Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
File: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft (raw, json)
Hash identifier: OIO3PnXYkIEKsgKZUHoxbqGr87sqnjAmzsJvt09buCY=
Subject key identifier: 5C:36:53:D4:0B:CF:49:24:D5:BF:00:F5:11:EC:1D:A2:23:07:65:11
Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13
Certificate serial: 01976C988C28AC952C448C2075842EDB4B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
Manifest number: 1178
Signing time: Sat 14 Jun 2025 04:00:25 +0000
Manifest this update: Sat 14 Jun 2025 04:00:25 +0000
Manifest next update: Sun 15 Jun 2025 04:00:25 +0000
Files and hashes: 1: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl (hash: lyYfph1TI1KlutLsC9STdXgTXjevd2kxP6RdFyCZmKE=)
2: f3ZAgsX9I3hAxsDfGccuc4frEIc.roa (hash: 4M3tVBuY11wpuTelZy7jmaALqx1HzWsWmiuVNlUHSTM=)
3: m2ywJd2kQJYTADIv61wmJdARYH0.roa (hash: ZTRMQxv3ksCR8s54WLYLbJtFtPpGkhVtVd7EKUXjlqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:8c:28:ac:95:2c:44:8c:20:75:84:2e:db:4b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13
Validity
Not Before: Jun 14 04:00:25 2025 GMT
Not After : Jun 15 04:00:25 2025 GMT
Subject: CN=5c3653d40bcf4924d5bf00f511ec1da223076511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:98:eb:5c:1a:7f:49:0c:83:5f:7d:ce:aa:
2e:84:bb:fb:ae:54:45:d4:b8:9a:08:96:32:ae:5d:
6c:1c:dc:d2:80:43:97:b5:4d:94:46:b0:55:dd:55:
0f:1a:1a:5a:74:91:65:c0:22:af:5c:03:40:f6:0b:
6c:44:99:d0:c3:2f:e9:a4:83:61:dd:29:a0:ac:ee:
3c:77:ff:15:2d:44:87:72:f3:1a:d3:3c:90:b4:16:
6f:e9:c3:fe:22:e9:90:09:6f:b4:68:f8:c0:39:dc:
ef:dc:48:7a:e0:b4:27:39:91:10:ac:93:d9:4b:23:
39:e3:d1:ba:13:88:cc:b1:55:c2:0b:24:58:20:38:
2d:74:60:df:85:7f:4b:4a:11:08:cd:29:0c:b7:05:
6e:26:08:a1:e3:a4:3e:32:ba:6b:71:c4:c2:5a:3f:
31:36:d3:f5:98:46:eb:3a:aa:ee:2e:66:8f:d7:4b:
33:fc:0f:32:cb:41:7f:85:6e:01:c0:80:48:c3:fc:
3e:98:81:21:09:dc:86:6a:eb:ad:f3:93:0b:1d:d4:
b3:32:ce:d8:12:1c:ac:dd:da:f7:0d:cc:8b:df:85:
88:31:76:f1:e0:19:38:f1:58:8d:ed:68:86:96:b9:
cd:8d:d7:88:59:b6:56:ee:56:61:16:bd:a8:65:95:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:36:53:D4:0B:CF:49:24:D5:BF:00:F5:11:EC:1D:A2:23:07:65:11
X509v3 Authority Key Identifier:
keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b0:1a:b0:98:9d:36:42:a2:4b:b0:8f:0b:ae:a6:9d:61:ba:
59:90:71:9c:d8:01:e7:c8:74:a5:95:27:78:a1:8e:85:f4:56:
91:7b:52:08:08:84:c4:76:da:ea:01:4b:70:57:d8:85:9c:43:
3d:9e:ab:77:d8:32:93:98:e3:45:ee:e9:4e:21:75:88:bb:12:
94:5d:57:6a:58:ef:c1:de:5a:f4:2a:a5:f7:f8:5c:e4:80:da:
4d:56:cf:93:e8:1a:48:35:ea:a6:0f:46:db:e8:ca:2c:fa:0d:
b7:58:85:3e:c5:f9:5b:95:cf:62:8e:97:16:c9:31:ba:10:b3:
3a:ae:57:6d:fe:2e:42:16:f4:47:f2:4b:34:f5:2a:27:74:cc:
5d:b9:33:ff:b7:df:f0:54:72:07:7f:89:6e:4e:5e:4f:30:99:
24:cc:a7:62:d8:d3:92:b9:75:4b:55:40:80:2a:04:25:a0:a5:
54:d2:06:c8:e1:54:29:20:cf:a2:5d:4a:6c:27:57:fc:3e:67:
91:ea:bc:be:e6:86:5b:8a:3a:6a:64:fb:72:59:a8:55:b1:57:
d6:25:4f:ea:e4:ac:e7:b0:7e:86:27:60:69:8e:5f:fa:2c:ad:
9e:6b:6a:61:49:9b:d4:6c:69:c5:db:d4:53:17:64:74:73:4d:
5c:db:7e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:52 2025 by rpki-client