Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
File: t5OlR78L4t7tfIT-kC4zZld6IxQ.mft (raw, json)
Hash identifier: i5PumJiw0PJFa154TEjjKqLFwIV4vcqHZtNTOtqVcjU=
Subject key identifier: 8D:9F:17:8C:CD:A9:EC:B3:88:4E:6C:E1:4F:40:70:26:A7:69:80:7C
Authority key identifier: B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
Certificate issuer: /CN=b793a547bf0be2deed7c84fe902e3366577a2314
Certificate serial: 01976DE2F7960638B1C0F8E3AD8252EDCECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
Manifest number: 0E13
Signing time: Sat 14 Jun 2025 10:01:20 +0000
Manifest this update: Sat 14 Jun 2025 10:01:20 +0000
Manifest next update: Sun 15 Jun 2025 10:01:20 +0000
Files and hashes: 1: Fu8V7L-KmE4RQ0KgwQ-l9VyTFvE.roa (hash: G5JYSxAwHyem4a69edN/KGJ90OxsVksEMhgNs6pZaOw=)
2: fuJdLqdlLbSFzR5wICuESp5-Mhc.roa (hash: cagQfCDycKKd/UTpNij0HKDwbg7i0kvIBBf3pZu1p7Q=)
3: t5OlR78L4t7tfIT-kC4zZld6IxQ.crl (hash: m8RhJr78o3iHjhOuw0cbTu5wCHN9H/ypcwfVTNnnHPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:f7:96:06:38:b1:c0:f8:e3:ad:82:52:ed:ce:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b793a547bf0be2deed7c84fe902e3366577a2314
Validity
Not Before: Jun 14 10:01:20 2025 GMT
Not After : Jun 15 10:01:20 2025 GMT
Subject: CN=8d9f178ccda9ecb3884e6ce14f407026a769807c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dd:16:10:d0:83:f9:e9:7d:65:76:93:55:4b:
96:b5:a4:53:de:e8:3e:7d:b7:d5:2e:8c:f0:52:42:
c0:15:5e:2c:4e:36:b7:af:03:25:70:ba:2d:e7:76:
19:18:8d:04:48:29:6c:3d:ba:cc:28:a2:11:00:ec:
cd:a7:b1:14:03:e1:77:5f:ce:1b:ff:17:11:fa:5a:
e8:b5:b4:29:9a:c4:8c:cf:1c:0a:bb:cc:25:a2:b9:
79:b0:dd:27:7c:ed:41:a0:82:0c:c5:b2:dc:58:69:
8d:e4:18:c4:35:9b:de:0e:63:80:56:7f:b1:1f:a1:
c6:65:09:73:3a:4a:fc:5d:ed:50:40:a7:3d:ae:56:
1b:a8:ef:d2:9d:f0:32:ff:8a:ec:55:ac:3f:e1:61:
07:1d:3c:6e:a4:0f:46:f3:09:35:49:9f:9d:68:0e:
f0:e4:28:31:dd:31:98:09:94:f2:0c:b4:39:b0:4a:
95:8e:d1:e2:e5:b0:02:aa:31:7e:b4:50:d7:64:e7:
ac:ec:4f:9a:8c:95:c6:ac:24:ea:e2:23:cd:3e:24:
54:e8:dc:63:19:0d:e7:23:d7:4a:88:6e:a9:b6:07:
96:bd:34:57:67:c3:c0:19:53:05:bc:2e:1d:b1:98:
b5:89:f0:26:d9:6c:72:f5:35:bd:a5:19:b5:2d:9c:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9F:17:8C:CD:A9:EC:B3:88:4E:6C:E1:4F:40:70:26:A7:69:80:7C
X509v3 Authority Key Identifier:
keyid:B7:93:A5:47:BF:0B:E2:DE:ED:7C:84:FE:90:2E:33:66:57:7A:23:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5OlR78L4t7tfIT-kC4zZld6IxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/14f429-03b4-4423-bb4c-f0c33256fb22/1/t5OlR78L4t7tfIT-kC4zZld6IxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b2:78:8c:e9:40:79:d3:88:fb:d3:36:c4:b0:b2:f9:5c:2e:
d7:e4:f9:71:e8:ae:49:c2:d9:ff:ab:c8:45:6b:1f:53:d3:74:
48:eb:a4:40:da:74:b3:80:86:3b:ff:0a:95:9f:66:0c:2a:83:
c1:97:44:da:87:12:29:52:37:95:b2:cf:eb:fb:ba:73:b0:1b:
b2:48:b9:d6:03:60:71:2b:41:3e:43:aa:0e:06:20:ce:a3:26:
71:c1:62:8a:c1:70:6c:28:88:1a:e9:6c:11:e4:ea:75:1d:72:
96:c3:13:59:75:94:0b:c7:c0:e7:6f:be:60:a7:05:fb:22:4b:
d3:76:64:5d:a6:c9:25:68:1f:21:fa:56:ff:9a:23:27:db:7c:
c5:fe:df:63:b6:2f:ef:d7:cb:a3:01:6e:2d:5d:cf:94:1a:b7:
5a:10:c2:4d:56:3c:00:d8:12:27:43:cf:d0:15:d8:5d:fc:f8:
33:45:a3:76:2b:ac:3f:a9:f7:b4:6e:92:dd:81:e2:2f:42:f6:
a0:4e:f9:41:51:bd:57:4f:79:39:90:93:89:ae:a8:96:8d:96:
2f:0f:14:54:f0:e4:5b:e0:e8:c0:d4:fe:c4:55:64:23:a5:38:
5b:05:1e:88:9e:d1:46:b6:80:43:28:53:db:5c:5c:99:f3:4e:
5c:39:7f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:57:40 2025 by rpki-client