Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: Vapn8tVfM9N3NFOk5aTEBznBeKxOXEZE3kSQ3oIIBq0=
Subject key identifier: 70:F7:62:8C:A1:FF:3E:AD:CF:DC:CA:8D:23:D3:E3:1F:CA:D0:C4:93
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 01976D7446E774407CA057713466564F62E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 0F28
Signing time: Sat 14 Jun 2025 08:00:26 +0000
Manifest this update: Sat 14 Jun 2025 08:00:26 +0000
Manifest next update: Sun 15 Jun 2025 08:00:26 +0000
Files and hashes: 1: 0L_x5KrJ0yONYZL6OhXnnI9ON0g.roa (hash: pLDQ94A0tCs3zB2hMsSvw81lpJnRZzCDTURKCYOZ0g4=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: 9M1bA/AAdEI3oVn7B0v+ulqV6PSWik6p0bZxvtm0DuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:46:e7:74:40:7c:a0:57:71:34:66:56:4f:62:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Jun 14 08:00:26 2025 GMT
Not After : Jun 15 08:00:26 2025 GMT
Subject: CN=70f7628ca1ff3eadcfdcca8d23d3e31fcad0c493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:10:ea:07:23:74:37:21:ad:68:3e:25:04:
ab:3a:bd:40:33:71:3c:72:66:01:14:e2:f6:09:d6:
d0:8d:b0:36:3b:d6:46:f1:46:ed:78:e7:83:56:88:
21:c6:69:85:b8:68:96:08:a2:ad:14:98:49:ce:f5:
7b:b4:bd:05:db:d4:6f:ee:a4:03:08:c8:2e:b5:26:
c0:f4:a5:bf:e7:f5:e7:a7:b3:cb:13:31:91:44:a8:
b7:67:80:36:55:6f:57:cd:cd:a6:dc:28:7a:8d:26:
f3:9c:5e:8a:ee:d4:4f:2d:a8:72:54:10:27:dc:3d:
98:74:47:70:85:8e:68:7f:89:fb:bb:7c:bc:1f:96:
4d:db:4b:01:c3:e1:d5:4e:3a:10:64:0f:6e:3b:c9:
7c:cc:5e:13:d3:5a:c2:00:41:98:ef:5b:87:fe:87:
93:75:d8:dc:0b:c6:d3:b8:73:f3:1c:3a:38:8e:35:
ad:66:6c:d6:8f:ca:72:b7:04:79:51:3f:76:79:c9:
58:42:7f:e5:e4:c9:30:d6:89:97:56:c1:6e:18:1d:
c7:a7:9c:0b:13:a7:a8:d1:f5:70:77:65:a2:7d:84:
db:78:ab:d0:b5:e5:ee:68:92:94:32:52:48:11:21:
52:d5:54:18:b1:3e:c0:67:f9:4a:b3:15:fe:4f:70:
e1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F7:62:8C:A1:FF:3E:AD:CF:DC:CA:8D:23:D3:E3:1F:CA:D0:C4:93
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6a:54:dc:ba:5e:4f:88:58:48:23:99:a6:4d:4e:35:b7:02:
39:fb:17:04:df:ff:7e:99:21:68:e4:97:88:8d:49:a7:69:d1:
98:ab:c1:3c:f9:ba:92:fe:95:1e:b8:43:43:bd:6b:65:da:6a:
ef:b5:e8:6f:df:0e:0a:a9:40:37:5e:74:b4:46:35:e7:0d:0d:
35:18:4f:be:b8:dc:61:7f:a7:0d:c0:36:e7:c7:c4:88:f4:a4:
21:b9:01:b0:c1:bc:9a:5e:02:f6:e9:7a:f5:1b:75:49:38:49:
51:24:fb:88:1d:c0:1b:09:82:26:c9:9d:3d:91:c3:58:a0:15:
cd:b2:0f:59:73:62:7f:93:21:dd:bc:93:dd:92:33:7a:6c:83:
22:71:e7:d7:66:b3:2f:b7:72:50:ef:94:16:7e:ee:fc:a4:4b:
3c:bc:29:7c:8f:44:6f:e9:ac:14:21:0c:3a:ad:10:1a:df:31:
e2:9e:02:87:a9:bc:d7:2d:fd:ec:10:38:dc:aa:54:18:aa:4f:
a9:8a:2d:65:d1:b2:9b:ae:e0:d9:bb:37:8b:c5:77:b1:5f:11:
e0:b0:9f:41:13:0d:18:7e:35:86:f5:75:04:24:11:0e:69:c6:
8e:2b:cf:75:38:9a:14:5a:f8:ef:23:7c:b0:da:e0:50:e3:c9:
20:78:32:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:03:38 2025 by rpki-client