
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File: 0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier: zbI41CyhsXnYZK8UbhYyUyonXQi4KYEbS29RPlzJ1AI=
Subject key identifier: 7B:84:48:C5:9A:0F:74:67:79:C4:8D:97:EA:A8:88:E6:BA:2D:90:7D
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer: /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial: 01976F62AF6CA34A9EF98CF806FF0ECA3CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number: D7
Signing time: Sat 14 Jun 2025 17:00:27 +0000
Manifest this update: Sat 14 Jun 2025 17:00:27 +0000
Manifest next update: Sun 15 Jun 2025 17:00:27 +0000
Files and hashes: 1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: 6cRRAbLhP2T0lkS17ny6Pj7M2umQVG/MZdW4G/BEdas=)
2: xrKbG2lJLOHs6NPBeftXhDf224g.roa (hash: HTfj5/noaRj4CcOjKLI4Ev9C1aqAbFFMy1QpqUl2n+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:af:6c:a3:4a:9e:f9:8c:f8:06:ff:0e:ca:3c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Validity
Not Before: Jun 14 17:00:27 2025 GMT
Not After : Jun 15 17:00:27 2025 GMT
Subject: CN=7b8448c59a0f746779c48d97eaa888e6ba2d907d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ef:6a:ef:40:53:d9:77:00:db:73:a7:35:43:
77:71:f4:5f:d2:1e:35:dd:38:34:fa:98:e5:91:aa:
64:9d:31:9e:6e:32:12:9e:c4:9d:44:e9:72:90:5d:
ac:59:c0:11:5e:47:fb:2e:a5:d0:ce:ba:cc:f0:8d:
fb:53:ac:36:86:4a:f7:46:24:f0:6c:2a:9f:bd:4e:
7c:ce:1b:01:19:82:be:e0:77:a6:32:fc:d3:18:19:
98:eb:77:41:13:2e:45:ec:c2:68:7e:13:b6:6d:4c:
cc:ec:3e:bf:07:76:bf:df:99:8a:10:76:ff:d4:42:
00:6f:fc:ba:ac:27:0f:18:93:fe:d6:46:55:10:14:
3d:d8:da:3b:c0:4a:49:f1:f1:43:68:cc:e1:4f:9d:
0e:d9:e1:c8:5d:02:2d:37:d4:53:06:16:3e:be:fb:
43:d1:63:08:8b:a4:4e:e8:4e:6e:84:b8:44:2e:de:
1a:22:f3:a5:88:8f:be:70:f4:7a:8a:de:b5:fe:fb:
94:d4:46:c8:a1:d6:b6:1c:5f:75:91:cb:70:be:8d:
59:1f:c2:7b:83:99:38:df:3d:1e:03:21:3b:94:ff:
30:f5:29:14:e8:a8:70:d7:76:d0:34:c2:74:67:d1:
fe:b2:2b:1b:9e:f0:23:ed:27:20:94:c1:17:b4:04:
f8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:84:48:C5:9A:0F:74:67:79:C4:8D:97:EA:A8:88:E6:BA:2D:90:7D
X509v3 Authority Key Identifier:
keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:1f:5a:d3:e0:38:c6:1e:24:d5:62:e6:d7:d9:1f:ab:5b:a8:
32:27:02:bb:b8:4a:67:77:41:3b:d9:56:be:da:bb:75:5a:1b:
61:96:34:b6:03:3f:ef:b1:12:91:9d:a9:51:e0:ee:62:b0:76:
31:0f:19:ae:3a:7f:65:57:15:06:c5:e1:37:20:78:4b:49:53:
a4:6d:a8:38:e1:44:73:cc:bd:cd:e0:7b:6a:85:6a:ac:41:03:
6c:37:d3:37:28:35:76:6d:56:ae:14:04:3f:1f:0d:4f:01:a1:
64:5e:d7:35:94:a4:a4:a9:e9:83:bc:fb:c9:43:29:e2:90:99:
cc:c0:9e:56:ac:43:62:e0:a3:fa:8d:8b:4e:26:f1:69:31:a0:
56:96:e9:69:32:34:70:61:2b:e5:65:ff:a7:50:da:eb:21:2f:
c9:39:b8:6d:1f:22:4e:cf:76:66:f1:57:96:c6:7f:41:a2:8e:
bd:39:bc:0e:dd:bb:26:f1:11:0b:ee:9f:f6:90:26:1d:0e:87:
c4:fe:31:ce:6c:9b:08:fe:3e:3c:71:bc:f1:da:fd:87:d2:31:
1d:e2:8e:03:fd:22:1a:f5:74:b5:ab:d5:4b:72:66:95:0b:ef:
3a:f1:66:c6:d1:aa:d7:0e:29:f8:04:ef:7f:fb:31:82:b1:be:
90:e8:d7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:54:31 2025 by rpki-client