Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
File: RMO0TLvE89paS0KFyW6jy1DU0HM.mft (raw, json)
Hash identifier: qdjea522PXkfHmSe7pmXzw9Om/HIqt7PfvTaN/++UbU=
Subject key identifier: 21:72:25:0C:6B:89:EF:8C:5E:C4:6B:FC:D1:EC:9B:E2:86:89:C7:0A
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial: 01977AF98ECCB0C08C418B4DFB3368F7F16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
Manifest number: 0C14
Signing time: Mon 16 Jun 2025 23:01:04 +0000
Manifest this update: Mon 16 Jun 2025 23:01:04 +0000
Manifest next update: Tue 17 Jun 2025 23:01:04 +0000
Files and hashes: 1: Bfc7EUchdTgGElUv3uM8P6L_JN4.roa (hash: zmd7LnQJEMvAXNDrVc3GmLiOfsPuEL2IoD+oEByUhjA=)
2: RMO0TLvE89paS0KFyW6jy1DU0HM.crl (hash: Oe+WXJ8N/2T289rQk1LMJobjPOOvHXPD3lDS5QLv6sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:f9:8e:cc:b0:c0:8c:41:8b:4d:fb:33:68:f7:f1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Validity
Not Before: Jun 16 23:01:04 2025 GMT
Not After : Jun 17 23:01:04 2025 GMT
Subject: CN=2172250c6b89ef8c5ec46bfcd1ec9be28689c70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:49:c4:a2:f2:40:b0:20:90:1e:99:cf:6f:
46:8f:a8:c9:ee:e2:5b:87:3e:48:40:f6:85:e7:22:
2a:8b:2d:b8:53:40:a1:d7:68:6c:e3:b1:12:b5:78:
f7:a7:15:a1:aa:03:35:06:fb:9b:e8:ca:70:89:a0:
ab:b5:54:6d:3b:cd:6d:83:b9:32:d2:4b:82:2f:34:
18:5f:c5:79:0e:86:29:d6:e3:08:54:5b:aa:61:a2:
76:3e:13:cd:0e:ab:56:b4:23:3c:82:8a:fb:2f:88:
89:29:17:f4:fe:17:c9:10:c5:0a:18:93:f8:22:20:
09:13:ae:89:c0:18:01:8e:87:73:44:86:37:ba:93:
a9:e5:be:d4:69:2e:ec:18:60:48:25:25:c2:71:c1:
b9:4c:12:0c:21:af:8b:a3:16:88:3e:03:94:3e:80:
8e:08:c3:e4:6a:49:f7:5b:ff:5b:69:59:71:c1:71:
63:1e:fa:7a:8c:06:fd:c2:f0:79:52:62:54:e2:8e:
8d:fc:69:6b:6d:f0:21:9b:ae:64:21:86:c8:9b:9b:
5c:2c:80:8a:6b:2f:07:4e:20:79:31:27:18:8e:ba:
04:fa:a9:41:46:77:37:1a:a6:0b:a9:a7:b7:5b:ae:
4e:58:3e:89:ab:cb:87:0f:3f:2a:ad:6b:2c:40:2d:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:72:25:0C:6B:89:EF:8C:5E:C4:6B:FC:D1:EC:9B:E2:86:89:C7:0A
X509v3 Authority Key Identifier:
keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:af:d7:09:54:e0:4e:f4:f7:00:0b:e0:f6:c0:74:74:b5:28:
d8:b7:79:78:df:69:59:5d:b3:d1:a9:48:58:58:96:1b:a7:9c:
57:4c:bf:d1:d9:de:41:7e:dd:e6:90:a2:44:18:de:71:fe:82:
5a:01:0f:ad:fd:40:0c:84:0a:1f:8f:99:45:b1:4c:00:29:82:
ec:c1:f3:86:ac:7b:b0:ca:0a:0f:0f:97:e1:68:1c:ce:45:69:
39:9d:cf:9b:8b:e9:8f:85:c7:84:66:30:0e:20:d1:37:9b:c6:
5b:42:2b:0c:77:cf:0e:15:38:20:f3:e2:e5:d6:d3:c5:eb:92:
ed:9b:e6:ec:a7:9d:85:8d:73:1a:68:d8:f6:8c:56:c5:9f:a7:
43:83:51:31:dc:40:14:90:99:56:94:6d:73:f1:02:69:d7:2e:
a9:30:02:fa:98:87:1c:7d:51:4a:b7:29:b5:7c:56:c3:e1:c4:
d9:9a:55:0d:0a:22:fe:66:63:cb:16:39:e7:6d:84:1d:3b:09:
b1:54:22:ae:9b:8e:3f:fb:f1:45:c6:f7:f2:a9:b8:80:6a:0f:
be:88:1d:5b:02:b1:5f:99:0b:64:dd:d4:c5:aa:20:40:23:85:
45:a3:6f:03:fe:99:e1:51:26:4b:65:91:8b:cc:b0:40:ce:b5:
71:d3:db:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:45:06 2025 by rpki-client