Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
File: t72OrhZp3rOj-kGGSR4FyzLOCSo.mft (raw, json)
Hash identifier: /DwahwC0VJjbeekNgrzZ/IyAr9Rsy46c2dvEzT0Lsj8=
Subject key identifier: 99:A6:B8:12:37:5F:37:5D:5F:61:0F:DF:D2:1C:FC:C3:FE:45:11:93
Authority key identifier: B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
Certificate issuer: /CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Certificate serial: 019774F7CBF0C03783D784D5F438D4BA9836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
Manifest number: 1051
Signing time: Sun 15 Jun 2025 19:01:25 +0000
Manifest this update: Sun 15 Jun 2025 19:01:25 +0000
Manifest next update: Mon 16 Jun 2025 19:01:25 +0000
Files and hashes: 1: 0CceuujOUN7fI6SJWiU4I3JvZeo.roa (hash: ReNIag9nA9bjr82rfcj5JjzPGdjpj3RK7GRwiAamY6Q=)
2: t72OrhZp3rOj-kGGSR4FyzLOCSo.crl (hash: c1JrkfShObf91Wiyy4ao2KXKn/BnPbdtmXYoj+hTD44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:cb:f0:c0:37:83:d7:84:d5:f4:38:d4:ba:98:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bd8eae1669deb3a3fa4186491e05cb32ce092a
Validity
Not Before: Jun 15 19:01:25 2025 GMT
Not After : Jun 16 19:01:25 2025 GMT
Subject: CN=99a6b812375f375d5f610fdfd21cfcc3fe451193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:6f:e9:3b:8a:4a:f9:56:b3:fb:63:c0:9f:
b3:26:59:45:23:88:f6:0a:87:32:e7:ee:45:c9:68:
d4:89:3e:f3:03:23:16:77:d9:2c:9b:91:d7:70:60:
b7:1b:b3:8a:ab:30:2a:ef:67:2f:80:45:ce:28:c6:
b5:b8:e3:99:d1:27:6e:56:f8:78:28:0e:69:33:9e:
55:cb:41:d2:fb:9d:f7:ef:b2:b7:1e:c2:f2:be:0b:
b4:69:b1:0f:15:65:91:92:8d:5a:92:e4:a8:c2:35:
cd:93:69:d6:ce:16:02:61:70:37:fb:ff:ec:35:dc:
33:b4:d8:0b:cb:fe:52:40:ad:29:47:95:60:f1:65:
f4:21:bf:6b:4e:65:f6:ed:f1:c8:e8:92:69:a8:ac:
0a:f8:4d:44:3e:52:58:78:ae:01:7e:24:f1:b2:39:
25:d6:93:f8:8d:d0:ad:d9:99:7f:5b:61:fb:ee:8b:
57:29:d2:f7:bc:3d:e8:e9:09:d9:f0:07:f2:10:3e:
88:f5:01:b8:9e:57:62:a1:11:7f:9f:c9:f5:2f:5c:
09:19:b8:ba:d4:4a:7e:f8:b8:00:48:3d:04:9b:d0:
86:f0:b3:ed:01:45:f5:c4:34:ea:b4:eb:fa:72:9a:
23:d7:bc:51:90:ab:9e:f3:28:08:07:1e:a3:ef:08:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A6:B8:12:37:5F:37:5D:5F:61:0F:DF:D2:1C:FC:C3:FE:45:11:93
X509v3 Authority Key Identifier:
keyid:B7:BD:8E:AE:16:69:DE:B3:A3:FA:41:86:49:1E:05:CB:32:CE:09:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t72OrhZp3rOj-kGGSR4FyzLOCSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b0bdbd-801c-4b0b-9fbe-ae15d507590e/1/t72OrhZp3rOj-kGGSR4FyzLOCSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0e:a4:e4:de:df:05:19:ac:82:15:ac:01:48:54:fc:38:c6:
ea:a2:1e:5b:f4:76:a7:2e:2d:5e:44:22:8f:15:e8:6d:e9:ad:
a0:d1:41:e6:54:93:dd:7e:d8:d2:0c:c1:ab:ec:0b:8f:b3:c2:
7a:7c:ca:5d:c6:2f:94:13:d7:05:ab:9c:4a:99:3c:0a:50:dd:
4e:5e:36:66:8a:85:4d:dd:f8:7c:0b:ec:c2:f9:48:38:df:61:
51:d4:ee:ef:e1:8c:f1:65:ec:82:5c:5e:76:2e:6f:59:aa:ff:
49:19:00:8a:9b:ad:57:c7:87:54:31:72:a8:58:4b:64:33:41:
1e:a2:7d:26:a2:f2:66:d4:f4:c3:a7:a5:86:ce:94:0a:12:ba:
56:23:d8:8b:68:e9:e4:b3:2b:54:ab:33:53:24:7a:2c:ef:f8:
45:b0:17:6c:c5:4b:7c:0f:15:9d:87:bf:cf:10:11:45:13:bc:
70:a6:b0:64:07:38:6c:c1:22:66:d0:e9:5d:42:2e:3d:96:5d:
3d:72:65:5e:a5:6c:a9:cc:bc:df:06:35:d6:1d:26:18:63:45:
36:7b:df:bb:9e:b3:22:1f:38:1d:f4:db:c5:1b:f9:56:24:22:
e4:ef:dd:3d:c8:3d:4b:55:a9:bf:bd:96:e3:fb:f0:56:7d:4c:
ee:e4:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:47:07 2025 by rpki-client