Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier: ocmh0uCGGP6ovAIMcNZneSpWnQ3vf5ts2MkUBGo+KCE=
Subject key identifier: 28:36:D7:BF:70:5E:1D:7D:C6:1A:37:A1:94:1E:EF:CC:5D:B0:56:9F
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial: 01974D7C1026928B3DA94ED2CD750C4531B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number: 0982
Signing time: Sun 08 Jun 2025 03:01:05 +0000
Manifest this update: Sun 08 Jun 2025 03:01:05 +0000
Manifest next update: Mon 09 Jun 2025 03:01:05 +0000
Files and hashes: 1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: He5+AwDEqr12WNqX8EuRfpyL3HMMBbf7crbC8gaHpCE=)
2: XLp6CpBQr9azCpsnYXzng1ufYf0.roa (hash: VoQFnds5dZA1et1XDrrDT8jx8hBkjrNF5oeGODTmq4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:10:26:92:8b:3d:a9:4e:d2:cd:75:0c:45:31:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Validity
Not Before: Jun 8 03:01:05 2025 GMT
Not After : Jun 9 03:01:05 2025 GMT
Subject: CN=2836d7bf705e1d7dc61a37a1941eefcc5db0569f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:21:1b:6d:b9:1a:8d:f3:5d:5e:c2:86:ff:
97:a6:38:47:d9:66:7c:b6:4c:05:b1:56:ca:fc:b0:
7f:89:55:dd:15:b8:45:90:02:21:5a:02:b3:4a:81:
f0:0a:b4:40:1a:ed:ad:32:6f:da:39:71:6e:49:59:
31:07:75:f3:84:4e:36:4c:2c:3c:18:95:96:c0:7a:
76:dc:d0:e3:fc:d9:2b:9e:76:d0:b0:7f:48:3f:c5:
50:3e:2e:1f:c1:48:4c:ea:70:f5:ad:c1:d2:b4:d1:
e2:6f:0e:1e:d3:1f:e5:e8:bb:70:f3:88:9d:12:85:
b7:3e:ae:61:98:94:d7:91:27:89:f1:84:ec:01:a4:
cc:09:b0:f6:af:e2:2e:d1:50:97:7e:1f:b0:8c:d8:
31:c6:3c:17:d2:5d:6e:01:31:b7:17:0c:df:7f:e5:
58:0c:c0:62:72:d8:56:1e:0c:be:34:41:f2:e5:0b:
ee:08:2d:f1:19:50:d3:23:f7:d8:9e:8d:72:0e:fb:
3a:3e:ff:a0:41:53:51:57:bd:3e:9f:7d:5d:71:0b:
52:09:7c:4c:6d:49:97:a7:bb:b5:f7:bc:1f:9a:ea:
ed:3e:50:b1:23:66:fb:f5:cc:3c:e8:b3:d1:3c:b1:
70:53:00:a7:fd:e1:bf:64:ae:9d:81:82:30:81:81:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:36:D7:BF:70:5E:1D:7D:C6:1A:37:A1:94:1E:EF:CC:5D:B0:56:9F
X509v3 Authority Key Identifier:
keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bf:e7:72:bb:8e:1a:ea:d7:6b:79:2f:7f:92:0f:bc:70:0d:
26:ac:91:aa:da:80:f0:76:09:c9:70:4d:47:37:40:75:0b:eb:
5f:1d:49:12:55:1b:06:d9:4c:54:03:86:d0:e8:12:73:59:87:
b8:7b:62:91:22:7c:d2:60:49:00:c8:36:ac:63:0a:f1:2f:49:
19:ed:e8:7b:91:cf:2a:8d:44:23:50:c2:ec:be:92:33:8c:84:
2b:f8:5d:e8:d0:61:58:8f:c0:bd:28:46:6d:71:16:fb:11:66:
c3:29:71:35:d1:ca:b5:c2:ba:58:00:3f:f1:8c:69:18:7c:b1:
71:e2:23:cc:95:58:4c:d6:90:3b:90:07:77:fd:9d:b0:70:c4:
54:ec:fd:25:bd:45:60:5c:6f:d3:df:03:3f:83:b6:76:85:75:
89:28:20:ab:00:e8:8a:cc:37:c7:ae:c9:07:65:62:c9:79:5f:
aa:6b:1f:59:58:ba:bc:e5:2e:89:73:54:62:cc:2f:47:1a:80:
04:ab:49:21:ef:57:7c:89:98:53:de:c5:ec:e0:20:fa:ef:08:
51:b4:87:31:48:6a:42:c8:cf:e1:f6:c5:de:c7:45:f4:6b:fa:
03:ff:fb:bd:da:12:f5:08:f3:b1:a4:d2:62:f6:f1:9b:0f:22:
96:2d:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:17:24 2025 by rpki-client