLsU1rnf8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:5e:23:e1:f9:e3:a4:17:46:d7:ce:b9:0f:62:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: Jun 8 08:00:42 2025 GMT
Not After : Jun 9 08:00:42 2025 GMT
Subject: CN=f76b4062799eef6126f4833fdf9493dc065de3d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f5:ba:17:d5:b9:55:b9:46:20:03:fd:e5:f7:
2c:c9:23:76:1e:3f:d2:fa:22:14:b8:c2:6f:ca:15:
aa:54:a7:6b:a1:42:a2:c5:2e:f6:83:b9:c1:d6:d8:
a4:0a:3c:c0:aa:45:6c:2a:ec:ea:82:d0:c4:31:31:
f6:66:62:9c:f3:ca:cf:b9:4d:cd:80:9a:67:d8:5c:
d8:b9:d3:b7:6f:1c:9d:aa:87:59:f0:9d:9b:af:d8:
6d:57:fe:fc:36:f2:56:2b:f3:ad:f5:3d:95:15:d9:
00:af:79:0e:f7:5f:26:dc:23:58:25:66:b4:34:47:
fa:f2:f4:59:c2:11:28:55:3d:5f:57:22:cb:c1:06:
78:0d:05:62:47:86:ce:1e:6f:69:2c:d1:44:e3:a6:
e8:43:c6:3d:31:97:a5:63:fa:d1:09:55:7b:bd:1c:
7f:8b:17:a1:92:00:a1:25:bb:c0:4a:b2:83:76:09:
2f:c2:f1:c4:f0:ff:b5:3e:46:7b:f3:41:b6:16:28:
62:8a:75:80:42:22:a5:91:59:5f:b9:94:ba:41:51:
85:e4:b7:82:f9:32:fa:3b:7d:f3:b5:a5:63:e4:e7:
db:8a:d4:50:a6:09:7d:07:f5:20:9d:ae:c5:30:2a:
be:00:83:24:12:97:e2:5d:d4:c6:2a:53:07:c1:f6:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6B:40:62:79:9E:EF:61:26:F4:83:3F:DF:94:93:DC:06:5D:E3:D6
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:17:60:b3:e0:05:42:3b:67:ed:bd:f8:7a:d0:96:d9:71:fb:
34:09:57:2b:c7:9a:8d:41:3d:e1:23:0c:e5:2f:76:b3:85:87:
35:a8:77:17:d3:9a:dc:f8:5c:f9:ed:a3:a8:09:1a:53:08:59:
6b:f1:45:2e:49:0c:17:a5:c4:5c:eb:ed:bb:1b:d2:43:e8:c3:
39:89:58:91:5b:59:df:fc:0b:b9:0a:18:bb:7c:4c:c6:67:ae:
57:5a:a5:50:d5:26:31:bd:84:4d:ea:47:c3:cb:79:d0:54:5a:
66:ad:d6:45:5e:b0:90:b7:5e:6a:4b:fe:e6:49:fa:fc:af:d1:
d3:6b:1a:2d:7f:35:9d:3d:c6:a3:d9:43:0a:24:72:27:bf:05:
61:86:78:92:31:cf:8f:96:7a:8b:38:66:9b:d6:35:ec:14:9c:
d9:88:c8:d5:22:82:20:70:4c:84:92:96:c3:e4:7f:83:0a:b5:
86:40:bc:27:39:e4:7f:b5:b2:5f:8a:9e:21:18:5c:9a:36:fd:
cf:26:b2:06:7a:98:1a:c1:74:dc:5b:df:54:47:ec:ae:de:cc:
12:9f:f8:33:73:9d:ee:80:dd:f9:25:6d:9d:0f:cc:44:bf:b3:
49:f0:c3:64:15:97:86:98:35:b4:8b:de:9d:79:b1:c7:c4:e0:
ed:26:5b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:48:27 2025 by rpki-client