Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json)
Hash identifier: QpLsT5s56mf+0t0m/0eSz6FQOazRB64Xcnpcww2moXY=
Subject key identifier: EB:56:C7:A5:EE:45:46:99:0D:1D:28:9B:22:61:DA:84:33:3D:66:B0
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 01976D74AC32F452FDA26C1F0AB64BDDC3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
Manifest number: 0DA0
Signing time: Sat 14 Jun 2025 08:00:52 +0000
Manifest this update: Sat 14 Jun 2025 08:00:52 +0000
Manifest next update: Sun 15 Jun 2025 08:00:52 +0000
Files and hashes: 1: 1-cpyjHU8WHBS-JnYyweRG_JlxsQ.roa (hash: Bc2YUgBN1eHG7yUrAAjgkxLZbgg1NrbTbKbM93kzdXo=)
2: 2nquZxIjKuCQeOgojOXW1X_s_QM.roa (hash: jFRO0lP11v/Hnir4mOKoo6txSwXFruzZ7RBet4hmmmk=)
3: QQQnQcpvGBf2C-BzCpjUlxD_kV0.roa (hash: 3oCmUMut8zjGqT5v8Ibyl5GG5ZNBsCX2Q1FPnCYPFwc=)
4: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: mvimTOBJkAoTCwxIQxIgBzdNysp/WsitVq2XQUkfn7c=)
5: gIx-NvwmPwDjbwzrImEaevKFMi8.roa (hash: qVqkRd3AaQOFICZgsJ5zunJ8w7waJ2c1Sms4AJtjCl4=)
6: qWecP1fjBHk_xiZL6w3FMxqmMFs.roa (hash: H6nLoMO+CEX9wLJPNIjsGgGm6hrsOhinY+8mLTIndRM=)
7: rQGjF7CS3G8ySkkrwz5hQvGaUtk.roa (hash: UmfdL/yMHB7LypaEgd2ulm2mGfbyrt6kIxKgT/oReek=)
8: wvlIJaBXdAerQ4c5dRBxRunJgjQ.roa (hash: JyQWbotgOXPXDAJ2gTdNj+PiW7DZmyYe59ktU38Qs6o=)
9: zwQeVe6KjT7mK7CzDjhb-oUfUeY.roa (hash: RDrcDVJwzADiTPiX9sXWISoKDjj7Zx0CdydUNeF8j6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:ac:32:f4:52:fd:a2:6c:1f:0a:b6:4b:dd:c3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Jun 14 08:00:52 2025 GMT
Not After : Jun 15 08:00:52 2025 GMT
Subject: CN=eb56c7a5ee4546990d1d289b2261da84333d66b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:74:03:fa:aa:97:b8:01:06:8a:05:a4:f2:59:
00:76:97:e5:84:a8:c2:ff:1c:a0:4d:f8:7d:37:c9:
09:7e:e0:65:c8:27:48:c3:69:f4:79:f7:11:7c:cc:
97:e3:8e:4d:ff:7e:7e:79:2d:49:c1:7d:f8:82:ac:
20:66:3c:50:20:41:28:9e:d0:c1:1d:6a:2f:72:5e:
ad:16:d0:d1:7c:e2:36:1c:1e:56:b7:17:26:22:c7:
87:aa:1e:3c:e2:0a:84:5a:a2:31:42:c9:2b:d1:b2:
39:3a:ca:77:6a:45:fc:e4:d7:bd:d3:91:a9:43:ba:
0a:b8:40:32:12:aa:0e:e1:72:46:f0:68:55:1c:10:
ec:55:d3:4d:5d:61:1c:eb:e9:c1:bd:2e:2c:a0:bc:
3b:c2:c9:e9:c7:8a:45:bb:71:a6:81:5d:96:45:88:
3a:7c:88:9e:4b:16:a7:55:eb:11:b1:2e:63:d7:81:
84:54:f4:98:2e:5b:bb:1a:62:5a:e2:c7:ba:e2:89:
93:c1:57:c0:5c:c5:12:ca:b3:5b:03:b2:d3:15:38:
57:6d:50:b7:1c:17:1c:c1:21:8e:13:90:87:88:60:
c1:f1:07:79:62:37:47:e1:97:6f:37:bc:e2:a6:f8:
73:ac:14:5e:cd:70:2e:4c:dc:7b:e6:34:6f:2c:8b:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:56:C7:A5:EE:45:46:99:0D:1D:28:9B:22:61:DA:84:33:3D:66:B0
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e5:e6:9a:ae:d8:29:05:71:37:d1:1b:7e:10:de:e2:ca:48:
a2:31:9e:d6:73:c7:fe:6e:bc:05:bb:55:d8:c4:3e:ab:a6:70:
de:19:98:32:64:bd:c1:2c:5b:67:7f:9a:c9:22:18:f3:ec:56:
6a:e0:cc:2e:f4:2c:d2:71:53:f9:2a:20:71:ac:c4:57:3b:f9:
24:78:d6:66:df:6a:56:85:55:2e:af:f3:12:4b:3e:87:90:42:
b4:09:08:3e:a4:dd:2f:f7:c0:96:c7:ac:c0:2c:b5:79:96:ed:
77:45:d3:98:d4:9d:77:15:43:82:16:12:dd:8a:dd:41:5e:46:
9b:fe:c5:94:a8:e1:bc:c6:09:8d:f6:96:c3:69:e0:b7:f2:4d:
a7:6d:e1:cc:d1:30:82:20:f1:34:59:42:e3:1c:81:ad:a0:9a:
9b:33:93:41:7e:26:88:c3:a4:a5:79:2b:d7:c8:37:02:27:66:
e7:cc:84:55:9f:07:1d:b5:a4:52:ce:26:50:19:39:5a:cf:ff:
51:13:ff:7d:4e:7c:23:70:2d:ca:60:5b:22:26:46:9c:48:4c:
c9:72:63:d9:78:e7:4d:09:f9:9e:8a:33:d0:ca:9a:23:77:e9:
ea:d4:29:2c:4d:34:32:65:7e:1a:da:d2:b6:0d:a7:72:b9:dd:
45:bf:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:46:12 2025 by rpki-client