Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
File: 0seIZkHuEBvHspX9hvGSP8KD89A.mft (raw, json)
Hash identifier: PScMWy2rbKUF13yBbRsqoMCjlYYeet+EBNTX+qwFrrQ=
Subject key identifier: 3C:83:6E:B4:A7:71:BE:C7:F8:B9:13:28:31:A6:B4:83:33:A0:46:15
Authority key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
Certificate issuer: /CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Certificate serial: 019769CE94C0817F3AD15C2D0EB6A6B95317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
Manifest number: 08D0
Signing time: Fri 13 Jun 2025 15:00:35 +0000
Manifest this update: Fri 13 Jun 2025 15:00:35 +0000
Manifest next update: Sat 14 Jun 2025 15:00:35 +0000
Files and hashes: 1: 0seIZkHuEBvHspX9hvGSP8KD89A.crl (hash: 7xGaeoXbgtemT3IJ2GsilwZh8ZWfcyEr771u5MZOY/w=)
2: jQGsEYW9nQYMqDgRdjHs5yh307o.roa (hash: ZPgtlYS7YpDV/s/35ryF75mYWk1md56zE0UQWzxn7Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:94:c0:81:7f:3a:d1:5c:2d:0e:b6:a6:b9:53:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Validity
Not Before: Jun 13 15:00:35 2025 GMT
Not After : Jun 14 15:00:35 2025 GMT
Subject: CN=3c836eb4a771bec7f8b9132831a6b48333a04615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:bc:f9:0a:98:cc:12:23:3d:f2:fd:cc:9c:
6f:26:df:23:3c:c5:23:9f:b6:a0:b6:fb:59:ba:88:
47:be:da:19:62:8f:52:a1:4a:de:1b:f4:fe:95:0d:
5f:d6:40:ab:ee:0b:55:b5:3e:ad:e9:5e:ce:f7:39:
cf:cd:10:6a:c0:49:ad:5b:9e:db:66:4b:b3:70:46:
c6:f6:d9:77:2d:f3:45:71:1b:c8:d7:78:92:7b:f6:
36:be:ba:c2:7d:a5:79:d4:5e:b8:53:76:19:f6:99:
6a:48:3f:3f:2b:be:9e:f3:6a:c7:17:c8:f7:4f:b1:
7d:d7:ca:c4:d8:86:3e:87:08:64:82:ef:50:8e:c0:
97:f5:95:01:31:9b:f4:3e:72:11:10:7d:75:65:10:
7f:d9:fb:89:d1:05:7c:b6:b1:aa:51:58:63:3d:c6:
f9:de:f2:e5:9e:57:f9:e6:f0:18:11:ab:a9:8f:47:
57:fc:be:67:90:bf:17:4d:44:e7:36:0b:0a:b5:fe:
33:6f:f4:0e:9b:cc:32:36:0b:a9:bd:40:e0:68:24:
bb:25:3d:3e:0e:ee:09:99:01:3d:6c:2d:18:72:7b:
25:f0:3f:3c:46:1b:f5:71:dd:01:0f:9e:47:3c:4e:
f1:b2:f1:bf:02:3d:a1:ba:af:70:97:45:42:13:55:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:83:6E:B4:A7:71:BE:C7:F8:B9:13:28:31:A6:B4:83:33:A0:46:15
X509v3 Authority Key Identifier:
keyid:D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b6:1b:4e:53:a0:47:ae:91:42:61:74:60:d6:8f:6a:7e:e9:
dd:fe:e9:aa:27:91:ca:f3:ca:9a:21:ad:83:e8:3f:cb:92:3f:
d8:52:78:7a:7c:aa:e2:a0:ac:06:8a:fe:87:a5:04:07:6f:19:
47:e0:9a:e8:9c:78:a9:29:48:5c:41:3c:29:78:8e:63:e9:bc:
a0:29:54:17:21:e2:06:fc:c3:e1:a1:41:de:50:60:d8:3a:81:
4b:95:c4:29:8c:ef:10:98:75:ee:83:ac:20:40:88:f3:7d:24:
5a:de:c1:c6:54:a2:a9:d1:7f:a9:e5:b7:3d:0e:8f:bd:2d:c2:
2d:11:1b:18:58:67:6f:c4:52:73:49:a6:db:93:bf:84:f7:86:
64:9e:ec:a5:90:af:2e:3d:98:65:1f:62:1e:bf:47:18:f2:e1:
e6:0f:f7:50:5f:c1:5c:50:35:52:2b:76:1f:7f:0f:db:22:bc:
44:19:67:4e:7d:95:b4:ce:9c:ed:27:3e:18:99:7d:2e:40:4c:
1f:6e:d3:da:b0:88:1e:6a:4b:3e:ac:e6:54:d3:5a:91:66:15:
c8:89:ce:b1:dd:1a:bc:2e:08:ca:1a:4c:06:56:f1:2a:8d:21:
3f:d3:f3:dd:3c:b0:55:9f:e8:5e:24:65:ff:e8:58:a0:5b:33:
ca:ba:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:15:37 2025 by rpki-client