Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
File: 0QZfT7a2eefxy92ANflnRnAQ6pk.mft (raw, json)
Hash identifier: niFU2+CgabHrJTmYaQBUt1NXISzHFRUUZdL5uz5QWTY=
Subject key identifier: E5:6B:9A:FF:D6:64:B1:B2:ED:78:90:4F:1A:F0:E7:B4:2C:20:61:75
Authority key identifier: D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
Certificate issuer: /CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Certificate serial: 019768F315C448A1E75CEFF5320D4A70C1BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
Manifest number: 0C06
Signing time: Fri 13 Jun 2025 11:00:50 +0000
Manifest this update: Fri 13 Jun 2025 11:00:50 +0000
Manifest next update: Sat 14 Jun 2025 11:00:50 +0000
Files and hashes: 1: 0QZfT7a2eefxy92ANflnRnAQ6pk.crl (hash: R5Wu6UW+F2be+1WQqEjWw8LSkxLscSCxv7uOkfKIaAg=)
2: TLgddA3CgmtAKo-fV94OuzSavi4.roa (hash: tQo/EK/pm7RsFTI12Ej+RxeB7S+rUphRTa4aWGCPu7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f3:15:c4:48:a1:e7:5c:ef:f5:32:0d:4a:70:c1:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1065f4fb6b679e7f1cbdd8035f967467010ea99
Validity
Not Before: Jun 13 11:00:50 2025 GMT
Not After : Jun 14 11:00:50 2025 GMT
Subject: CN=e56b9affd664b1b2ed78904f1af0e7b42c206175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:ec:27:c8:ca:4f:7d:07:b1:89:6a:47:3a:
12:c1:f5:aa:de:bd:0d:35:bb:ad:62:3c:0d:18:22:
94:15:b6:86:64:27:92:ac:ac:5f:7f:f7:ee:7d:ac:
c5:c3:9a:37:ec:77:9a:12:f7:ef:7d:fc:37:60:72:
6b:1c:16:fa:74:7d:f6:85:1d:e7:e5:33:15:24:0d:
f9:b6:d9:58:f9:c0:6a:81:59:0e:9f:ed:a3:f8:39:
88:f7:3d:d7:d6:4a:5d:1d:5f:e0:3d:6e:8d:05:b8:
5c:58:64:b6:3f:28:3f:e6:37:5c:25:5a:27:2f:72:
74:e7:74:0d:e6:f1:2b:a0:11:00:e2:a9:65:a7:b4:
78:e7:86:ab:89:3b:d2:25:20:b1:44:2f:01:d9:3f:
5a:4c:0a:ce:ab:b8:64:d4:65:d3:71:f7:29:3e:ce:
0c:35:c5:01:d4:17:09:7f:67:a7:9d:51:05:2e:69:
8e:fe:b2:2e:ba:d9:05:7d:4c:0f:e9:69:25:87:11:
a9:72:21:bd:1f:ed:bd:2a:45:58:8c:fe:50:f7:42:
c3:72:77:a6:ed:cd:0e:65:a1:b9:49:66:4c:86:62:
ea:ad:5d:ec:ce:72:b5:10:c2:5b:7d:65:ff:85:12:
5d:82:36:a4:0d:5b:b5:63:1a:1b:a4:fb:fd:ea:f5:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6B:9A:FF:D6:64:B1:B2:ED:78:90:4F:1A:F0:E7:B4:2C:20:61:75
X509v3 Authority Key Identifier:
keyid:D1:06:5F:4F:B6:B6:79:E7:F1:CB:DD:80:35:F9:67:46:70:10:EA:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QZfT7a2eefxy92ANflnRnAQ6pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/78f49f-247d-4888-af8d-a1f040e8e8d4/1/0QZfT7a2eefxy92ANflnRnAQ6pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:bd:23:08:08:1c:e6:32:ef:3d:bf:7d:48:27:c9:c4:9c:8d:
43:f3:e4:6b:e1:53:d7:16:19:28:d1:e0:27:a6:59:e5:74:ed:
45:55:3d:77:cf:ce:fb:45:6f:63:aa:4b:e1:b0:5f:9a:5c:8c:
ec:c5:a5:ac:56:16:34:72:e5:15:65:b7:bf:33:f8:89:c3:a6:
4d:c5:a9:4c:43:1a:2e:ea:e3:77:93:6b:e1:0c:0e:c9:dc:7f:
c9:e6:21:a0:bc:e2:e8:9f:8d:45:01:20:9e:f2:7a:fc:1f:c1:
5d:b0:05:32:12:3f:ff:e1:0d:ad:b0:49:13:e8:3c:24:cb:72:
4e:3c:0b:af:08:b0:83:4b:5d:90:c9:95:95:8d:fb:ef:b8:f6:
6b:75:65:c0:78:75:fd:6e:b8:c8:44:a0:f8:5d:63:36:65:4e:
11:d2:8d:b9:50:0c:44:51:5a:ec:ca:fe:c6:bd:50:90:47:53:
6c:ef:48:14:5d:94:de:da:5a:e4:1a:84:cd:fe:2c:8f:ae:05:
46:8f:48:cf:02:de:a7:96:62:dc:c4:b3:ff:0f:33:92:fb:41:
9b:6f:82:1e:21:32:b0:78:0c:80:27:fb:b9:ae:75:5c:10:49:
00:f7:0e:76:98:3b:4c:75:8d:60:6d:60:69:85:37:33:fc:be:
dd:e8:1e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:57:27 2025 by rpki-client