Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier: lakzG8bwTBem5egz4H1PMK8Q9IA3/PiypKyVyfexvb0=
Subject key identifier: 1D:3F:6A:68:13:01:4C:A0:40:0A:A5:67:49:64:02:02:57:60:DB:10
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial: 019771F66F028C7B09EA2A1D3E2B64101195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number: 01B4
Signing time: Sun 15 Jun 2025 05:01:05 +0000
Manifest this update: Sun 15 Jun 2025 05:01:05 +0000
Manifest next update: Mon 16 Jun 2025 05:01:05 +0000
Files and hashes: 1: 2-l-7yT7_u7_OYzRYJFyaa75TPk.roa (hash: bYwJQxGV83lRBUqEUc8QOqElQ+XjkvUc1MyoxR+0EMk=)
2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: OPVYgONTstHpvizW01pnGNZ7jiLtwrfZ8XH6ipdzZmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:6f:02:8c:7b:09:ea:2a:1d:3e:2b:64:10:11:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Validity
Not Before: Jun 15 05:01:05 2025 GMT
Not After : Jun 16 05:01:05 2025 GMT
Subject: CN=1d3f6a6813014ca0400aa567496402025760db10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9a:d4:27:90:d3:85:9a:3e:07:5c:9c:61:13:
5e:e1:db:37:b6:ed:52:5a:a2:23:37:80:1b:fb:47:
c6:a6:73:27:d3:8d:7d:3d:47:62:70:5e:e0:db:ff:
41:ae:06:24:b4:19:51:e0:8a:c3:c4:f4:30:bf:4d:
af:6e:d3:d5:9d:f1:0c:c4:a3:eb:87:0a:b5:9d:81:
97:3c:b3:69:0e:3e:a3:32:e9:d4:8c:00:da:59:03:
8a:d0:be:78:8b:a5:b6:5d:a7:43:a6:86:75:69:ce:
f1:04:4f:a6:d1:79:30:5f:81:44:82:0b:5a:15:9f:
1e:26:a4:95:d1:4d:98:74:c8:50:39:20:e4:bc:6c:
c1:09:a5:a5:b8:1b:2f:3f:5e:8c:63:ac:c2:57:d1:
9d:ef:95:65:24:15:cd:48:d0:4f:0d:71:ae:26:b3:
2c:60:70:83:a3:31:6a:bc:32:52:70:38:70:c0:b4:
51:72:a9:d2:c7:44:dc:8c:62:98:eb:29:a7:b8:1c:
ba:af:48:02:0b:3d:ce:b2:e0:83:7c:91:f9:a3:f7:
39:bf:4b:b6:eb:3d:c9:69:68:d7:d6:5f:d2:31:11:
1f:74:c2:37:4e:ba:10:ed:ba:64:25:03:07:ea:7a:
54:a9:d2:4f:40:54:46:a9:54:f4:11:11:23:aa:9e:
cf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3F:6A:68:13:01:4C:A0:40:0A:A5:67:49:64:02:02:57:60:DB:10
X509v3 Authority Key Identifier:
keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:39:c8:6f:db:79:ea:2e:f1:6e:2f:cd:2b:b3:ef:e0:8e:1d:
7e:ac:5c:03:69:b0:12:f9:a5:99:79:e0:89:95:8e:38:a5:8f:
8c:27:02:a5:c7:d7:e6:db:69:8c:ec:f1:17:31:70:fc:b4:0e:
b7:ab:29:6e:4f:be:e6:9a:21:b5:5f:81:b1:ef:8b:fc:75:61:
d4:71:9c:5c:b0:d9:f6:5c:46:bc:9f:0a:9b:95:7f:30:a1:84:
f1:93:93:d2:84:b2:39:2e:c2:7f:e6:8b:ca:09:50:f2:db:28:
e5:e4:61:83:88:ea:a2:8b:59:a0:66:6c:fd:91:c0:4d:26:7a:
3f:5a:4e:77:d7:8a:2e:21:86:07:24:fd:81:92:97:18:e4:cd:
1b:3b:86:d9:5b:c7:40:a7:c5:e6:16:e6:6a:27:06:e2:30:11:
5c:00:16:6e:da:ae:58:6b:9f:49:13:c7:6a:70:9d:c2:c0:9b:
4e:95:a8:c4:f3:b5:5d:e6:5b:74:54:ea:9a:c7:57:cc:ab:11:
fa:e0:72:81:2f:c5:9a:c5:d7:33:97:64:db:d1:c8:06:f2:d7:
cf:89:e7:13:16:7e:5c:8e:f0:ad:9c:f3:b7:bb:ec:de:26:84:
98:81:9b:09:ae:69:0a:bc:42:10:f8:45:5c:1e:fc:39:76:8d:
18:81:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:48:01 2025 by rpki-client