Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
File: 0aiWnX4yy_knZkstxDa5bnFJpis.mft (raw, json)
Hash identifier: VERk+xZ9pdlUh1bAQKUlEoW8bMcObiFxxKTeAF7EME4=
Subject key identifier: 19:81:8F:DC:B2:07:C5:2C:E5:F2:23:AA:C4:4A:7E:00:E6:47:1A:BA
Authority key identifier: D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
Certificate issuer: /CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Certificate serial: 01977F7ADEF5B18D7212718F07866CB750D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
Manifest number: 0ECF
Signing time: Tue 17 Jun 2025 20:00:48 +0000
Manifest this update: Tue 17 Jun 2025 20:00:48 +0000
Manifest next update: Wed 18 Jun 2025 20:00:48 +0000
Files and hashes: 1: 0aiWnX4yy_knZkstxDa5bnFJpis.crl (hash: 5eaiinHHg7UxRsNcytOyDmEqMIyaWS+E3Y6qfSeD3Uc=)
2: p1fyn5poKGi3v6udklaZLK6DaPs.roa (hash: ksuBLRSUua1zFmd4JmcnhcAsP8MWyD8OR/dcK6d/pkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:7a:de:f5:b1:8d:72:12:71:8f:07:86:6c:b7:50:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1a8969d7e32cbf927664b2dc436b96e7149a62b
Validity
Not Before: Jun 17 20:00:48 2025 GMT
Not After : Jun 18 20:00:48 2025 GMT
Subject: CN=19818fdcb207c52ce5f223aac44a7e00e6471aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:1d:12:a3:3d:fe:60:2a:c6:f3:ac:de:8f:
06:c0:03:0f:b8:29:e5:b9:71:28:8c:ba:ab:bc:e2:
c9:9f:71:a2:1d:45:a3:fd:72:21:88:60:fc:7b:a5:
4f:dc:1b:90:b9:7e:d2:6c:55:e2:92:17:81:3a:38:
94:35:cd:93:a0:1c:23:69:77:57:57:1a:12:af:2c:
23:e5:c8:23:b7:ed:79:b0:41:03:4d:f2:69:49:94:
df:db:7f:2f:5f:d6:01:d2:95:48:9f:3f:d4:e6:1e:
4c:f5:10:74:a1:32:16:5e:95:db:96:e9:01:7a:32:
72:d9:2a:32:b5:fe:44:ce:e5:3b:2f:77:3a:ba:0b:
e6:ba:31:9a:39:f3:a4:9c:d7:70:16:00:d3:94:3a:
5e:f9:2b:bd:62:ac:b8:a3:ee:18:c1:9b:53:1c:05:
e1:5a:1d:0c:ec:f6:1d:57:4f:d7:c1:fe:49:7c:21:
6b:e7:06:e5:d4:be:58:7c:43:9b:57:e6:e8:b5:8e:
2f:5c:10:53:c0:bf:a7:ae:5f:c5:09:11:84:7e:b8:
95:bf:52:14:67:7e:16:54:8c:e3:59:a2:63:61:51:
85:2a:4f:69:8e:41:7b:83:70:c2:92:66:4d:19:89:
cc:b0:88:23:1d:96:ad:21:4f:cb:45:2a:b4:e5:57:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:81:8F:DC:B2:07:C5:2C:E5:F2:23:AA:C4:4A:7E:00:E6:47:1A:BA
X509v3 Authority Key Identifier:
keyid:D1:A8:96:9D:7E:32:CB:F9:27:66:4B:2D:C4:36:B9:6E:71:49:A6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0aiWnX4yy_knZkstxDa5bnFJpis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/27294e-b9e7-4660-932d-21048a734a46/1/0aiWnX4yy_knZkstxDa5bnFJpis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cd:6d:a7:37:12:ad:5a:bc:0a:64:a6:05:ac:f7:3b:85:56:
7b:11:82:c4:30:ea:e7:c6:b0:94:b6:e0:77:d6:f3:f4:0d:cb:
f0:b3:ae:02:ed:9e:9c:86:db:2d:b2:89:25:77:63:bd:d2:3a:
0e:21:5b:18:a8:9b:7e:b9:75:a6:66:35:cb:49:22:e2:90:15:
ab:2b:ae:c0:ac:c9:aa:be:a7:f6:30:36:56:2e:91:b5:a2:2d:
b1:1e:94:87:0a:31:ed:7a:5c:17:2e:a8:bc:53:bb:7f:98:26:
9d:7c:7e:b1:bf:b2:48:88:ea:e9:10:6d:83:fd:ca:4c:95:6e:
5c:99:54:d1:bb:02:62:dc:1c:53:fa:f4:43:5e:a8:df:66:c5:
44:d6:7c:da:e4:53:66:1f:5b:85:79:f7:2e:3e:2e:68:47:b5:
77:c1:07:e6:db:57:a8:2c:4e:80:35:a8:96:a6:ad:02:1e:da:
95:18:8d:9c:63:ca:88:a1:39:8e:b0:51:b8:b4:aa:3c:d9:bf:
b3:dd:cc:02:72:b6:51:d2:f2:75:ff:86:23:fe:b6:c7:a6:a0:
fa:51:3c:75:ca:34:8e:0c:2b:4d:d7:c4:cb:2e:7e:07:ac:50:
9f:d3:11:94:16:df:0a:f9:5a:d8:0c:45:9f:ff:08:5e:59:af:
91:56:3d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 23:50:45 2025 by rpki-client