Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
File: d1szbD5Il6UrOcOtquzOxr9wzn0.mft (raw, json)
Hash identifier: z9xWngZ9FA3ei5TrxQapv4stmnYhFo2QW4MhGtX/3AQ=
Subject key identifier: 62:47:6B:D5:E3:13:28:B1:B6:45:0E:A8:63:52:F3:1C:27:26:FB:64
Authority key identifier: 77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
Certificate issuer: /CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Certificate serial: 01977B6761E211D167B1FB0966E6374F598E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
Manifest number: 14BA
Signing time: Tue 17 Jun 2025 01:01:02 +0000
Manifest this update: Tue 17 Jun 2025 01:01:02 +0000
Manifest next update: Wed 18 Jun 2025 01:01:02 +0000
Files and hashes: 1: 1-jRnyFGmEx1CVoLDNNDO26bccvY.roa (hash: 23QvIcsUor9KhcMI2prwonWuUHDRgDZgiqunE4RPe6c=)
2: d1szbD5Il6UrOcOtquzOxr9wzn0.crl (hash: V+Nn6XJcMGOHvc2S95+LOC+Zn/8ZuMW0S9rjewjcriY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:67:61:e2:11:d1:67:b1:fb:09:66:e6:37:4f:59:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=775b336c3e4897a52b39c3adaaeccec6bf70ce7d
Validity
Not Before: Jun 17 01:01:02 2025 GMT
Not After : Jun 18 01:01:02 2025 GMT
Subject: CN=62476bd5e31328b1b6450ea86352f31c2726fb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:96:57:8e:44:dc:47:b9:b6:a0:e3:62:37:
2d:c7:f9:0b:80:d2:5f:79:4c:21:37:a5:23:09:6e:
0c:e6:4f:99:57:f5:c3:24:9a:63:f3:97:83:7a:4d:
1c:d7:5f:af:29:38:f7:50:af:6e:f3:e8:f1:40:d3:
45:ad:38:97:11:a8:80:ad:93:6e:ce:3e:13:1d:9d:
ba:9b:ed:41:1a:2c:b6:39:c8:2f:1e:48:d5:b8:d7:
a8:ba:6a:fe:6d:a9:08:d6:f1:22:b9:80:21:f7:d5:
39:95:21:8e:63:74:e0:fc:db:41:8d:c0:55:5e:35:
e1:cc:2c:57:f4:98:3e:91:5b:8e:4d:28:70:95:3b:
7a:3b:34:21:0b:52:9d:3b:63:8a:61:c0:a4:54:59:
15:db:f8:e0:b4:12:03:d8:d6:a0:6f:3b:a7:6e:58:
7e:02:35:3a:f6:a0:4b:2e:be:08:da:a2:71:ce:68:
6c:54:22:1f:98:2d:5f:d8:db:a9:83:56:0b:4b:f2:
96:8d:96:36:fd:fb:25:20:7d:9d:60:9c:20:57:38:
bf:17:54:52:a9:9c:e4:cd:dd:00:74:03:09:ea:c3:
11:c7:d2:b4:91:71:18:ba:b9:2f:b8:09:5d:99:d0:
2f:c6:4c:bc:78:b6:8f:cf:5e:bc:fb:4e:95:b4:d1:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:47:6B:D5:E3:13:28:B1:B6:45:0E:A8:63:52:F3:1C:27:26:FB:64
X509v3 Authority Key Identifier:
keyid:77:5B:33:6C:3E:48:97:A5:2B:39:C3:AD:AA:EC:CE:C6:BF:70:CE:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1szbD5Il6UrOcOtquzOxr9wzn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/00476a-8ac7-456c-b93d-3dc14170d62a/1/d1szbD5Il6UrOcOtquzOxr9wzn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:42:ac:f6:6f:55:17:9c:3d:fc:2b:14:bb:6c:4b:46:ad:71:
b1:6e:ab:a3:94:59:4d:a9:68:8a:20:0a:2e:e0:40:b9:f6:dd:
5c:bf:08:0f:a3:40:30:6b:59:3d:fc:2c:29:4c:f5:2e:85:01:
68:16:94:20:b4:45:f3:f4:f9:85:af:62:46:38:50:f3:19:11:
f5:7d:ad:73:18:df:c1:fb:f5:60:b8:53:7d:47:82:a9:9d:8f:
8c:39:5b:c6:66:a8:08:be:a1:8c:fa:9a:aa:c1:93:1c:15:5c:
de:43:1c:ab:b8:a4:19:a0:a7:50:e5:26:63:43:33:34:e1:03:
25:19:b5:f9:55:14:85:85:8f:5f:47:ae:b4:c5:f5:20:b8:9f:
e9:d2:65:56:a3:ef:7e:5d:1b:9b:64:d8:69:b8:be:90:de:da:
3c:17:63:37:4a:c9:5d:4d:dd:56:50:71:fd:36:51:06:56:8b:
a2:34:53:74:1b:57:b1:b0:24:ea:75:9b:60:7c:2f:3d:01:4a:
b9:a7:de:a3:b7:93:4a:ba:66:46:3b:e8:74:54:48:51:60:f9:
a0:2f:3e:45:2c:fd:0b:03:ee:42:14:d4:a3:d3:2f:4a:04:33:
c6:74:a7:92:24:9d:e6:3a:99:24:08:3b:f7:3e:b5:58:67:bf:
34:61:63:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:15:26 2025 by rpki-client