Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
File: 06fDvga8RcPxK5CxhSeK1OyRl1Y.mft (raw, json)
Hash identifier: 8hD1aucvug52X+Bjq/XYhet7qldYdTHgHYt3EHhBUpY=
Subject key identifier: ED:D4:8B:C6:F6:85:A3:01:FD:DA:03:58:10:30:EA:7E:B1:23:1E:A0
Authority key identifier: D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
Certificate issuer: /CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Certificate serial: 0197789D321AAB7EEA85F3C13976287CF7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
Manifest number: 13B5
Signing time: Mon 16 Jun 2025 12:00:57 +0000
Manifest this update: Mon 16 Jun 2025 12:00:57 +0000
Manifest next update: Tue 17 Jun 2025 12:00:57 +0000
Files and hashes: 1: 06fDvga8RcPxK5CxhSeK1OyRl1Y.crl (hash: bk5veV24kBhCQiN3RzH65TXbYgjky8ZNlXnyruG38kk=)
2: tbW3C2BxGOP8RipICwkXorNWMa0.roa (hash: sAyggufTAiW8TAkDGmUgXEYrufIqSzYFIzTOlTIqneg=)
3: u1VhcVTy354RLIy1HL3zp9mHr4s.roa (hash: bTXjEk3aPbxZmee9JV98PLXefqyqj+KHu6+Sm9Lnq+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9d:32:1a:ab:7e:ea:85:f3:c1:39:76:28:7c:f7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3a7c3be06bc45c3f12b90b185278ad4ec919756
Validity
Not Before: Jun 16 12:00:57 2025 GMT
Not After : Jun 17 12:00:57 2025 GMT
Subject: CN=edd48bc6f685a301fdda03581030ea7eb1231ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0a:a5:e8:00:90:ea:18:2e:40:d0:3f:56:6a:
03:e6:38:a2:52:d8:30:74:df:ff:b3:4a:44:f7:41:
81:58:c4:19:55:a3:2e:9b:41:ab:9f:88:11:de:64:
2e:95:a5:d0:f1:40:a6:b2:a7:c7:d0:38:4e:6a:df:
4f:b7:1f:56:27:75:15:5d:98:e8:7a:3d:64:ed:39:
bc:d2:7b:fc:40:28:4d:cb:fc:71:8a:69:f8:fb:67:
37:0e:9b:f9:3a:b5:6e:3e:87:2c:1e:43:c5:14:bb:
b4:33:44:5b:68:0f:87:a6:59:4a:8c:ab:8c:f1:6a:
6b:24:73:eb:30:7e:a7:37:47:af:68:4e:2e:2f:d5:
19:42:b8:12:4b:bc:8a:3c:a5:a0:a7:0c:b2:66:0d:
17:a1:a8:98:6d:8e:30:66:c5:3e:e7:14:c9:7c:2c:
ce:eb:6b:94:0b:27:8f:bc:aa:72:f5:cf:05:7d:57:
82:c0:76:61:73:b3:de:2c:20:83:df:8f:28:75:4a:
7f:f9:09:98:fa:a0:e3:5b:f5:c4:1c:b1:59:ba:6a:
17:15:07:cc:57:c3:06:53:53:d8:75:f5:3c:b6:37:
ff:61:62:c0:2a:05:ac:03:96:19:15:0a:1f:81:8f:
24:a7:86:a6:87:6b:69:44:cc:4d:4e:e7:72:bf:6a:
9d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D4:8B:C6:F6:85:A3:01:FD:DA:03:58:10:30:EA:7E:B1:23:1E:A0
X509v3 Authority Key Identifier:
keyid:D3:A7:C3:BE:06:BC:45:C3:F1:2B:90:B1:85:27:8A:D4:EC:91:97:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06fDvga8RcPxK5CxhSeK1OyRl1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cecfb6-07fb-4275-b06a-8aa50d67037c/1/06fDvga8RcPxK5CxhSeK1OyRl1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f8:b3:f3:de:3c:db:e1:2c:f6:c8:2e:d5:0f:b0:84:fe:99:
42:83:4e:9e:39:b0:86:eb:48:99:d8:75:b7:81:6c:4e:0d:7e:
17:b4:9e:14:33:b8:00:09:9d:c6:b1:41:92:e8:a1:3b:b2:3c:
32:7f:3c:b5:2b:db:9c:10:6f:3b:42:73:42:24:8d:8b:2d:e7:
8c:ac:f1:89:26:d8:72:49:42:fd:da:6d:e9:fe:e6:7f:54:b0:
f5:32:58:56:eb:6b:aa:aa:09:f2:fa:3a:30:32:0d:2e:da:03:
87:4e:3f:b8:c7:b4:cf:06:af:63:5a:7a:27:d2:4f:e0:b9:fa:
ca:69:1b:f1:b3:b2:b9:05:44:3c:d9:5a:c1:95:91:f0:7e:0b:
8b:7c:72:61:c4:d0:97:d0:d4:78:61:40:92:1c:5c:ee:13:f9:
65:40:5e:13:3a:22:4a:62:89:3f:ca:70:02:c3:b5:38:5f:d8:
f0:c5:98:d0:e7:7c:b5:bd:ac:f8:fe:26:5b:6d:10:13:62:83:
8d:51:b9:01:84:a5:4c:2d:c4:ae:0d:d3:ce:79:8a:93:7a:4c:
51:15:3b:d2:5d:69:5c:4a:9c:60:cc:89:a9:54:48:24:44:15:
94:9a:55:e1:cc:51:74:bb:86:fb:24:ce:3d:9e:ee:76:19:dc:
22:1c:91:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:06:12 2025 by rpki-client