Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
File: C0A-ce-MPZc8521CBC99-hiRaIs.mft (raw, json)
Hash identifier: Rn+DXLbostyWvXHvanVQKlsM0I2sO+xjAJNMoekzMRk=
Subject key identifier: 73:F9:AD:17:DF:09:2A:18:8A:23:5A:C7:33:A0:46:08:5F:64:5B:63
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 01976C2AAF96A8D8CA06B43D525961399F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
Manifest number: 0F58
Signing time: Sat 14 Jun 2025 02:00:26 +0000
Manifest this update: Sat 14 Jun 2025 02:00:26 +0000
Manifest next update: Sun 15 Jun 2025 02:00:26 +0000
Files and hashes: 1: C0A-ce-MPZc8521CBC99-hiRaIs.crl (hash: IkvBYtM8zhPnXjBdyxOwwf/9nR/4gZHtddeFlgnEtTI=)
2: wvWJOusH9NjJmboQYN_96qUtjQA.roa (hash: lhwOpS83eW02+y1JcgzOi5Azi+mkqj4nFLbrmvvJkxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:af:96:a8:d8:ca:06:b4:3d:52:59:61:39:9f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: Jun 14 02:00:26 2025 GMT
Not After : Jun 15 02:00:26 2025 GMT
Subject: CN=73f9ad17df092a188a235ac733a046085f645b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:9c:9c:07:02:65:69:e3:ac:be:3a:bc:c8:
ba:3e:f7:58:7c:df:49:e6:62:71:a0:68:a2:fe:a6:
18:4e:a6:5b:34:67:2c:37:93:4d:08:31:a7:79:cc:
f1:0a:4b:40:c8:66:f0:d4:15:26:49:1d:ec:68:a7:
50:c9:26:f3:cc:07:ae:27:51:da:ed:06:7a:29:0b:
91:07:b0:52:1e:e2:8d:18:c5:19:a4:e3:19:4d:07:
ec:e3:ed:40:10:1b:85:12:3b:fd:71:f0:fb:c6:9a:
72:db:d8:55:db:89:6b:67:9c:6b:64:99:1b:c3:55:
1e:c5:97:01:80:7a:35:20:2c:f1:61:85:7d:a5:d8:
48:d3:6e:47:68:62:9d:80:b4:89:6a:ff:99:5f:c8:
19:5a:ec:54:2d:4d:4a:8f:8b:a9:fc:99:4b:2b:d5:
69:bd:c5:38:63:57:d4:f1:9f:dc:d4:60:3c:75:45:
72:1e:dc:8a:b4:52:60:0b:1a:e5:ac:54:df:6d:f5:
42:5d:82:f2:52:f7:17:2c:cb:79:35:b1:cf:42:6f:
fa:3c:f4:67:ee:ac:42:68:f2:f4:65:ea:4b:91:df:
cf:f7:3f:6f:bc:00:08:68:27:2e:dc:aa:89:69:c3:
f6:67:61:4c:fe:81:bf:1c:f3:78:bd:b9:db:e6:0e:
bd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F9:AD:17:DF:09:2A:18:8A:23:5A:C7:33:A0:46:08:5F:64:5B:63
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c5:8f:f6:9b:c6:44:97:a4:cd:bb:00:c2:a6:e8:65:0d:70:
1e:05:11:35:0a:f2:b4:e8:fe:81:11:71:37:99:b9:17:1f:e6:
b7:51:5e:42:eb:26:89:38:40:80:b4:61:56:f6:da:6d:e1:37:
8c:a4:3e:4f:e2:b1:82:95:d5:8f:35:03:35:cd:81:40:ab:22:
61:8b:b3:c5:d3:08:08:3d:dd:ab:62:d6:ed:18:7c:36:73:46:
42:7e:0d:65:c7:34:af:e9:06:46:9c:b2:50:f5:b3:07:30:42:
f7:c2:a0:ee:3c:b7:b1:4e:b1:08:e8:75:2a:fd:2e:fb:43:96:
1c:fb:17:62:00:34:7a:45:8a:05:02:27:7d:a2:62:07:ec:5b:
10:97:fc:77:2a:15:c5:11:6c:12:5f:45:06:2b:92:3d:1e:d1:
12:85:2c:4d:9e:0e:2e:51:0c:6b:bb:9b:92:6c:6d:b7:a2:09:
59:ad:8b:1b:85:dc:e0:a6:fd:d6:40:50:16:54:d7:b4:79:94:
59:d7:b7:76:c4:17:3e:41:96:b4:e3:13:8f:ef:1a:a4:68:00:
72:3c:60:42:2b:78:86:b3:71:83:85:ee:05:b7:97:85:a4:63:
12:b1:ab:34:48:0c:f3:22:25:04:f3:6f:2b:a0:27:2b:b3:b6:
85:4c:a7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:58:38 2025 by rpki-client