Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.mft (raw, json)
Hash identifier: Gl4RnZFDlb1uGeJjAJm5bYud5kcFQcN2DYBnQMC6pKw=
Subject key identifier: 98:42:24:38:9D:48:E2:B9:01:DA:93:4E:E6:83:52:15:6B:E2:E1:AA
Authority key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Certificate issuer: /CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Certificate serial: 01976DABCB809216C5756FD04E99414C12A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
Manifest number: 1520
Signing time: Sat 14 Jun 2025 09:01:04 +0000
Manifest this update: Sat 14 Jun 2025 09:01:04 +0000
Manifest next update: Sun 15 Jun 2025 09:01:04 +0000
Files and hashes: 1: 0KNDo37K0r-yw1vZsm1_SLy1dTc.crl (hash: StEirR5924g+fl4/SDbOKaODxeMgILstzpK+BmVXvBw=)
2: cednPNYKxfRsr4W4osQ0UxWr_xg.roa (hash: bAnClABodJAGvw6mOL61pHv3A1a0Gmryz3vjrqAKOxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:cb:80:92:16:c5:75:6f:d0:4e:99:41:4c:12:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Validity
Not Before: Jun 14 09:01:04 2025 GMT
Not After : Jun 15 09:01:04 2025 GMT
Subject: CN=984224389d48e2b901da934ee68352156be2e1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:3c:62:b2:82:dd:74:c7:78:f2:27:60:ab:
06:45:7c:14:9f:1c:d4:97:c1:4c:e4:24:aa:38:d7:
dd:aa:2f:31:d3:15:e6:e1:a3:51:bf:29:53:8d:e7:
a3:ec:74:26:c1:55:49:52:f2:82:45:eb:4d:54:45:
92:58:fe:3b:d2:4c:87:b0:7d:4a:2a:63:be:4a:5f:
38:fe:9e:20:36:a4:18:8f:71:e2:d4:02:e6:0c:36:
c0:84:c9:38:ae:26:cc:b7:18:0e:f0:77:d0:2f:1b:
b6:c2:d1:e3:58:50:07:8e:e8:43:48:34:8e:20:ab:
30:44:13:65:9c:dd:0d:4a:51:1f:2f:08:22:aa:d5:
1c:68:dc:51:f7:20:a4:f0:d1:b7:57:cc:65:e3:0d:
2a:e4:6d:98:ca:de:1a:d2:19:c2:8a:d2:78:dd:f8:
55:3a:19:9d:53:29:45:e6:22:ab:c5:fc:f1:2e:c7:
49:c7:a5:d7:66:bd:4d:66:30:e3:fb:1d:af:d4:8e:
c7:2b:d2:8d:5d:1a:44:c1:94:95:90:20:b7:3e:c9:
c7:a6:05:f3:91:06:7e:c4:0f:ef:8a:40:be:98:e3:
91:84:03:15:9e:2b:39:7b:9f:75:d7:ba:83:ec:e3:
20:c1:d8:e5:4e:41:30:f4:fa:28:93:93:de:27:77:
3b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:42:24:38:9D:48:E2:B9:01:DA:93:4E:E6:83:52:15:6B:E2:E1:AA
X509v3 Authority Key Identifier:
keyid:D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:76:ed:0f:e7:e4:f1:28:69:e5:b8:1d:a5:0e:06:9c:54:72:
69:72:7b:db:5a:de:5d:88:a1:17:9e:e9:56:4b:27:1b:eb:e7:
88:96:e1:bb:da:81:fc:ef:c2:7e:8e:51:33:45:f8:ce:69:12:
bf:bc:41:66:f4:30:7c:a7:d9:0f:9c:3f:fb:03:8c:a4:82:7c:
36:9a:4a:0d:df:83:46:1a:98:de:cc:84:66:7d:ce:6a:3e:6c:
d0:f4:16:a8:e3:39:43:e3:3f:aa:12:df:a1:ab:9c:e2:ed:13:
5a:0e:f2:ae:3d:8d:59:23:76:76:16:d4:39:91:58:b7:64:cf:
14:f1:7b:c9:08:d8:34:1a:96:7a:29:74:e9:a8:9c:e3:b1:d5:
dd:4d:a5:ac:6c:bb:ea:65:27:28:2d:74:82:3c:3c:f6:c9:15:
1f:3e:61:f4:3b:7c:16:c6:68:a4:57:38:5d:8a:4c:89:88:fd:
87:12:0e:9e:39:b1:2f:75:9b:81:9f:59:89:77:fd:8c:5a:05:
bc:2a:c7:eb:2d:47:f4:d8:57:8e:1a:51:fc:b6:5f:c6:cf:9e:
35:f4:18:8a:a3:44:57:90:70:12:71:f2:58:38:c9:7a:33:41:
8f:24:da:7a:63:d4:04:4d:37:cc:eb:c6:e5:fa:65:48:b3:43:
b7:85:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:48:49 2025 by rpki-client