Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
File: 0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft (raw, json)
Hash identifier: OfZn0AzRKDjq3qGYsrl1IGv4jGMgaJM9woiVYh4AOYU=
Subject key identifier: 1A:C4:C3:73:74:1F:F8:3C:DC:CB:AD:66:75:82:CA:79:7A:2C:87:9D
Authority key identifier: D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
Certificate issuer: /CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Certificate serial: 01976A05D32A80DBB501CEC7D34D5E0DE120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
Manifest number: 150D
Signing time: Fri 13 Jun 2025 16:00:56 +0000
Manifest this update: Fri 13 Jun 2025 16:00:56 +0000
Manifest next update: Sat 14 Jun 2025 16:00:56 +0000
Files and hashes: 1: 0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl (hash: U3NX3VgFqIcJmstTnHi0rCpxSQi8GJZBC6EQEJj5SOg=)
2: 8YEIarEZx-dYy-m-KWzFFJwMPgc.roa (hash: /Oh4KoguX/e5aBAHRSFC+nV1NgF/Rk6lBFfGk9GKTMI=)
3: aSUDb8sQcFUdmzbKm4gdVmu_3-w.roa (hash: 8GJtsZCv+fojGQVCn6tX0KvBg6L31AUzVNGq91VjeYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:d3:2a:80:db:b5:01:ce:c7:d3:4d:5e:0d:e1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c7581439a3aa12fea1cd587ec84b7509a3fc7a
Validity
Not Before: Jun 13 16:00:56 2025 GMT
Not After : Jun 14 16:00:56 2025 GMT
Subject: CN=1ac4c373741ff83cdccbad667582ca797a2c879d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e1:61:85:21:ae:00:97:d9:fe:3a:d0:8c:a2:
b0:c6:bb:9f:41:d3:bb:a3:a2:ed:f7:f1:fc:6f:f8:
1b:05:9c:54:1e:61:3c:b5:46:04:ce:ec:9d:3d:b8:
ea:0d:6d:5f:60:dd:f4:1c:23:3d:b5:d6:c4:19:69:
43:bd:0b:31:1d:fe:1a:f7:46:68:38:03:97:f3:09:
16:1e:4c:f9:71:af:22:7a:54:db:be:30:57:33:82:
94:39:8a:3c:42:60:1d:bd:e8:dd:f3:15:16:d0:00:
8b:d8:8e:8d:76:bd:ff:8e:a7:50:dc:cb:d1:9f:d3:
71:6e:ac:47:8e:12:dd:3a:ab:02:b7:5e:74:90:5a:
62:db:34:8a:a9:6b:59:be:f1:b0:d5:09:c0:b2:20:
e5:a8:86:71:b6:47:71:40:c7:3b:9a:b0:90:a6:4c:
da:c2:d6:70:7e:a3:27:bd:45:a5:86:d8:dc:d2:27:
54:58:85:f5:dc:c3:d1:39:01:1d:bd:22:98:03:a2:
b6:f9:28:1e:66:bd:6a:9a:cb:5a:3d:7a:eb:06:08:
b3:e2:b7:a3:65:01:c7:13:65:0d:4d:76:34:be:39:
e2:51:50:bc:f6:c2:7b:db:d6:e0:64:5e:0c:3d:8f:
de:4e:d3:5f:dd:20:05:c2:bf:03:32:b4:d5:e2:d2:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C4:C3:73:74:1F:F8:3C:DC:CB:AD:66:75:82:CA:79:7A:2C:87:9D
X509v3 Authority Key Identifier:
keyid:D1:C7:58:14:39:A3:AA:12:FE:A1:CD:58:7E:C8:4B:75:09:A3:FC:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdYFDmjqhL-oc1YfshLdQmj_Ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6c59cb-84ef-4218-8d7b-ff41d817b443/1/0cdYFDmjqhL-oc1YfshLdQmj_Ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1f:17:8e:a0:2a:6a:c5:b2:0e:ee:bc:69:a8:0c:19:05:f9:
9d:8b:4f:10:4b:ff:9d:33:03:ba:66:f2:b3:e8:16:5b:45:d9:
63:d5:5d:d7:73:cd:31:85:5b:fa:5a:da:18:d8:8d:01:cd:62:
89:53:74:4b:0d:f4:0c:81:49:63:4c:bb:5d:b3:df:c1:6d:b4:
31:b4:c1:e7:9e:76:ac:04:41:52:a9:72:3d:bd:5b:20:97:57:
80:8a:e5:75:60:51:54:57:cd:0a:f1:9a:15:a9:1b:34:8c:4a:
3d:08:44:bc:31:b0:fb:12:b8:c1:8a:a1:d1:23:d1:73:0a:ec:
aa:28:2d:94:5d:60:2b:15:66:b7:52:1a:5b:03:59:49:c0:bf:
13:8b:b1:bb:de:ec:0f:50:45:4e:ba:11:d1:ed:83:95:e0:7a:
7a:fd:71:b1:9f:ee:ab:1c:43:4a:42:b9:f6:67:ce:29:e9:bf:
1c:76:2e:77:c7:72:e5:3a:65:6d:b0:24:3d:36:ac:93:86:90:
be:f1:6b:64:1f:df:7e:e5:b7:05:c0:7e:ac:27:f3:d6:cd:e1:
2e:36:3f:e4:85:84:c3:70:ee:04:9e:20:fa:dd:83:36:43:7e:
82:71:a0:37:a6:12:b6:a8:cf:63:b6:03:f6:e5:a7:8a:44:a8:
4c:e7:1d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:51 2025 by rpki-client