Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
File: 69siVHHy1uQQYLNBhXJUhUgQFLg.mft (raw, json)
Hash identifier: UhdcTkyjNLi3IO156YAi+7owvDCusoFfgCPhL0lr3fg=
Subject key identifier: C3:02:D4:02:D6:CC:CF:12:6A:5E:FE:D0:AB:DF:41:72:B2:F2:A3:32
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial: 01976BBD7FD450DD3960E2901EB22EA3F4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
Manifest number: 14EF
Signing time: Sat 14 Jun 2025 00:01:10 +0000
Manifest this update: Sat 14 Jun 2025 00:01:10 +0000
Manifest next update: Sun 15 Jun 2025 00:01:10 +0000
Files and hashes: 1: 69siVHHy1uQQYLNBhXJUhUgQFLg.crl (hash: 8UdRj3gpxqBOFiuxqmVZURJ98JdbFLksEMY0d2o8m04=)
2: fa7NROYx8iSrXkapsnKC5maWgAE.roa (hash: uTBWDWi+lUO6SXQc1mkpkLFQ4pPjE/7aqsWLMLokR9M=)
3: ypiHaIkjWTMZcDzv0-OFLs0Vl8g.roa (hash: VEkHUv83f9ifQbOyDH/QRdAXTrrARw1jb4RzCM/pIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:7f:d4:50:dd:39:60:e2:90:1e:b2:2e:a3:f4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
Validity
Not Before: Jun 14 00:01:10 2025 GMT
Not After : Jun 15 00:01:10 2025 GMT
Subject: CN=c302d402d6cccf126a5efed0abdf4172b2f2a332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:40:c0:fe:6d:5e:a8:4b:07:21:cb:7a:42:
72:55:39:fe:df:23:e8:5f:67:78:e1:46:87:a5:10:
25:c6:6a:df:5d:b1:8b:4d:d3:8c:f4:dc:a3:38:5d:
6b:41:64:16:78:9c:59:04:84:3b:3f:6e:91:1e:24:
60:bf:9c:b4:cb:14:63:4c:51:ff:4b:65:30:61:59:
59:0d:5e:30:bb:0a:bb:6d:0f:03:31:bb:f5:67:56:
5c:7f:64:61:7d:f7:92:25:ed:e8:c4:da:4c:7a:79:
97:65:c0:c1:39:5b:8e:ee:86:b5:33:b2:32:7b:fa:
d1:79:9d:15:28:71:c2:65:f0:f9:12:d2:66:14:62:
33:e4:8f:a4:6f:ef:8f:c6:0c:28:61:2b:45:22:4b:
d2:e9:2e:25:23:d8:52:a8:27:52:81:12:a9:8e:b7:
86:53:6a:71:6c:97:bc:25:7a:61:df:cb:6c:3c:3e:
2e:3e:f5:18:70:b6:54:3d:36:8f:c0:89:ce:9f:b0:
48:02:de:12:df:99:99:01:43:2f:33:dd:aa:ed:9e:
71:b6:59:35:0e:68:2d:9b:9a:21:7e:7b:fc:55:51:
ab:c3:ba:63:5b:f7:c4:65:9a:7d:6e:49:d3:ca:7e:
ae:13:d2:21:91:fb:62:de:cf:75:28:c7:b5:56:94:
79:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:02:D4:02:D6:CC:CF:12:6A:5E:FE:D0:AB:DF:41:72:B2:F2:A3:32
X509v3 Authority Key Identifier:
keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:dd:04:9b:86:12:31:cb:6c:56:7f:53:77:e2:e1:3f:43:ce:
0a:58:fc:e1:38:f6:54:86:11:8a:b9:22:de:ad:5d:a0:19:2c:
95:20:9e:1e:55:31:f4:61:8f:64:c0:ff:47:3c:4f:5b:3f:19:
70:24:c0:83:01:c1:80:d3:4a:ca:1c:0e:6f:82:fd:64:22:31:
70:02:10:cc:15:fd:0f:c3:e3:52:b1:31:47:50:e9:ec:60:31:
b4:5f:d4:6f:b1:97:78:47:a2:a8:89:7e:b0:8d:dc:6d:fe:45:
15:d2:a5:3e:d7:3d:b6:58:f0:a7:00:6e:ed:95:8d:04:52:b1:
e0:01:5a:d4:22:a3:a6:d8:83:9a:bd:67:bb:76:21:59:03:2f:
9f:f5:81:1a:3d:d0:a7:a2:b0:d4:2e:64:56:7f:40:f0:5c:e1:
bb:47:d2:74:fd:bf:13:21:7a:a9:6d:47:be:b0:04:80:0a:db:
f0:5e:0f:a5:ec:df:a0:05:24:e3:86:f2:ef:8b:de:4a:d4:23:
c4:86:37:68:48:4a:c8:84:ec:03:26:10:94:fe:c9:70:40:31:
2f:45:29:8e:89:ee:35:36:f3:36:1b:12:a5:56:e5:05:91:af:
fd:d7:7e:be:10:3f:9d:0a:6a:6f:a7:d7:8f:a7:87:8a:2d:b4:
ef:47:40:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:38 2025 by rpki-client