Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
File: 0fbkNwERz7-WhASFQie4CShRRQ0.mft (raw, json)
Hash identifier: gpYiXIVqCSeJlI60Q+2gPcvReMGraSXHxeEnehKyfg8=
Subject key identifier: 9B:DF:06:CD:DB:D6:96:4E:2A:2E:9C:30:C2:0C:C2:87:CB:42:36:F6
Authority key identifier: D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
Certificate issuer: /CN=d1f6e4370111cfbf968404854227b8092851450d
Certificate serial: 019844E38925E39B5F2AD779018BBD654DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
Manifest number: 0E60
Signing time: Sat 26 Jul 2025 04:00:19 +0000
Manifest this update: Sat 26 Jul 2025 04:00:19 +0000
Manifest next update: Sun 27 Jul 2025 04:00:19 +0000
Files and hashes: 1: 0fbkNwERz7-WhASFQie4CShRRQ0.crl (hash: iNr2aXKLcGq4C9vOYEfox32phJtTuUZk+c9b3v87w0A=)
2: w9laCbfNTG9x8SgYBLM8cjfOdmA.roa (hash: WglJOtLwDI5HpNhEnz7a8Exzapc/0A4kuz517Fgs06A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:89:25:e3:9b:5f:2a:d7:79:01:8b:bd:65:4d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f6e4370111cfbf968404854227b8092851450d
Validity
Not Before: Jul 26 04:00:19 2025 GMT
Not After : Jul 27 04:00:19 2025 GMT
Subject: CN=9bdf06cddbd6964e2a2e9c30c20cc287cb4236f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:82:ba:ea:4a:8d:2e:d4:04:94:67:c1:11:e6:
08:2f:1f:9e:21:4f:ad:0a:16:65:bb:c9:b2:30:0c:
ea:a6:a7:dd:5d:bd:06:92:15:a6:81:19:67:0f:4e:
26:84:16:d4:07:24:83:18:4c:91:2f:cc:b9:63:8f:
d7:b7:52:40:b9:cb:88:77:a7:0a:b8:d2:50:12:fb:
c7:2f:ae:24:b0:6f:f3:22:26:fc:6e:46:a8:83:b1:
fb:4e:9a:ca:53:7e:c8:ec:6c:85:7f:f1:8c:0b:eb:
b3:70:7e:01:bf:e3:b4:35:4f:42:76:35:1a:68:09:
d9:93:cf:d1:55:5e:69:80:13:8f:fd:f6:55:2a:3b:
79:ac:cb:4a:b5:ff:bd:f6:1c:ff:fc:4b:fd:74:88:
b4:86:0f:89:1e:f4:16:e7:91:52:7f:3a:f5:b8:b3:
1d:65:f4:55:80:8b:cc:4b:b1:f3:97:bd:90:39:06:
11:aa:3f:7c:69:bf:0b:a3:16:5e:8b:0c:90:a5:53:
8f:22:0d:ac:e4:0a:0d:fd:b7:12:ea:3f:d2:d2:b6:
db:44:f9:0f:c4:f8:cb:02:a6:48:58:b0:10:46:2c:
f5:23:50:09:c3:0c:5e:db:31:f1:57:68:72:16:9b:
2a:74:b1:70:32:d2:89:4a:e3:5b:4a:97:f7:3a:8d:
a4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DF:06:CD:DB:D6:96:4E:2A:2E:9C:30:C2:0C:C2:87:CB:42:36:F6
X509v3 Authority Key Identifier:
keyid:D1:F6:E4:37:01:11:CF:BF:96:84:04:85:42:27:B8:09:28:51:45:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fbkNwERz7-WhASFQie4CShRRQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/59d4e9-662c-435a-b351-4aa539a30d21/1/0fbkNwERz7-WhASFQie4CShRRQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:54:2d:4d:ff:af:1d:d7:e4:e3:cb:85:e3:5b:61:c2:b3:c3:
41:19:35:f3:c4:15:0b:43:9d:86:2d:0c:47:ab:e0:8e:b2:68:
20:06:49:84:54:1b:fb:1c:5f:d3:b9:89:61:79:ac:5d:cb:fe:
1b:64:98:54:1f:0b:24:42:0c:c7:cc:34:7c:5d:bd:fd:67:00:
e2:7d:df:f2:f9:8e:f0:15:f8:e5:dd:b8:80:66:7b:61:34:6f:
a8:d2:cd:08:49:8b:31:6e:50:91:07:a3:72:29:8a:1c:12:1c:
32:f5:60:34:32:57:fa:0f:e3:a0:e6:c0:28:aa:ce:11:1f:be:
9a:34:9a:9a:2c:f4:9d:38:d6:aa:89:66:9f:f0:9a:e1:23:ea:
90:b3:57:45:72:62:ab:ef:2b:b2:6b:03:43:a7:e1:b5:79:2b:
29:b9:1f:6b:ea:b0:eb:3e:bd:e4:4b:1e:db:b4:a4:b4:56:c4:
ba:43:86:7d:73:e2:14:ca:8b:f2:89:2f:41:40:29:d1:52:d2:
bb:7b:cc:f6:e3:38:aa:ff:bd:c6:fa:88:87:64:96:1b:38:4c:
9f:42:ea:bc:01:57:04:99:8e:b0:e5:c9:fa:77:a7:cf:ae:49:
4f:95:29:f1:03:4d:0c:ce:86:04:cd:c3:49:04:c5:a6:c4:ca:
59:da:86:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:31:48 2025 by rpki-client