Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
File: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft (raw, json)
Hash identifier: w0ZyTB+zHE9h/usO8LWyt5WGmJAyPPYpP1mwQ3WEDT4=
Subject key identifier: A2:CA:F0:1C:9A:F4:42:29:EE:09:26:13:B5:B3:44:A9:D0:5A:9B:DB
Authority key identifier: D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
Certificate issuer: /CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Certificate serial: 019773E48B13333342E183E60A68284C7641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
Manifest number: 1250
Signing time: Sun 15 Jun 2025 14:00:46 +0000
Manifest this update: Sun 15 Jun 2025 14:00:46 +0000
Manifest next update: Mon 16 Jun 2025 14:00:46 +0000
Files and hashes: 1: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl (hash: +fK04mMhpWyTaEBcg1n97FkaDqPEJpNsfchsqrUk2so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:8b:13:33:33:42:e1:83:e6:0a:68:28:4c:76:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df
Validity
Not Before: Jun 15 14:00:46 2025 GMT
Not After : Jun 16 14:00:46 2025 GMT
Subject: CN=a2caf01c9af44229ee092613b5b344a9d05a9bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:1e:2e:64:df:90:df:33:66:d5:fd:04:78:
cb:41:20:ef:ac:4e:0b:ef:f6:6b:1e:cf:f2:c7:82:
c2:65:f5:95:27:84:88:84:b0:4e:50:51:2e:e2:c0:
13:4d:06:11:59:0f:8e:9b:a1:a0:c6:41:97:ad:57:
49:83:e1:b2:1e:61:4d:39:47:2e:44:fa:62:e5:d5:
08:ad:03:0f:1b:1a:90:68:fa:08:ed:1a:64:30:f2:
59:8b:d8:d2:d3:88:59:32:ff:48:ac:f4:5a:ce:b9:
d5:70:c5:a0:e5:c5:1e:3b:f1:ee:a6:24:3b:30:e6:
77:f4:d3:5a:a4:1a:d3:61:8a:26:5c:33:38:98:60:
fc:4d:97:7e:7c:4a:12:11:5c:c5:57:59:85:c3:b9:
af:74:79:59:0b:28:96:7f:25:2a:c7:58:14:61:c4:
d6:17:26:53:cb:d7:7e:b2:86:c0:0b:2f:ca:d5:18:
d3:0a:49:b0:64:7f:ee:41:60:14:52:ee:66:10:a5:
1b:f3:49:ae:39:b5:62:a1:bf:ee:01:d9:34:a2:14:
e4:4b:a6:f4:be:c4:2c:48:17:c3:e7:c9:8e:17:32:
73:8b:f4:4f:11:26:e9:28:9b:2f:ef:cd:e2:4c:19:
54:7a:14:6d:4a:cf:41:87:c5:6b:57:94:4c:81:60:
3d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CA:F0:1C:9A:F4:42:29:EE:09:26:13:B5:B3:44:A9:D0:5A:9B:DB
X509v3 Authority Key Identifier:
keyid:D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9f:a9:2e:77:c7:1d:b1:a1:c3:1b:b3:2a:2a:6e:23:f9:97:
0c:a6:14:f5:99:0d:d4:20:0e:5f:80:f6:ee:a2:7d:4c:c1:1f:
5c:91:4b:f4:ad:08:75:72:8d:e1:71:b4:13:81:e1:7d:35:02:
64:ad:7b:b5:11:15:ec:99:65:96:de:52:20:a9:47:13:67:5c:
58:4e:80:be:89:a9:c7:54:e8:96:ef:40:22:a6:e0:86:27:fd:
29:5a:a8:79:8d:c6:47:62:d8:ac:eb:95:c4:e0:61:d7:7e:ac:
38:54:cb:e4:de:04:38:83:c5:61:4a:2b:71:6f:c1:73:f1:4b:
39:8c:2a:91:4f:37:45:e7:ba:24:ca:ea:9e:0f:2b:33:f2:9c:
88:f5:86:a9:c8:ac:67:a7:5d:7c:04:9c:b4:2f:24:09:30:07:
7c:61:af:d1:52:7e:bf:95:83:ec:38:40:fb:e2:f9:41:bb:6e:
79:71:fc:2a:a5:48:da:ac:88:bf:1b:36:f0:1f:83:81:0b:93:
3c:e6:51:78:d8:10:a3:b4:0a:c4:f2:7e:d0:75:f9:fb:fb:f8:
bb:67:a1:dd:e8:f5:fb:da:70:4e:3c:2f:95:74:42:bc:87:a9:
31:37:bb:81:b9:df:6e:2a:94:84:e4:71:11:32:9b:36:f4:32:
78:02:84:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:59 2025 by rpki-client