Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File: 0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier: 0l0GAp9dbhpMi5r0U9uu8uxStyn9DaQEStMsrCOWMYQ=
Subject key identifier: 01:E9:E9:13:6B:F1:85:91:67:65:BF:FB:52:92:58:29:8D:1B:26:74
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer: /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial: 0197692A130A761FAFE6007DA4850F5B444C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number: 0423
Signing time: Fri 13 Jun 2025 12:00:54 +0000
Manifest this update: Fri 13 Jun 2025 12:00:54 +0000
Manifest next update: Sat 14 Jun 2025 12:00:54 +0000
Files and hashes: 1: 00FQiMdjUQle4zFwKcr67i8rD5o.roa (hash: vAwK94aBbQ1WLXSLlow/JuiTreizX+JgqV5lHzwa2Js=)
2: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: Gj8vgd9Z9kYzmLPT9jeR4itCpp0MgnC9x1rknRFI5P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:13:0a:76:1f:af:e6:00:7d:a4:85:0f:5b:44:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Validity
Not Before: Jun 13 12:00:54 2025 GMT
Not After : Jun 14 12:00:54 2025 GMT
Subject: CN=01e9e9136bf185916765bffb529258298d1b2674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:75:3b:09:8d:ab:fd:d8:2a:ac:19:02:a4:ac:
88:9f:39:19:cf:b3:d8:b0:90:2f:77:dc:b1:a1:a5:
71:37:fd:dd:88:77:1c:85:bc:f2:59:d6:4c:74:6d:
f6:e1:89:cf:68:d9:7f:c7:75:de:41:62:b7:3d:b5:
68:38:f5:6d:51:11:2d:a9:95:b8:86:a9:f2:00:f9:
3f:2b:f0:33:90:95:4e:83:1b:db:61:ad:dd:c7:f7:
ed:fa:f3:09:19:f4:bc:ea:b1:b9:0a:d9:0e:40:c8:
14:ec:78:1b:47:47:be:d7:2f:09:87:c7:88:9b:17:
85:80:97:65:01:46:87:f4:0d:bb:bb:2d:26:b6:7f:
37:36:17:74:dd:d3:2f:71:4a:02:0c:8c:73:ce:7e:
1a:d7:fd:d1:cf:8b:2a:ba:7b:c4:0f:a3:f8:7e:18:
83:f9:ae:55:30:01:32:99:00:4d:0c:02:e7:7f:52:
f8:69:38:d8:4d:2b:2b:a7:46:f3:e7:04:e4:b4:f0:
64:dc:3b:21:36:29:d9:17:c4:63:8b:88:87:e2:11:
25:c2:49:21:ef:42:77:27:7d:9a:91:22:c1:42:e3:
6f:01:03:a7:8c:96:0c:16:dc:14:08:56:82:4f:bd:
5a:4f:0c:d1:27:54:c4:11:d4:5c:6a:28:d6:fc:c1:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E9:E9:13:6B:F1:85:91:67:65:BF:FB:52:92:58:29:8D:1B:26:74
X509v3 Authority Key Identifier:
keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:6e:75:70:be:4f:d0:2e:3d:3c:54:4a:f4:69:39:98:27:22:
fb:8b:e9:50:3f:4f:b5:3b:7a:f8:00:65:62:e0:a8:4e:4a:b6:
76:ce:5c:b2:d8:98:04:79:a6:e4:21:57:d4:ce:32:28:21:a7:
6a:70:04:69:01:6d:8b:1a:5e:7f:48:0c:1c:17:f8:17:c2:a6:
4e:15:ad:db:ba:e7:9e:c8:83:76:03:31:87:11:19:03:e3:aa:
f5:55:20:8b:2a:f8:23:ba:19:09:79:01:02:ef:9d:65:6d:60:
f9:29:f1:49:10:0e:31:c1:11:20:12:30:b3:63:16:f5:e8:d9:
aa:fc:87:57:ab:b9:0b:23:77:0d:e6:8a:62:35:14:29:d2:e9:
6e:25:48:52:6b:13:47:06:64:99:81:83:5b:f1:fe:bc:27:8e:
f3:c5:72:dd:29:47:98:14:26:bb:70:43:6c:cc:bf:84:58:18:
9d:b6:9c:30:60:9d:ae:fe:71:4f:3a:96:5b:98:2f:55:ef:e4:
4c:20:62:e0:e3:3d:92:b6:bb:3e:30:47:fb:c3:4b:db:74:32:
b9:11:8c:a6:ba:31:74:76:f6:44:7e:be:ee:a3:f0:67:a0:e1:
d5:2a:22:a7:c7:96:fd:9b:5b:ce:68:e1:16:6d:bb:0e:30:9f:
a0:fa:d6:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKhMKdh+v5gB9pIUPW0RMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzcwZjFmMzNjNTgxZGI3OGExNDliYzg2ZDczOWNkYzdj
ZTI2YTcwHhcNMjUwNjEzMTIwMDU0WhcNMjUwNjE0MTIwMDU0WjAzMTEwLwYDVQQD
EygwMWU5ZTkxMzZiZjE4NTkxNjc2NWJmZmI1MjkyNTgyOThkMWIyNjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nU7CY2r/dgqrBkCpKyInzkZz7PY
sJAvd9yxoaVxN/3diHcchbzyWdZMdG324YnPaNl/x3XeQWK3PbVoOPVtUREtqZW4
hqnyAPk/K/AzkJVOgxvbYa3dx/ft+vMJGfS86rG5CtkOQMgU7HgbR0e+1y8Jh8eI
mxeFgJdlAUaH9A27uy0mtn83Nhd03dMvcUoCDIxzzn4a1/3Rz4squnvED6P4fhiD
+a5VMAEymQBNDALnf1L4aTjYTSsrp0bz5wTktPBk3DshNinZF8Rji4iH4hElwkkh
70J3J32akSLBQuNvAQOnjJYMFtwUCFaCT71aTwzRJ1TEEdRcaijW/MHX2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHp6RNr8YWRZ2W/+1KSWCmNGyZ0MB8GA1UdIwQY
MBaAFNHHDx8zxYHbeKFJvIbXOc3HzianMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kM2QyNTctNmU0Yy00ZDYwLTljOTMt
ZGZjYWUzNmEzZWY4LzEvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9kM2QyNTctNmU0Yy00ZDYwLTljOTMtZGZjYWUzNmEzZWY4
LzEvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP251cL5P
0C49PFRK9Gk5mCci+4vpUD9PtTt6+ABlYuCoTkq2ds5cstiYBHmm5CFX1M4yKCGn
anAEaQFtixpef0gMHBf4F8KmThWt27rnnsiDdgMxhxEZA+Oq9VUgiyr4I7oZCXkB
Au+dZW1g+SnxSRAOMcERIBIws2MW9ejZqvyHV6u5CyN3DeaKYjUUKdLpbiVIUmsT
RwZkmYGDW/H+vCeO88Vy3SlHmBQmu3BDbMy/hFgYnbacMGCdrv5xTzqWW5gvVe/k
TCBi4OM9kra7PjBH+8NL23QyuRGMproxdHb2RH6+7qPwZ6Dh1Soip8eW/Ztbzmjh
Fm27DjCfoPrWRw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:58 2025 by rpki-client